$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ee7ebaf3-ad39-3280-918e-8663513dcd54.roa File: ee7ebaf3-ad39-3280-918e-8663513dcd54.roa (raw, json) Hash identifier: Nr0Hhfzk0ZhfdcjrTtcBPLfjGXVQipjZmVKkC4eOmzQ= Subject key identifier: BF:46:D4:5E:E5:7E:99:1C:6D:D2:13:F7:3C:ED:6D:48:B3:3D:16:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB386288309FB85D49B9F8D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ee7ebaf3-ad39-3280-918e-8663513dcd54.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.16.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:28:83:09:fb:85:d4:9b:9f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=1ca4239b-3eb3-4f28-98db-7464cdf2d35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:40:11:0d:a4:ac:b0:66:c0:22:d8:1d:48: 28:29:bf:a1:b8:df:63:ee:62:d1:e4:44:4e:e1:20: f2:6a:18:9a:73:b6:5b:ea:5f:6a:f0:89:c3:99:3c: 70:b4:87:c2:90:52:14:a8:02:04:01:71:3e:f6:05: 00:aa:61:8c:e3:38:f7:43:98:02:d0:ae:05:99:2c: 83:0f:52:d0:5c:5c:d8:4b:1d:cc:08:19:91:95:0d: 31:0a:96:ef:21:5e:aa:76:ba:7d:14:45:a2:56:5d: cd:57:f8:39:7b:41:6d:07:f3:af:f3:4b:42:a1:0f: f3:69:85:a2:7f:df:5f:5c:ee:33:22:d1:d7:35:e0: af:f2:53:50:7c:b1:31:e5:30:6c:ba:30:13:d6:81: c4:30:85:40:c0:ca:e6:63:2e:c9:f0:09:f4:ae:90: 7d:ed:93:cc:d0:5f:23:7d:ae:fb:4d:13:61:33:cd: 52:6b:cc:8a:ef:96:c9:51:c3:09:df:6f:19:4f:e9: f5:12:b1:2c:9c:d9:ff:f2:1e:bf:1b:67:ad:91:5e: 32:1e:aa:d1:85:af:d5:f0:b9:df:a1:ac:10:54:b7: d9:a6:73:84:ad:63:81:e9:db:6e:aa:56:f4:09:0e: 55:5d:c6:29:a1:24:52:06:62:e5:4e:ad:e0:76:25: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:46:D4:5E:E5:7E:99:1C:6D:D2:13:F7:3C:ED:6D:48:B3:3D:16:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ee7ebaf3-ad39-3280-918e-8663513dcd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:9a:43:db:b9:e5:8a:84:db:19:83:4c:f5:d1:8d:69:98:d9: c8:17:7f:b4:10:45:5e:33:d4:dc:45:fe:ff:e8:b5:84:a8:3e: 81:dc:94:9d:c6:31:31:c6:86:02:1a:d3:41:51:00:39:d5:be: b7:cc:5e:4c:aa:f8:85:dc:a8:16:11:29:59:1c:9f:71:6b:b7: f5:2c:9c:b3:6a:8b:3f:e2:f3:64:53:c7:7d:ae:bb:7c:5b:ca: 10:0c:f7:fc:3f:c1:8e:8f:e4:36:bc:fa:da:4c:79:ec:55:e9: 43:1e:ce:1c:7e:0f:d8:59:c8:76:01:b0:bc:57:7b:e2:0c:f2: e5:84:13:40:95:05:09:f0:46:e2:a8:39:f9:06:44:b7:a6:8b: 8c:78:c3:a9:52:1c:da:7f:80:36:9f:17:58:cd:30:bf:e2:55: 8b:a5:e9:36:c6:cd:ea:5d:7f:3f:ad:43:67:b5:9f:30:be:41: cc:74:3b:21:a4:16:7c:5d:7e:3c:c3:dc:1a:3a:46:4f:98:cc: 21:63:a2:da:04:b7:f9:61:59:b1:c8:b4:e4:7f:bc:9d:1b:1a: 36:b2:64:3a:2f:0d:9b:c2:5b:a0:a0:f9:a1:7f:9e:23:0c:22: c3:28:86:4a:35:a1:cd:d9:cf:2d:c0:80:f7:2b:10:c9:a3:1e: 21:84:c0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiiDCfuF1JufjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MWNhNDIzOWItM2ViMy00ZjI4LTk4ZGItNzQ2NGNkZjJkMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oRAEQ2krLBmwCLYHUgoKb+huN9j7mLR5ERO 4SDyahiac7Zb6l9q8InDmTxwtIfCkFIUqAIEAXE+9gUAqmGM4zj3Q5gC0K4FmSyD D1LQXFzYSx3MCBmRlQ0xCpbvIV6qdrp9FEWiVl3NV/g5e0FtB/Ov80tCoQ/zaYWi f99fXO4zItHXNeCv8lNQfLEx5TBsujAT1oHEMIVAwMrmYy7J8An0rpB97ZPM0F8j fa77TRNhM81Sa8yK75bJUcMJ328ZT+n1ErEsnNn/8h6/G2etkV4yHqrRha/V8Lnf oawQVLfZpnOErWOB6dtuqlb0CQ5VXcYpoSRSBmLlTq3gdiVT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9G1F7lfpkcbdIT9zztbUizPRZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWU3ZWJhZjMtYWQzOS0z MjgwLTkxOGUtODY2MzUxM2RjZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaaQ9u55YqE2xmDTPXRjWmY2cgXf7QQRV4z1NxF/v/otYSoPoHclJ3G MTHGhgIa00FRADnVvrfMXkyq+IXcqBYRKVkcn3Frt/UsnLNqiz/i82RTx32uu3xb yhAM9/w/wY6P5Da8+tpMeexV6UMezhx+D9hZyHYBsLxXe+IM8uWEE0CVBQnwRuKo OfkGRLemi4x4w6lSHNp/gDafF1jNML/iVYul6TbGzepdfz+tQ2e1nzC+Qcx0OyGk FnxdfjzD3Bo6Rk+YzCFjotoEt/lhWbHItOR/vJ0bGjayZDovDZvCW6Cg+aF/niMM IsMohko1oc3Zzy3AgPcrEMmjHiGEwJE= -----END CERTIFICATE-----Generated at Wed Aug 6 11:13:21 2025 by rpki-client