$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa File: f0d0f913-7559-3d06-ac30-36057e4c69cc.roa (raw, json) Hash identifier: t0dNybmKgKguWkWK8sn0f+RfRushf8CL1xru5Rr/NqA= Subject key identifier: 56:C4:31:63:40:A9:91:BC:0E:0F:5A:D7:CB:A4:49:6C:66:FF:C0:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D5EBBB5D1009994254E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.20.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d5:eb:bb:5d:10:09:99:42:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=6fe9e421-6c2b-41dd-ac2e-160a5438af28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:da:55:d6:99:49:4d:91:88:f7:6f:9e:a6: 44:b4:98:57:18:15:f8:52:ba:d8:9d:a2:25:8b:7f: 12:6a:2a:cd:a7:77:f8:16:95:53:9c:5d:33:fb:4d: eb:19:37:6b:da:52:c4:70:6e:f8:ca:a5:9d:c1:2d: 96:2f:c2:99:2e:7f:a6:da:99:c6:f8:ff:a8:d4:8d: 38:fb:2c:d0:4b:6b:b8:09:5e:ec:a7:8c:04:30:96: 5b:ec:da:35:46:12:ca:7e:5d:eb:35:9e:74:6f:51: b9:82:be:a9:79:e7:7a:25:b1:cc:3f:ce:a6:34:48: e4:a3:2e:65:c0:ca:b2:f1:d5:cf:b3:17:f2:95:71: 73:c5:b2:ae:2f:7a:8f:8e:77:78:bc:9b:fa:6a:40: 45:b3:a6:e3:11:aa:a5:31:76:42:fa:d6:96:8a:35: d3:95:f1:81:96:6c:96:c6:75:25:37:b0:d0:bc:5d: 95:14:a3:2a:84:4e:da:2b:b6:a7:3f:fb:45:42:46: 5b:fd:74:c1:af:ef:28:21:5b:5f:06:fb:ac:e7:62: 65:89:2b:32:26:5b:1e:17:33:5b:5b:fb:9c:6f:57: 31:e5:ed:d2:0b:fc:7a:39:da:d4:f7:dc:bd:2e:93: d4:ca:53:37:88:da:81:d0:8f:53:0f:ce:a2:cf:1f: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C4:31:63:40:A9:91:BC:0E:0F:5A:D7:CB:A4:49:6C:66:FF:C0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e3:ac:82:94:e6:48:9c:64:fc:93:71:9d:c5:ab:5d:ec:72: d7:8c:ec:a3:ce:35:67:0a:76:9f:02:4c:70:f8:f9:ac:8c:69: 0c:11:8e:cb:8e:5e:66:5d:23:0f:1e:87:8f:3b:4f:f3:58:06: 68:f2:ec:09:8f:4a:1a:42:f2:ae:1f:03:e6:ed:e0:3e:ef:cf: b6:21:68:fa:3b:c9:d6:9e:c3:f0:ab:38:ba:1a:a1:68:7b:38: f2:55:3c:20:17:f7:a9:de:71:ad:50:e6:95:19:77:60:ef:7b: 27:f5:6d:6e:72:dc:fe:15:b9:a9:89:d6:bc:ac:70:ec:e0:bb: 0a:bc:6a:14:ef:ce:06:e2:0e:34:04:bd:8e:18:93:8f:9e:74: ae:28:2b:ba:70:42:bf:f2:5e:d0:ac:b5:69:68:d2:08:68:3f: b7:e3:40:b1:10:e4:b8:13:ce:61:f2:ee:d8:85:8b:00:53:ff: 0c:d7:42:83:48:72:71:cb:a7:80:0b:50:ab:ca:23:c5:13:b8: 1b:e1:13:0c:e0:47:76:e0:53:96:3e:b0:15:10:3b:71:58:6d: d2:a6:06:8c:cb:51:b4:0d:08:60:08:16:52:4a:a2:42:2b:69: 72:a7:69:82:34:f0:93:50:cb:cd:48:91:9d:7f:b9:7b:e6:0a: b8:0d:d6:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNXru10QCZlCVOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NmZlOWU0MjEtNmMyYi00MWRkLWFjMmUtMTYwYTU0MzhhZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH/aVdaZSU2RiPdvnqZEtJhXGBX4UrrYnaIl i38SairNp3f4FpVTnF0z+03rGTdr2lLEcG74yqWdwS2WL8KZLn+m2pnG+P+o1I04 +yzQS2u4CV7sp4wEMJZb7No1RhLKfl3rNZ50b1G5gr6peed6JbHMP86mNEjkoy5l wMqy8dXPsxfylXFzxbKuL3qPjnd4vJv6akBFs6bjEaqlMXZC+taWijXTlfGBlmyW xnUlN7DQvF2VFKMqhE7aK7anP/tFQkZb/XTBr+8oIVtfBvus52JliSsyJlseFzNb W/ucb1cx5e3SC/x6OdrU99y9LpPUylM3iNqB0I9TD86izx+6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbEMWNAqZG8Dg9a18ukSWxm/8AwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjBkMGY5MTMtNzU1OS0z ZDA2LWFjMzAtMzYwNTdlNGM2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTjrIKU5kicZPyTcZ3Fq13scteM7KPONWcKdp8CTHD4+ayMaQwRjsuO XmZdIw8eh487T/NYBmjy7AmPShpC8q4fA+bt4D7vz7YhaPo7ydaew/CrOLoaoWh7 OPJVPCAX96neca1Q5pUZd2Dveyf1bW5y3P4VuamJ1ryscOzguwq8ahTvzgbiDjQE vY4Yk4+edK4oK7pwQr/yXtCstWlo0ghoP7fjQLEQ5LgTzmHy7tiFiwBT/wzXQoNI cnHLp4ALUKvKI8UTuBvhEwzgR3bgU5Y+sBUQO3FYbdKmBozLUbQNCGAIFlJKokIr aXKnaYI08JNQy81IkZ1/uXvmCrgN1mU= -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:34 2025 by rpki-client