$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa File: f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa (raw, json) Hash identifier: wyy8YPOzs+0W7kuRjgtYPqDvrT20wBV8qNNOsd+BkDw= Subject key identifier: A0:C1:40:15:F5:BA:DD:6F:2C:C6:33:BD:D4:8D:2E:70:28:75:9F:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DB12AACEEF54FB641A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.16.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:db:12:aa:ce:ef:54:fb:64:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=706f2363-30f5-4099-9909-63a9db1701ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:9f:a7:f5:88:c2:ba:86:c3:b2:82:5e:ac: 26:43:bc:ae:c3:89:b6:f3:7b:45:38:a3:bf:aa:a0: 06:09:8c:ad:88:86:f3:61:27:8e:cb:fd:2f:c2:f6: bd:ec:9f:08:55:49:73:34:85:df:46:46:35:ee:b6: 64:7f:95:0a:64:b7:2d:72:10:0c:b9:06:7e:a7:51: 59:f6:c4:42:ba:aa:d5:4f:4e:3c:50:fc:9f:21:1c: 33:b9:71:41:26:05:f1:fc:cf:e7:06:7a:2b:53:60: a0:98:68:43:8c:e1:a9:3f:12:0b:0d:b0:2d:62:ea: 2b:b8:58:e5:b1:e3:8b:56:41:cc:cb:ab:7f:11:9b: e8:77:c7:00:3d:8c:56:47:1d:6f:78:8f:7a:f9:b5: c5:48:8d:aa:ac:eb:f0:5a:7e:e3:18:75:40:29:f4: 24:96:76:c7:76:79:4b:47:04:b5:c6:17:7c:46:e7: ee:98:2e:27:3b:d5:3f:2a:87:74:94:59:86:fe:ed: d9:d1:0a:0e:8f:63:75:a8:ad:c3:47:30:67:1b:11: 3c:f7:ab:12:a0:e8:d7:57:5e:99:9a:19:68:23:ff: 20:9c:bf:6b:5a:7c:6e:2c:ff:e6:b3:7b:1c:b6:c3: 65:8c:5d:d8:07:60:73:6d:85:80:32:e3:a9:01:79: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C1:40:15:F5:BA:DD:6F:2C:C6:33:BD:D4:8D:2E:70:28:75:9F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bf:0d:0a:ee:1b:78:4a:49:dd:84:ca:5f:f0:55:32:0c:b3: 3d:ff:9e:67:ed:ad:40:ab:35:21:d7:a9:c9:d3:79:52:32:a7: 15:05:ea:62:4c:da:5c:fa:3e:5a:27:24:73:ed:3b:ab:92:74: 89:91:5c:dc:98:70:d2:27:8b:3c:f0:3d:dc:71:9e:3c:b3:81: 37:9f:87:65:b7:9d:49:af:66:c9:ee:6c:bb:9c:e0:5f:8a:04: c6:2f:8f:56:d9:1e:84:f8:c3:5d:e6:a7:f1:23:d1:34:86:50: ee:d6:ab:4b:c6:ca:ff:3f:62:6a:b1:dd:8d:58:29:25:67:a2: 6a:7f:56:d0:86:4c:98:80:48:d6:93:25:df:63:3a:6e:e3:b1: 76:11:08:33:88:ff:37:4b:33:03:3c:cd:71:e7:a5:ee:23:3a: f1:f9:a8:5e:e8:75:ca:76:9f:af:11:16:be:b7:b4:b4:55:ae: ee:51:8b:98:da:3f:1f:5b:f3:27:e4:9a:29:bd:73:3d:d4:ff: de:13:02:25:90:36:b3:36:ae:12:80:c2:b8:70:e5:b6:8d:0c: 84:7c:f5:6e:90:8e:4b:1f:d0:8b:0b:55:25:76:f9:23:f3:e8: 9b:22:bf:d6:18:e8:d5:99:96:36:e7:83:1d:55:2a:93:60:de: 53:da:55:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNsSqs7vVPtkGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NzA2ZjIzNjMtMzBmNS00MDk5LTk5MDktNjNhOWRiMTcwMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnefp/WIwrqGw7KCXqwmQ7yuw4m283tFOKO/ qqAGCYytiIbzYSeOy/0vwva97J8IVUlzNIXfRkY17rZkf5UKZLctchAMuQZ+p1FZ 9sRCuqrVT048UPyfIRwzuXFBJgXx/M/nBnorU2CgmGhDjOGpPxILDbAtYuoruFjl seOLVkHMy6t/EZvod8cAPYxWRx1veI96+bXFSI2qrOvwWn7jGHVAKfQklnbHdnlL RwS1xhd8RufumC4nO9U/Kod0lFmG/u3Z0QoOj2N1qK3DRzBnGxE896sSoOjXV16Z mhloI/8gnL9rWnxuLP/ms3sctsNljF3YB2BzbYWAMuOpAXlyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDBQBX1ut1vLMYzvdSNLnAodZ+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFmM2I4OWYtMTUwNC0z ZmY4LWE0ZjctYjcwN2UyMGQ5MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa/DQruG3hKSd2Eyl/wVTIMsz3/nmftrUCrNSHXqcnTeVIypxUF6mJM 2lz6PlonJHPtO6uSdImRXNyYcNInizzwPdxxnjyzgTefh2W3nUmvZsnubLuc4F+K BMYvj1bZHoT4w13mp/Ej0TSGUO7Wq0vGyv8/Ymqx3Y1YKSVnomp/VtCGTJiASNaT Jd9jOm7jsXYRCDOI/zdLMwM8zXHnpe4jOvH5qF7odcp2n68RFr63tLRVru5Ri5ja Px9b8yfkmim9cz3U/94TAiWQNrM2rhKAwrhw5baNDIR89W6Qjksf0IsLVSV2+SPz 6Jsiv9YY6NWZljbngx1VKpNg3lPaVck= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:29 2025 by rpki-client