$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa File: f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa (raw, json) Hash identifier: Zv69z+iWwsapckrAxbcu4k4XG2SReBMha0ilBZ2FKEU= Subject key identifier: 42:30:29:EF:E1:31:44:C4:08:68:57:5B:33:0E:D8:68:A0:FD:18:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B75CC8E2320144F1A0740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 98.23.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:75:cc:8e:23:20:14:4f:1a:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=6c1c3606-649b-4724-9398-6191e7e5ce5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:94:16:b4:65:cd:d1:e5:c6:24:c7:91:dd: 7a:28:47:79:31:83:b8:9d:c6:5e:32:c4:e8:03:bb: 8b:70:bd:42:71:34:1c:9c:97:75:33:e9:5f:a7:15: 09:8c:82:36:4b:89:54:27:61:6e:73:84:b0:ca:e2: 27:a8:b4:90:16:76:25:a1:ab:58:19:a9:8f:24:5d: 06:27:47:3b:ce:be:b3:a3:d3:24:d1:a8:8a:56:11: 7b:f0:75:ec:c9:05:d4:96:b6:01:1d:c3:50:cb:bc: 15:89:6e:0e:68:f4:62:b1:8b:74:0b:f3:1a:62:0c: 86:95:cb:4d:6e:88:66:e2:6d:a2:e7:d9:cf:49:6c: 1f:c6:3f:4f:6a:3c:7d:8c:2a:47:87:94:0f:be:49: b6:b6:07:bd:d7:53:6b:70:7e:15:90:3d:b1:0a:44: 35:72:b8:27:6d:57:86:46:4d:53:63:59:1e:3e:0d: 19:be:d4:0c:12:42:88:80:bc:50:80:6d:69:dc:df: 3f:36:56:28:ac:8a:5b:e3:7a:a7:bb:60:c3:4b:40: b7:77:0f:1f:88:a7:6d:2f:73:da:e6:92:1f:fc:7c: 3d:78:90:a9:d9:fe:10:03:c9:30:5a:27:dd:0a:7d: 85:c5:cc:e1:a8:73:f7:c6:bf:e6:8f:90:eb:39:98: 64:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:29:EF:E1:31:44:C4:08:68:57:5B:33:0E:D8:68:A0:FD:18:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f3:13:fc:24:76:e9:53:6e:20:3f:af:1d:05:53:50:81:ea: 1e:8a:e8:cc:4b:62:02:b7:33:01:fc:1b:2f:16:0f:32:85:bf: 1c:71:fd:f1:45:c8:fd:50:ae:e6:61:df:2c:75:0e:74:7c:cb: ae:7b:cd:04:0d:ad:23:84:08:d6:74:6e:f7:5f:be:df:36:aa: 95:6b:82:be:1c:fc:4a:6f:88:c9:49:72:61:02:5f:3d:a9:89: ff:30:82:54:8f:85:42:1e:68:12:48:6a:d8:25:48:40:4d:f7: 50:f0:fb:a5:68:26:47:f2:0a:cf:50:8a:87:7e:96:36:44:93: 03:c5:27:2b:18:ff:06:9a:f7:be:fc:d6:d3:20:a8:c0:a3:70: b8:3f:ca:cf:19:17:c5:f1:53:bd:f5:4f:fa:5c:14:d3:88:7f: 01:25:29:42:3d:26:99:e7:5f:05:7b:5c:d3:1e:8e:6b:07:90: 42:05:f1:ae:18:5e:e2:66:80:8d:48:53:34:1c:7c:1c:bb:40: e6:0f:f7:19:ba:de:8b:5d:34:bd:2d:a1:0b:c7:72:3f:be:03: 23:4f:02:3a:60:5d:ef:db:53:3d:56:e0:f0:2f:99:6a:a3:62: dd:19:a2:1c:71:b2:4d:1f:0b:f1:72:16:fc:7c:cc:a7:e2:39: c3:7c:c4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3XMjiMgFE8aB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NmMxYzM2MDYtNjQ5Yi00NzI0LTkzOTgtNjE5MWU3ZTVjZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5+UFrRlzdHlxiTHkd16KEd5MYO4ncZeMsTo A7uLcL1CcTQcnJd1M+lfpxUJjII2S4lUJ2Fuc4SwyuInqLSQFnYloatYGamPJF0G J0c7zr6zo9Mk0aiKVhF78HXsyQXUlrYBHcNQy7wViW4OaPRisYt0C/MaYgyGlctN bohm4m2i59nPSWwfxj9Pajx9jCpHh5QPvkm2tge911NrcH4VkD2xCkQ1crgnbVeG Rk1TY1kePg0ZvtQMEkKIgLxQgG1p3N8/NlYorIpb43qnu2DDS0C3dw8fiKdtL3Pa 5pIf/Hw9eJCp2f4QA8kwWifdCn2FxczhqHP3xr/mj5DrOZhkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIwKe/hMUTECGhXWzMO2Gig/RgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjNiOGFhYmUtZTI3ZC0z NDgwLThlNzItNWI5Zjk2OWJjOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYheAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLzE/wkdulTbiA/rx0FU1CB6h6K6MxLYgK3MwH8Gy8WDzKFvxxx/fFF yP1QruZh3yx1DnR8y657zQQNrSOECNZ0bvdfvt82qpVrgr4c/EpviMlJcmECXz2p if8wglSPhUIeaBJIatglSEBN91Dw+6VoJkfyCs9Qiod+ljZEkwPFJysY/waa9778 1tMgqMCjcLg/ys8ZF8XxU731T/pcFNOIfwElKUI9JpnnXwV7XNMejmsHkEIF8a4Y XuJmgI1IUzQcfBy7QOYP9xm63otdNL0toQvHcj++AyNPAjpgXe/bUz1W4PAvmWqj Yt0Zohxxsk0fC/FyFvx8zKfiOcN8xPQ= -----END CERTIFICATE-----Generated at Wed Aug 6 11:11:40 2025 by rpki-client