$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa48a363-67be-332c-8e2f-91a514810e30.roa File: fa48a363-67be-332c-8e2f-91a514810e30.roa (raw, json) Hash identifier: tVMpETTI0RT+n9mab4oF6A3nqFZ6nVgV9NofoWhiUww= Subject key identifier: B2:E3:DF:94:02:03:61:F4:0D:93:30:72:00:E9:83:5D:93:E5:29:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38621EAE8A93016A80CAAE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa48a363-67be-332c-8e2f-91a514810e30.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.17.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:21:ea:e8:a9:30:16:a8:0c:aa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=04acf371-3372-4a60-9f8e-12a6ad3885b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:8b:bf:16:e1:a2:a6:98:a9:fc:2f:5e:dc: fa:b0:71:90:76:c6:19:db:c9:4e:35:39:a5:a7:01: 5b:84:43:4b:7e:36:48:64:de:3a:d1:d4:e9:3c:fa: ea:b9:01:b5:95:ca:3f:ed:3d:f3:ac:fe:d9:98:c6: 5c:d5:a3:9b:84:e0:b2:d6:81:84:7e:6c:1e:5d:87: fe:b5:f8:a6:de:f0:49:32:0e:ce:9c:a9:cc:47:8a: 1c:62:4a:69:dd:55:64:3d:11:86:24:9d:aa:66:33: ba:be:38:3b:30:41:ff:07:81:87:88:c4:e4:91:d7: 9c:d4:ed:59:9f:3c:b3:59:8b:0d:c6:f8:ce:92:f5: 90:bd:bc:b0:81:03:fb:16:ff:53:65:f7:84:5d:5b: 0f:3e:6c:ca:28:95:9f:06:01:0b:3e:fc:d0:4b:9d: ff:d9:75:cb:4a:f3:03:35:d6:5b:95:0f:f6:63:fc: 76:d5:26:d6:a2:dc:4e:a9:e5:19:a0:1d:8b:c9:5b: 1b:ee:5a:1f:8b:8c:5a:71:ce:0c:17:94:eb:31:17: 3a:e2:07:3b:57:0d:ce:a2:2d:cc:6c:9b:87:b4:f9: 1b:ce:73:71:a4:12:97:e1:85:94:52:70:de:19:16: 43:cd:41:cd:8e:c7:cd:7a:2f:72:c8:b5:92:fa:64: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E3:DF:94:02:03:61:F4:0D:93:30:72:00:E9:83:5D:93:E5:29:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa48a363-67be-332c-8e2f-91a514810e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:06:8d:e2:97:43:64:7c:5d:8a:5b:b2:1a:78:52:af:a0:7b: d6:c3:4b:50:33:85:03:1b:58:1b:45:aa:77:3b:c4:51:54:3b: 95:fb:f0:d8:c9:41:45:eb:a1:48:05:61:13:bd:77:31:a5:53: 6a:9f:0f:c2:6c:66:15:54:1d:16:e4:22:8f:a9:9a:cf:3d:ac: b5:fe:df:5d:e9:a4:70:74:ba:db:48:1f:80:37:d3:d1:7c:6b: 14:f5:1c:11:ee:98:1a:cf:e7:e3:5f:16:c9:76:1a:f0:24:aa: 54:c5:e9:99:73:7e:fb:f4:19:30:a6:b4:b9:29:e3:e7:b1:a0: 7b:0d:2f:e9:b0:96:1c:80:e2:b5:d9:6d:69:94:f4:29:b7:5e: 7e:74:0b:cf:a8:8c:a7:f2:0a:17:d8:58:c6:aa:a3:0b:6b:96: c4:bc:30:6a:e8:80:b1:9c:73:3f:71:e6:0c:bb:3a:44:af:26: ff:4b:fe:7b:6e:db:2f:eb:a9:f9:a4:f9:8e:63:7b:89:1c:0a: d2:6b:95:4d:d8:ba:58:92:f6:b9:b4:18:0f:39:39:2e:74:8e: d3:7c:b4:bb:ad:0d:37:0b:29:7b:ac:7b:8d:bb:95:2a:f7:39: 79:cb:96:8b:4a:08:6a:71:dc:1d:1e:3a:19:09:6c:6f:f4:cd: 34:9f:cb:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiHq6KkwFqgMquAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MDRhY2YzNzEtMzM3Mi00YTYwLTlmOGUtMTJhNmFkMzg4NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48GLvxbhoqaYqfwvXtz6sHGQdsYZ28lONTml pwFbhENLfjZIZN460dTpPPrquQG1lco/7T3zrP7ZmMZc1aObhOCy1oGEfmweXYf+ tfim3vBJMg7OnKnMR4ocYkpp3VVkPRGGJJ2qZjO6vjg7MEH/B4GHiMTkkdec1O1Z nzyzWYsNxvjOkvWQvbywgQP7Fv9TZfeEXVsPPmzKKJWfBgELPvzQS53/2XXLSvMD NdZblQ/2Y/x21SbWotxOqeUZoB2LyVsb7lofi4xacc4MF5TrMRc64gc7Vw3Ooi3M bJuHtPkbznNxpBKX4YWUUnDeGRZDzUHNjsfNei9yyLWS+mR67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLj35QCA2H0DZMwcgDpg12T5SkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE0OGEzNjMtNjdiZS0z MzJjLThlMmYtOTFhNTE0ODEwZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAGjeKXQ2R8XYpbshp4Uq+ge9bDS1AzhQMbWBtFqnc7xFFUO5X78NjJ QUXroUgFYRO9dzGlU2qfD8JsZhVUHRbkIo+pms89rLX+313ppHB0uttIH4A309F8 axT1HBHumBrP5+NfFsl2GvAkqlTF6Zlzfvv0GTCmtLkp4+exoHsNL+mwlhyA4rXZ bWmU9Cm3Xn50C8+ojKfyChfYWMaqowtrlsS8MGrogLGccz9x5gy7OkSvJv9L/ntu 2y/rqfmk+Y5je4kcCtJrlU3YuliS9rm0GA85OS50jtN8tLutDTcLKXuse427lSr3 OXnLlotKCGpx3B0eOhkJbG/0zTSfy8o= -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:14 2025 by rpki-client