$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa File: ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa (raw, json) Hash identifier: +gpuIEqAWRByjF0B6vNnYvt2TikdCVfFoq/zk78xiEw= Subject key identifier: 44:9F:D0:3F:79:8C:E1:BC:2D:AD:FD:29:D3:F3:EA:17:9B:78:A2:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AA160C933BA12EE93CD0FD880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.23.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c9:33:ba:12:ee:93:cd:0f:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=225aef35-a597-43f4-a7f1-47a704180fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:79:67:74:76:07:1e:43:7b:59:c8:c6:12: 15:0b:cf:1b:d4:a4:d4:42:ef:d8:2c:49:5b:dc:22: 5f:67:cc:32:a8:4e:cc:40:fb:57:9a:d3:a3:92:4e: 60:0a:f2:0c:22:09:35:8b:74:0f:25:8c:2b:01:7a: ee:4f:d3:3a:b5:02:e1:24:03:46:c8:c3:fa:f2:d7: f2:9c:90:08:a4:7c:5c:14:f6:c5:1d:20:51:ab:a7: b7:09:21:91:8b:39:0a:b8:20:2d:ce:8d:35:cd:23: b2:e8:88:e0:31:a6:6b:22:65:d5:e5:b9:2e:cf:49: a3:fe:22:d7:cc:77:6b:03:4d:ca:e6:ca:4e:04:12: 28:e1:15:15:15:02:e5:0c:81:ab:a0:47:c3:6d:d8: d0:aa:2b:7c:51:30:83:ad:ed:ae:97:3c:a9:ae:79: 65:d7:14:b1:f3:af:f5:5d:d9:dc:29:00:86:6b:f5: 12:e7:eb:f6:22:c2:da:85:49:b2:f7:81:01:03:47: f3:91:85:d6:72:5f:6b:4f:35:12:4f:29:7f:0c:0d: e0:86:68:93:79:8d:b5:69:5b:d0:2a:f5:df:83:4e: ee:ca:3e:d3:01:a0:3f:13:71:3a:ca:a1:21:2f:95: 46:d1:09:1e:15:31:87:c0:e6:05:b6:b9:70:de:57: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9F:D0:3F:79:8C:E1:BC:2D:AD:FD:29:D3:F3:EA:17:9B:78:A2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:01:3f:10:82:69:d4:3d:87:95:4f:e9:69:5a:46:cd:da:62: df:1f:79:5e:de:f3:7a:10:85:70:db:31:3a:88:52:f6:7f:e7: bc:7f:5d:b9:9d:bf:8e:4e:f7:c2:52:fb:14:fd:18:1f:2f:2e: 43:13:d8:25:7a:7a:67:46:d9:d1:59:39:10:cf:44:9b:46:60: bb:7c:c5:df:a8:d4:99:d0:e3:e3:1b:e8:f4:c5:dd:d6:af:19: a7:f7:64:a0:de:67:8b:d4:e4:ca:8f:e3:e0:09:63:c0:ec:85: 65:ed:b1:d5:3d:1f:79:29:f0:43:83:f9:be:86:c3:9e:13:6e: 0e:a3:5f:dc:8a:1b:e3:15:dc:17:1e:aa:a7:62:9c:47:b9:56: 26:07:ec:52:9f:f8:d1:3c:0d:ad:fa:6b:69:a7:e6:44:53:29: b6:04:f5:71:af:ed:0f:81:e9:31:cb:89:91:c3:ba:4c:6f:dc: 9d:21:4c:f5:7d:4a:01:33:ac:5e:19:d1:0b:14:cb:c3:c0:c8: 22:ec:89:2c:e1:6d:e3:1c:e9:13:0e:e2:f1:3b:4e:bd:9d:9c: 4f:d6:bf:33:91:3a:9b:78:28:38:84:0c:5b:31:81:99:01:f8: 9f:b4:c5:57:b7:13:28:86:02:c6:85:7c:a4:ba:1c:56:fc:a9: f8:7b:7f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMkzuhLuk80P2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MjI1YWVmMzUtYTU5Ny00M2Y0LWE3ZjEtNDdhNzA0MTgwZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tt5Z3R2Bx5De1nIxhIVC88b1KTUQu/YLElb 3CJfZ8wyqE7MQPtXmtOjkk5gCvIMIgk1i3QPJYwrAXruT9M6tQLhJANGyMP68tfy nJAIpHxcFPbFHSBRq6e3CSGRizkKuCAtzo01zSOy6IjgMaZrImXV5bkuz0mj/iLX zHdrA03K5spOBBIo4RUVFQLlDIGroEfDbdjQqit8UTCDre2ulzyprnll1xSx86/1 XdncKQCGa/US5+v2IsLahUmy94EBA0fzkYXWcl9rTzUSTyl/DA3ghmiTeY21aVvQ KvXfg07uyj7TAaA/E3E6yqEhL5VG0QkeFTGHwOYFtrlw3leA3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESf0D95jOG8La39KdPz6hebeKIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY3ZTgzMTEtMWUyMC0z YjRhLTg4MzQtZTljM2VhMjZkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgBPxCCadQ9h5VP6WlaRs3aYt8feV7e83oQhXDbMTqIUvZ/57x/Xbmd v45O98JS+xT9GB8vLkMT2CV6emdG2dFZORDPRJtGYLt8xd+o1JnQ4+Mb6PTF3dav Gaf3ZKDeZ4vU5MqP4+AJY8DshWXtsdU9H3kp8EOD+b6Gw54Tbg6jX9yKG+MV3Bce qqdinEe5ViYH7FKf+NE8Da36a2mn5kRTKbYE9XGv7Q+B6THLiZHDukxv3J0hTPV9 SgEzrF4Z0QsUy8PAyCLsiSzhbeMc6RMO4vE7Tr2dnE/WvzOROpt4KDiEDFsxgZkB +J+0xVe3EyiGAsaFfKS6HFb8qfh7f8I= -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:19 2025 by rpki-client