$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa File: 2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa (raw, json) Hash identifier: epygsGbLsWR5wim91MCzCVctTJAMwlCQ8RwQSZ64DYU= Subject key identifier: 03:40:E1:AE:68:E4:DC:68:1B:A5:96:A8:EA:05:66:33:57:A0:6B:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ACF7109B830FB538B39F98500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:09:b8:30:fb:53:8b:39:f9:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=eef3e48c-50ce-4adc-8770-0e68bc04f6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:39:65:c9:41:e2:b7:04:af:6e:a1:f4:99: de:75:ad:30:c5:a5:cc:2e:b1:74:8f:6c:0a:33:0a: cc:21:57:54:a4:d6:e3:95:25:2d:ab:c8:d2:c1:f8: f5:f4:1b:da:a9:fe:d4:93:e0:31:83:45:25:8f:82: 79:ca:bb:e8:0f:5f:7c:76:4c:d7:cf:94:50:d4:d1: bd:db:d2:85:13:99:89:08:37:03:35:a7:5e:f9:60: 73:fb:5b:32:69:ea:99:4a:b1:1a:35:24:0a:c1:7c: ef:27:c5:9d:8f:07:1d:4f:08:c0:b3:c4:af:f8:c3: a6:43:c9:67:4d:a4:7e:fe:8c:b9:98:d1:1e:3e:e1: a2:a5:89:3f:c4:57:68:92:03:ad:ac:ad:4f:aa:7f: ad:24:0b:f9:4e:dc:bf:f0:c7:32:62:45:86:b9:db: 11:ca:f2:f3:45:d8:8e:e7:fa:23:86:68:a6:e7:3a: 7b:e3:c0:ee:96:0f:ca:90:04:43:00:87:4d:ba:98: 44:a7:5e:fc:b9:0e:32:ef:98:55:ce:71:b5:70:e7: 08:6b:c7:d4:28:a8:16:09:a5:1f:87:24:e6:58:68: 19:20:11:ab:32:8c:49:77:76:48:b0:f4:80:0c:9a: 9b:32:d7:c4:92:31:7e:7f:96:12:f0:23:58:f8:99: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:40:E1:AE:68:E4:DC:68:1B:A5:96:A8:EA:05:66:33:57:A0:6B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2550861b-e6d7-3e52-a3a8-3f9bb5309eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:21:fb:c1:81:ad:45:fe:84:b8:5f:cf:6e:04:cd:a5:1a:06: 40:c7:43:f8:b7:83:8d:d8:c8:52:b1:91:33:ea:90:53:fc:ea: c1:d8:31:33:c7:c4:f8:c8:c6:c2:18:8a:22:d7:a3:b5:14:c9: 92:8d:8c:99:d3:dd:73:7d:c0:de:27:01:c4:cf:92:86:0a:01: d3:6b:e3:8f:96:d9:5a:47:4b:28:93:c9:75:8b:6b:3e:8b:15: eb:67:69:e6:e3:ea:c5:55:49:18:b2:81:bd:90:75:fb:e2:00: 5d:78:23:36:e0:dd:bd:25:d4:e9:5e:8b:72:68:1a:ce:25:a4: a4:32:ae:eb:7c:ad:bc:e6:f3:02:fc:b6:93:6c:2b:81:40:7e: 54:99:69:e0:a3:58:e6:88:a6:f5:b9:21:cb:40:38:33:79:8a: c0:76:49:e5:72:54:f9:6b:1d:ca:7e:b4:b0:89:ae:35:60:7c: 49:e6:8e:04:d8:87:8c:46:9c:58:d5:99:75:d9:d5:cc:e8:9f: 6f:45:e7:2e:fd:a7:2a:db:34:97:1c:13:d1:86:42:64:54:b0: 53:39:14:1b:29:56:57:9a:5b:8e:3e:24:65:c2:05:b4:fc:97: 0e:45:02:b1:e9:e2:92:3c:4c:06:a3:da:7a:15:12:68:d9:a1: a3:bb:f8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQm4MPtTizn5hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZWVmM2U0OGMtNTBjZS00YWRjLTg3NzAtMGU2OGJjMDRmNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOY5ZclB4rcEr26h9Jneda0wxaXMLrF0j2wK MwrMIVdUpNbjlSUtq8jSwfj19Bvaqf7Uk+Axg0Ulj4J5yrvoD198dkzXz5RQ1NG9 29KFE5mJCDcDNade+WBz+1syaeqZSrEaNSQKwXzvJ8WdjwcdTwjAs8Sv+MOmQ8ln TaR+/oy5mNEePuGipYk/xFdokgOtrK1Pqn+tJAv5Tty/8McyYkWGudsRyvLzRdiO 5/ojhmim5zp748Dulg/KkARDAIdNuphEp178uQ4y75hVznG1cOcIa8fUKKgWCaUf hyTmWGgZIBGrMoxJd3ZIsPSADJqbMtfEkjF+f5YS8CNY+JnmfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANA4a5o5NxoG6WWqOoFZjNXoGsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU1MDg2MWItZTZkNy0z ZTUyLWEzYTgtM2Y5YmI1MzA5ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgh+8GBrUX+hLhfz24EzaUaBkDHQ/i3g43YyFKxkTPqkFP86sHYMTPH xPjIxsIYiiLXo7UUyZKNjJnT3XN9wN4nAcTPkoYKAdNr44+W2VpHSyiTyXWLaz6L Fetnaebj6sVVSRiygb2QdfviAF14Izbg3b0l1Olei3JoGs4lpKQyrut8rbzm8wL8 tpNsK4FAflSZaeCjWOaIpvW5IctAODN5isB2SeVyVPlrHcp+tLCJrjVgfEnmjgTY h4xGnFjVmXXZ1czon29F5y79pyrbNJccE9GGQmRUsFM5FBspVleaW44+JGXCBbT8 lw5FArHp4pI8TAaj2noVEmjZoaO7+HI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:37 2025 by rpki-client