$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa File: 2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa (raw, json) Hash identifier: MU/W4ptWiqVvfiQ+i2b9GzyX4SKzUH7q4T5v1ceE+sY= Subject key identifier: 1B:DA:1D:E7:23:AB:2F:6A:F6:C6:A6:00:02:A0:B7:6E:97:97:EE:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668A2A353F8532E3D441E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.23.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8a:2a:35:3f:85:32:e3:d4:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=87946ab6-45d8-42ce-b833-7eedd3e4fd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:a3:f3:0e:ca:d1:ad:16:26:68:6a:fb:12: 17:fd:58:0d:be:8d:27:da:30:92:03:30:90:6a:84: 40:ae:95:f7:0d:d6:c1:2f:f1:1f:8a:77:6e:a6:b9: b3:b6:45:8d:f6:b5:1d:55:cb:8f:6a:d1:de:19:cb: 47:a9:f3:98:f1:9e:34:4d:9d:bb:d1:2a:03:3f:30: 66:57:26:6d:ba:64:69:36:d5:27:67:24:0c:5f:c6: 70:c9:0d:a0:af:af:a7:52:ab:9b:7e:9a:79:f0:39: 78:25:96:6a:7b:e6:d6:cb:0f:21:96:6f:d6:36:d6: 7a:8b:3d:88:d4:d5:43:af:5e:87:70:cc:26:72:99: d3:fe:8b:97:c1:a1:56:67:58:21:80:2f:b2:97:93: a2:1a:79:02:35:a4:55:02:33:27:d6:86:f7:39:0f: 8d:44:e3:a0:da:2b:e3:ba:66:54:fd:f7:98:f2:d9: b0:b0:10:fc:84:8a:7d:d3:fa:6b:4c:2b:2a:10:7d: 72:d5:7c:6c:4e:72:38:7b:dc:f0:29:64:e9:b6:db: 97:5b:e5:54:a1:25:81:f3:e7:10:50:5f:f9:35:9b: c4:f3:bb:54:06:e6:19:a6:ee:34:50:ee:ef:e7:4f: 2d:5c:0f:e1:5f:8a:6c:a1:bb:a0:2a:84:2e:04:27: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:1D:E7:23:AB:2F:6A:F6:C6:A6:00:02:A0:B7:6E:97:97:EE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:11:f5:4e:2f:ed:63:21:a7:03:d0:d7:04:05:88:02:11:7a: e2:e7:89:54:54:ca:00:6d:10:76:3d:3c:26:67:1a:25:83:1d: bf:a4:2f:5f:03:16:4e:24:72:88:dc:dc:db:23:b3:3d:13:12: bc:fb:7f:2c:58:ba:9e:92:97:56:98:87:8d:e3:e3:3a:3f:3f: 75:11:05:d2:21:b7:f2:36:2e:ad:b5:1a:08:38:2d:05:e2:c3: 34:b7:11:cc:c3:0a:1b:00:ad:b5:fc:f4:68:79:79:6a:ee:94: 19:19:9a:07:a2:a7:b1:9a:ae:fc:0e:53:2b:79:3c:da:e4:85: 9b:99:7d:12:7b:c1:fb:25:52:f4:1a:0e:8c:28:fc:17:30:64: 6d:81:28:38:db:3c:af:ec:f1:1a:58:fd:d1:2a:df:9c:0a:34: 6d:cb:2f:40:ad:38:63:40:b5:cf:c2:c7:c2:7f:b1:1f:d0:c4: 5d:77:13:df:19:c4:5c:20:a5:4b:bf:fd:34:72:09:5f:7b:ec: 8f:53:20:88:75:45:6b:0c:47:6b:df:d7:16:5a:fb:06:36:08: 74:54:1b:f5:c4:df:39:16:76:6e:cb:0a:d6:99:fe:fb:5a:3b: ef:98:ea:fd:d4:da:03:89:d0:59:b8:08:de:3e:0b:53:c0:cc: d1:03:c9:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZooqNT+FMuPUQeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODc5NDZhYjYtNDVkOC00MmNlLWI4MzMtN2VlZGQzZTRmZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS6j8w7K0a0WJmhq+xIX/VgNvo0n2jCSAzCQ aoRArpX3DdbBL/EfinduprmztkWN9rUdVcuPatHeGctHqfOY8Z40TZ270SoDPzBm VyZtumRpNtUnZyQMX8ZwyQ2gr6+nUqubfpp58Dl4JZZqe+bWyw8hlm/WNtZ6iz2I 1NVDr16HcMwmcpnT/ouXwaFWZ1ghgC+yl5OiGnkCNaRVAjMn1ob3OQ+NROOg2ivj umZU/feY8tmwsBD8hIp90/prTCsqEH1y1XxsTnI4e9zwKWTpttuXW+VUoSWB8+cQ UF/5NZvE87tUBuYZpu40UO7v508tXA/hX4psobugKoQuBCf/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvaHecjqy9q9samAAKgt26Xl+6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY1Zjk5MjQtOTZlOS0z ZjE2LTg5NDUtMGJmOTYxZjBjNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8R9U4v7WMhpwPQ1wQFiAIReuLniVRUygBtEHY9PCZnGiWDHb+kL18D Fk4kcojc3Nsjsz0TErz7fyxYup6Sl1aYh43j4zo/P3URBdIht/I2Lq21Ggg4LQXi wzS3EczDChsArbX89Gh5eWrulBkZmgeip7GarvwOUyt5PNrkhZuZfRJ7wfslUvQa Dowo/BcwZG2BKDjbPK/s8RpY/dEq35wKNG3LL0CtOGNAtc/Cx8J/sR/QxF13E98Z xFwgpUu//TRyCV977I9TIIh1RWsMR2vf1xZa+wY2CHRUG/XE3zkWdm7LCtaZ/vta O++Y6v3U2gOJ0Fm4CN4+C1PAzNEDyTI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:15 2025 by rpki-client