$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa File: 40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json) Hash identifier: GspjQ4wxtVE+5ZRnTSLdgeoHugJ7tzyf4R/0aiMDuEo= Subject key identifier: 30:2D:E0:EF:46:AD:92:E7:A1:A0:09:01:69:02:D0:CE:2C:97:C5:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ACF710582832BFCE2AC0BCE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:05:82:83:2b:fc:e2:ac:0b:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=4e916a90-74be-4bb5-ab80-445e3b46232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:f5:f6:f4:1e:9d:81:b3:6f:9e:22:a9:5f: 6f:fa:a9:8d:65:69:09:31:4e:59:fe:65:a9:a0:39: c8:8b:0c:ea:47:d9:ff:ee:d0:58:f1:3f:9b:9d:cd: 43:bf:f6:c5:30:e0:3f:70:5b:0a:94:b8:b5:0d:e9: d5:4d:27:6f:ae:51:5d:33:f3:15:ed:91:8e:34:c7: 50:29:68:10:b3:da:ce:c8:bd:20:09:b4:81:dd:c0: 93:df:49:c3:db:4d:ea:21:38:f8:ee:85:46:d0:4b: 44:db:ac:1e:99:9e:80:d7:ff:d5:e7:0e:7c:f4:51: 15:cb:cd:cb:20:52:ec:e8:43:6a:ce:c2:38:fa:d9: 0a:73:be:4f:d9:6d:3a:a6:e4:f6:0d:aa:be:28:76: ac:84:b2:5e:34:fb:ae:d4:22:2b:9d:3b:7d:5c:46: 61:09:90:0e:14:51:92:0c:d3:73:f8:a2:a2:99:ab: fc:64:bf:27:37:9d:02:80:4d:2b:54:09:bc:50:84: 39:d4:93:bf:ce:6a:0f:85:9c:5c:10:f0:94:db:93: c9:c2:81:25:44:51:55:23:61:39:6c:ee:74:8b:7a: 44:90:8e:13:16:55:8a:1c:86:67:49:eb:cb:18:5a: 98:46:93:66:0a:e2:bc:8c:d9:73:8f:90:92:97:f1: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:E0:EF:46:AD:92:E7:A1:A0:09:01:69:02:D0:CE:2C:97:C5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ed:f7:da:df:87:90:7d:d6:ac:ed:1b:a1:b1:c6:6f:6f:36: 12:0f:ee:52:b6:58:ed:42:19:4e:c1:76:55:88:7a:91:4e:ae: 85:2f:d7:55:fa:51:20:8f:f2:90:5c:bc:2b:fa:ab:55:af:35: 33:2a:94:6a:33:f5:5f:29:7b:1f:3b:51:16:28:d7:6a:d4:55: db:d5:06:6e:ea:04:d6:15:b2:17:7f:9d:f7:0f:7c:65:71:d1: 8a:8c:cc:26:c8:58:87:a8:25:a1:63:b8:a9:89:20:f5:1f:c4: 5d:91:d2:a5:3e:24:c1:47:a9:35:8f:dd:27:c9:61:ff:42:6a: 27:94:1e:8c:d2:75:29:45:8b:5c:34:6f:0f:af:9e:0b:ef:7a: d0:a3:02:bb:77:34:3f:cb:74:44:b2:19:2c:f1:1f:7f:05:85: 35:f7:18:7c:67:cd:27:27:fb:72:ed:8b:3b:8a:64:0e:63:93: 40:c7:2e:fa:88:cb:6c:0a:23:43:9c:d9:ee:ec:42:17:fd:46: a7:d7:09:e5:97:d6:cb:d4:77:c0:d9:e8:6f:7c:8f:48:c3:98: d2:2a:24:df:07:a0:ff:e5:dc:59:e4:10:d7:91:48:96:37:e6: 1d:d9:d7:d2:44:ce:37:9f:78:75:a0:da:6e:26:9e:78:ca:e9: c1:ae:f6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQWCgyv84qwLzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NGU5MTZhOTAtNzRiZS00YmI1LWFiODAtNDQ1ZTNiNDYyMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6n19vQenYGzb54iqV9v+qmNZWkJMU5Z/mWp oDnIiwzqR9n/7tBY8T+bnc1Dv/bFMOA/cFsKlLi1DenVTSdvrlFdM/MV7ZGONMdQ KWgQs9rOyL0gCbSB3cCT30nD203qITj47oVG0EtE26wemZ6A1//V5w589FEVy83L IFLs6ENqzsI4+tkKc75P2W06puT2Daq+KHashLJeNPuu1CIrnTt9XEZhCZAOFFGS DNNz+KKimav8ZL8nN50CgE0rVAm8UIQ51JO/zmoPhZxcEPCU25PJwoElRFFVI2E5 bO50i3pEkI4TFlWKHIZnSevLGFqYRpNmCuK8jNlzj5CSl/EL2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAt4O9GrZLnoaAJAWkC0M4sl8VGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBlMGIzMWUtMDFmMi0z MTdmLWE4ZDAtNzdjZTkyN2EyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPt99rfh5B91qztG6Gxxm9vNhIP7lK2WO1CGU7BdlWIepFOroUv11X6 USCP8pBcvCv6q1WvNTMqlGoz9V8pex87URYo12rUVdvVBm7qBNYVshd/nfcPfGVx 0YqMzCbIWIeoJaFjuKmJIPUfxF2R0qU+JMFHqTWP3SfJYf9CaieUHozSdSlFi1w0 bw+vngvvetCjArt3ND/LdESyGSzxH38FhTX3GHxnzScn+3LtizuKZA5jk0DHLvqI y2wKI0Oc2e7sQhf9RqfXCeWX1svUd8DZ6G98j0jDmNIqJN8HoP/l3FnkENeRSJY3 5h3Z19JEzjefeHWg2m4mnnjK6cGu9ig= -----END CERTIFICATE-----Generated at Sat Aug 23 13:22:02 2025 by rpki-client