$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa File: 5144e87e-9a6d-396f-afff-14dff19a9e16.roa (raw, json) Hash identifier: At1xwoCedzQhSx2b/IZJpuk/rCjeDhOevfg7ddFop3c= Subject key identifier: 07:8C:5F:BF:6B:EE:B0:CF:A4:58:39:85:72:11:9F:85:D5:B7:21:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668CE3ED6FA995BFD2F780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.22.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8c:e3:ed:6f:a9:95:bf:d2:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=afdd3480-6d6d-4170-9ac9-19c2d5291d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:b2:c2:1e:09:4a:d2:ac:65:aa:22:48:30: ff:51:2a:45:84:07:af:d7:5a:17:2a:e2:e8:f6:1e: bc:2b:92:3c:6f:f8:eb:d0:50:db:b1:40:5b:02:e2: 1e:04:41:fe:f8:02:31:c8:78:a2:80:b5:7e:b2:29: 32:20:64:68:80:95:f2:10:7a:ce:c8:70:99:0c:e0: 67:4a:f5:ef:b4:33:dc:a7:0e:8f:23:6d:cc:aa:83: dd:9a:fb:88:3f:30:f5:df:b6:90:3e:ab:7e:d6:be: 1c:1d:a6:42:03:7c:31:df:63:ec:ce:ee:e2:84:59: 34:16:7f:df:26:e6:16:65:3f:31:d6:d0:65:51:11: ed:6f:21:6a:a5:a1:51:22:69:42:b8:69:34:15:61: 80:28:47:0c:18:57:4b:0a:ef:a7:53:03:d9:ed:98: 2d:f4:1f:6b:35:a7:10:c4:0b:df:6d:45:4d:ae:b0: 34:7a:33:13:31:cb:40:43:f3:6d:5f:ff:7e:be:0e: f9:e1:55:01:d6:e2:a4:92:b2:22:df:d7:8f:73:27: 89:c9:9d:5f:84:9e:a8:b0:4c:f2:ff:2c:c7:e1:56: ce:ba:92:5d:f8:3f:56:ad:e9:03:1e:f5:f0:f8:42: 55:ad:86:b9:8a:06:90:71:32:7d:83:81:e5:24:f7: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:5F:BF:6B:EE:B0:CF:A4:58:39:85:72:11:9F:85:D5:B7:21:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:09:45:bb:6b:c9:1d:53:46:89:9f:ec:66:ae:ba:25:6f:8f: 02:a2:6b:e1:37:1a:42:06:f2:a5:b3:ff:19:ae:a4:83:cc:a5: 5c:71:12:a1:56:93:31:09:f7:30:36:83:88:53:61:4f:1d:52: 51:42:72:e5:87:6e:ad:2f:06:5c:2f:03:72:b0:06:4a:bf:c5: b3:cf:82:c1:38:35:82:14:b2:4c:7d:c3:26:f8:a6:41:44:4e: 93:c0:30:93:c1:90:85:86:78:9f:37:c3:f6:f4:3b:b2:3b:b4: 5a:53:c3:9a:16:d5:51:89:fb:03:7f:ef:76:ca:8f:c0:f7:31: 89:f1:01:ae:1c:01:c0:58:dc:1d:96:b2:cc:ac:82:bf:a3:fe: 69:07:04:ed:b6:0d:8e:99:42:5f:fc:26:48:5d:34:cd:fc:7c: 98:af:24:ec:e5:99:4c:cf:c2:56:fd:3a:a4:7f:4d:6d:cd:7f: b7:f8:e9:6f:9f:e8:e9:8b:b7:32:93:c7:fd:b6:0b:70:b3:61: f1:4a:ee:61:91:50:c2:c0:2c:24:8a:84:20:1f:12:c7:ec:dc: 70:75:e2:00:32:60:33:ef:f1:d0:1c:f3:4d:87:c0:e0:fb:07: 94:2a:75:5c:e0:8d:cb:28:bb:39:99:76:55:a2:37:9d:d6:97: 2d:84:36:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZozj7W+plb/S94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YWZkZDM0ODAtNmQ2ZC00MTcwLTlhYzktMTljMmQ1MjkxZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprSywh4JStKsZaoiSDD/USpFhAev11oXKuLo 9h68K5I8b/jr0FDbsUBbAuIeBEH++AIxyHiigLV+sikyIGRogJXyEHrOyHCZDOBn SvXvtDPcpw6PI23MqoPdmvuIPzD137aQPqt+1r4cHaZCA3wx32Pszu7ihFk0Fn/f JuYWZT8x1tBlURHtbyFqpaFRImlCuGk0FWGAKEcMGFdLCu+nUwPZ7Zgt9B9rNacQ xAvfbUVNrrA0ejMTMctAQ/NtX/9+vg754VUB1uKkkrIi39ePcyeJyZ1fhJ6osEzy /yzH4VbOupJd+D9WrekDHvXw+EJVrYa5igaQcTJ9g4HlJPdyiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeMX79r7rDPpFg5hXIRn4XVtyHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE0NGU4N2UtOWE2ZC0z OTZmLWFmZmYtMTRkZmYxOWE5ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMJRbtryR1TRomf7GauuiVvjwKia+E3GkIG8qWz/xmupIPMpVxxEqFW kzEJ9zA2g4hTYU8dUlFCcuWHbq0vBlwvA3KwBkq/xbPPgsE4NYIUskx9wyb4pkFE TpPAMJPBkIWGeJ83w/b0O7I7tFpTw5oW1VGJ+wN/73bKj8D3MYnxAa4cAcBY3B2W ssysgr+j/mkHBO22DY6ZQl/8JkhdNM38fJivJOzlmUzPwlb9OqR/TW3Nf7f46W+f 6OmLtzKTx/22C3CzYfFK7mGRUMLALCSKhCAfEsfs3HB14gAyYDPv8dAc802HwOD7 B5QqdVzgjcsouzmZdlWiN53Wly2ENuk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:11 2025 by rpki-client