$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa File: 54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa (raw, json) Hash identifier: djy13tkaT6JPGff9i6ap9bUmCXbLQY67juMSZWzCbdY= Subject key identifier: 11:DA:EE:86:C9:1C:4C:1A:93:B1:AA:63:DC:85:7F:29:97:AE:46:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6695C7A0CFDEFE731BD020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.21.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:95:c7:a0:cf:de:fe:73:1b:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=bc03fdda-f5fc-436d-b3c9-9cc517ce49da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:9c:6a:5a:5f:13:26:2d:d9:cf:df:d4:d3: 12:16:42:b9:ca:38:90:17:31:4a:9e:79:ef:07:ee: c2:3b:98:67:bf:7c:77:ca:80:5f:c6:27:93:c2:4a: 1e:95:2f:0f:de:aa:73:20:f8:8e:00:f9:de:1a:42: d5:43:2c:c1:2a:eb:14:6f:82:7f:1d:98:62:5e:b0: 5a:46:d1:96:15:d1:50:54:50:9d:df:33:bf:c9:1a: d0:83:24:5d:c1:a0:00:b3:97:61:35:f1:65:1f:dc: ba:37:48:a0:cb:a5:50:d7:aa:42:53:73:f1:4e:cf: 6c:e8:e1:7f:83:52:44:73:8b:95:d5:17:b5:f0:b4: d4:97:21:e3:fa:a9:d8:a9:7b:3b:1d:7f:db:9e:1f: 8a:75:d3:8b:5f:3b:f8:c2:c6:ee:95:9c:7a:76:db: 94:d8:2c:0e:41:98:f8:fb:79:44:e7:21:7d:e9:d6: b4:af:1b:cf:b6:21:3e:bf:d2:66:19:e5:c5:36:71: 03:a5:e6:04:93:27:59:b7:8a:67:62:13:56:be:9c: 51:53:b5:20:8f:df:20:72:a8:e2:3a:c6:64:83:c1: 81:f3:8b:08:24:40:83:40:79:12:3d:3e:0c:dd:d9: a6:26:49:2e:b4:18:dc:dc:8c:0d:c9:ff:6b:0d:cd: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DA:EE:86:C9:1C:4C:1A:93:B1:AA:63:DC:85:7F:29:97:AE:46:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:07:18:2b:3a:8a:56:ee:ee:6d:a3:75:92:06:48:18:35:b7: 74:8b:fc:ff:14:4f:09:7c:54:39:1c:65:6f:bf:b2:1e:46:15: 24:79:47:72:3a:8b:b6:5a:09:9e:a2:ba:e3:f6:a1:bb:1a:15: 94:99:58:ac:9a:5b:42:21:ca:39:1d:88:33:bc:88:3f:aa:95: e3:d9:e3:9d:a9:96:58:e0:cd:81:18:63:27:07:bb:12:62:42: 88:9e:cd:cd:94:a9:96:a9:63:93:4f:6c:1e:89:49:cc:35:db: 27:c4:b4:a9:6e:06:e0:c2:27:2b:eb:2d:db:8d:85:36:54:43: a5:20:50:0e:d9:36:83:d7:80:97:ea:01:3c:9b:e0:67:ee:b7: 82:fe:e0:3a:62:4c:0b:f3:b8:23:c9:88:0b:f7:4e:59:7f:ec: 9b:01:90:8c:f7:6c:a7:ad:b6:5d:1d:1d:0f:35:57:c8:63:df: b9:0c:8a:6f:bb:8d:30:1e:cf:51:ff:1f:9f:56:79:ab:ff:8d: 08:d2:23:2d:8c:d7:c2:f6:74:64:0f:94:a3:44:ed:7a:c2:02: c7:a5:b1:d9:80:16:cf:d4:90:ec:c9:2d:c9:98:34:fb:be:02: 06:a9:da:16:ec:18:4e:2e:c5:be:18:d3:78:c2:9a:be:ac:a0: 1e:df:1e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpXHoM/e/nMb0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YmMwM2ZkZGEtZjVmYy00MzZkLWIzYzktOWNjNTE3Y2U0OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8CcalpfEyYt2c/f1NMSFkK5yjiQFzFKnnnv B+7CO5hnv3x3yoBfxieTwkoelS8P3qpzIPiOAPneGkLVQyzBKusUb4J/HZhiXrBa RtGWFdFQVFCd3zO/yRrQgyRdwaAAs5dhNfFlH9y6N0igy6VQ16pCU3PxTs9s6OF/ g1JEc4uV1Re18LTUlyHj+qnYqXs7HX/bnh+KddOLXzv4wsbulZx6dtuU2CwOQZj4 +3lE5yF96da0rxvPtiE+v9JmGeXFNnEDpeYEkydZt4pnYhNWvpxRU7Ugj98gcqji OsZkg8GB84sIJECDQHkSPT4M3dmmJkkutBjc3IwNyf9rDc1xkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHa7obJHEwak7GqY9yFfymXrkZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRhODNkNDItMWNjMS0z ZTA3LTkxZjUtZmE2MjBjMTMyMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8HGCs6ilbu7m2jdZIGSBg1t3SL/P8UTwl8VDkcZW+/sh5GFSR5R3I6 i7ZaCZ6iuuP2obsaFZSZWKyaW0IhyjkdiDO8iD+qlePZ452plljgzYEYYycHuxJi Qoiezc2UqZapY5NPbB6JScw12yfEtKluBuDCJyvrLduNhTZUQ6UgUA7ZNoPXgJfq ATyb4Gfut4L+4DpiTAvzuCPJiAv3Tll/7JsBkIz3bKettl0dHQ81V8hj37kMim+7 jTAez1H/H59Weav/jQjSIy2M18L2dGQPlKNE7XrCAselsdmAFs/UkOzJLcmYNPu+ Agap2hbsGE4uxb4Y03jCmr6soB7fHmI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:29 2025 by rpki-client