$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa File: 7df32cde-57a3-3204-a1a7-165e477b27bc.roa (raw, json) Hash identifier: QPvMQmyDKIrj3iFFyqke7vBZ1l0SXPfsoq8MaDlYOG8= Subject key identifier: CB:F6:01:DC:2D:69:7F:7C:57:73:18:34:20:E0:45:FA:45:63:16:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D2F2A0B7AE130E5DD080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d2:f2:a0:b7:ae:13:0e:5d:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=3ea8cfdd-57fd-4a34-9ade-89c4f5504edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3d:ab:af:fe:ec:a6:74:5f:4c:bb:a4:bc:4c: 0c:74:43:bf:2b:8b:5d:47:3a:d2:12:cf:76:fb:1a: 6e:59:f8:0b:7f:d1:c9:70:8e:a2:b2:82:de:50:c8: 93:c6:15:5d:62:2b:fa:82:8b:d2:b8:66:91:5b:2b: 29:bb:03:69:5e:63:31:ba:17:c8:a8:d5:96:ac:07: 3e:dd:57:99:92:e7:18:5f:fc:2b:c7:cf:ba:cb:77: ac:a4:23:a5:23:ae:c0:c4:e2:65:d2:38:d1:54:bf: c7:0b:44:09:d1:c4:cc:79:26:00:3b:b3:9d:ce:b4: b4:d2:83:ab:5e:af:51:5c:60:41:72:b2:87:10:97: e4:44:94:0c:d2:2c:0d:27:4f:01:04:dc:78:9c:a5: 7e:32:7e:96:35:43:bf:51:82:56:71:a9:43:54:78: f9:54:55:cb:e9:ef:5e:c9:00:68:a8:94:c0:3c:65: bf:74:ac:ce:b7:fa:33:4e:e9:d2:61:7c:bb:cb:35: 3e:60:52:ac:a9:f0:92:0c:8e:7c:4d:dc:fc:e2:2d: 57:45:98:b9:2b:09:9a:6a:ab:62:2a:a6:8d:4c:9e: f6:20:99:83:7f:96:78:2b:45:94:04:3e:22:f0:c4: 1a:29:be:23:4c:2b:8a:4f:3f:48:a7:9b:a9:09:2d: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:01:DC:2D:69:7F:7C:57:73:18:34:20:E0:45:FA:45:63:16:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:41:24:f1:8d:fc:2f:c3:45:cc:68:0d:90:57:d6:6e:00:88: b9:0f:f8:a8:e3:b5:fb:3c:8e:8b:19:2e:73:96:92:7f:ea:0c: 60:3f:6a:8b:c5:9a:13:b7:f2:e2:21:a2:3e:51:fe:09:4c:59: 01:ca:de:be:2e:d6:26:ea:49:a5:9d:e5:3c:e2:e9:97:68:e1: 44:a9:29:a2:18:d4:58:4d:c2:d7:45:46:14:82:99:fb:87:05: 7b:2e:82:32:9a:2b:0f:27:c1:57:75:f4:31:57:5d:4d:4e:7e: f9:f5:86:16:27:f2:85:aa:ce:57:57:9d:40:4a:04:55:1f:61: 8f:ca:75:e3:a0:31:4a:4e:ef:24:78:c3:a7:44:67:c0:10:6f: f3:aa:cf:0a:be:d3:51:b1:ca:7b:7c:00:07:14:e4:ba:11:00: e3:13:b3:08:34:c5:de:3e:e2:2f:93:60:91:28:8a:ed:ce:45: d9:a8:47:a7:96:4d:14:eb:00:98:87:e5:72:0b:2e:60:cb:5d: 3d:76:eb:98:f6:b7:72:a3:90:eb:d1:52:5f:60:f2:42:f1:5d: f4:69:34:69:41:15:99:d0:76:72:ae:05:20:c6:29:0c:a6:54: 8f:b4:a6:26:19:ad:f4:5b:b6:4d:7f:fe:23:34:fb:fc:62:98: 7d:5c:21:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNLyoLeuEw5d0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk M2VhOGNmZGQtNTdmZC00YTM0LTlhZGUtODljNGY1NTA0ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj2rr/7spnRfTLukvEwMdEO/K4tdRzrSEs92 +xpuWfgLf9HJcI6isoLeUMiTxhVdYiv6govSuGaRWyspuwNpXmMxuhfIqNWWrAc+ 3VeZkucYX/wrx8+6y3espCOlI67AxOJl0jjRVL/HC0QJ0cTMeSYAO7OdzrS00oOr Xq9RXGBBcrKHEJfkRJQM0iwNJ08BBNx4nKV+Mn6WNUO/UYJWcalDVHj5VFXL6e9e yQBoqJTAPGW/dKzOt/ozTunSYXy7yzU+YFKsqfCSDI58Tdz84i1XRZi5Kwmaaqti KqaNTJ72IJmDf5Z4K0WUBD4i8MQaKb4jTCuKTz9Ip5upCS31gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv2AdwtaX98V3MYNCDgRfpFYxYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RmMzJjZGUtNTdhMy0z MjA0LWExYTctMTY1ZTQ3N2IyN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZBJPGN/C/DRcxoDZBX1m4AiLkP+Kjjtfs8josZLnOWkn/qDGA/aovF mhO38uIhoj5R/glMWQHK3r4u1ibqSaWd5Tzi6Zdo4USpKaIY1FhNwtdFRhSCmfuH BXsugjKaKw8nwVd19DFXXU1Ofvn1hhYn8oWqzldXnUBKBFUfYY/KdeOgMUpO7yR4 w6dEZ8AQb/Oqzwq+01Gxynt8AAcU5LoRAOMTswg0xd4+4i+TYJEoiu3ORdmoR6eW TRTrAJiH5XILLmDLXT1265j2t3KjkOvRUl9g8kLxXfRpNGlBFZnQdnKuBSDGKQym VI+0piYZrfRbtk1//iM0+/ximH1cIZU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:28 2025 by rpki-client