$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa File: 942824f6-6070-3132-8cee-ad290f982789.roa (raw, json) Hash identifier: cUT0I63RnC4p8yb+1WoDqPJc4CHgh/FzKdk7T8rGgKU= Subject key identifier: D4:F6:8E:5B:F1:B1:94:62:86:13:62:AB:D0:B1:C1:B0:0F:93:96:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD669591FC9534A8E92FCC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.17.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:95:91:fc:95:34:a8:e9:2f:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=013d2f64-841d-4f16-827e-f36ab6f3f8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:bb:71:8a:f2:ca:f3:49:1e:94:04:70:db: c8:98:9e:fb:0e:45:8e:1c:79:4a:08:9e:af:df:67: 61:7b:98:97:77:77:4a:d2:87:03:e3:56:6a:dd:69: 7f:dc:0a:08:b8:21:b9:2f:26:b4:7c:c2:66:5d:92: 64:e7:d2:59:38:a6:33:e2:1e:0f:1f:52:9c:15:74: a1:ec:b3:e6:f3:b7:99:82:98:02:60:0e:13:bb:92: d2:04:6d:cb:12:46:08:79:37:e5:47:0c:af:72:16: 71:d0:9a:60:b4:b0:91:c3:6a:cc:18:68:7d:5b:bc: 03:e3:f7:83:6b:1d:8d:19:71:b9:f8:61:a0:a3:c2: ee:71:b7:64:51:29:6a:4b:74:f0:56:64:c2:0f:62: bc:62:c8:9c:93:1b:ae:ba:1b:90:25:11:70:b1:06: 71:13:d9:79:d9:59:de:48:ea:31:d1:a1:f1:b5:94: dc:80:8b:1d:5e:d5:88:41:28:f7:ac:0a:46:0d:9d: a4:42:ca:7f:10:e7:da:6f:fe:60:3b:0a:d1:90:4f: 5a:0e:4d:83:31:bd:3b:82:41:a9:ff:6e:e3:a6:a4: 24:55:66:bf:a8:f7:e2:24:5f:d5:1b:76:a1:99:2d: 56:0c:a6:99:8a:b0:5a:71:13:ea:de:92:00:ae:fa: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F6:8E:5B:F1:B1:94:62:86:13:62:AB:D0:B1:C1:B0:0F:93:96:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c8:ee:81:c5:13:4d:e3:b5:42:60:37:e9:b0:21:1e:95:68: de:d2:dd:85:12:cb:5f:85:07:cf:5e:f5:da:1d:45:84:09:3b: 44:74:d5:21:f9:e9:95:94:3a:5f:d0:c4:79:51:f3:08:6d:bf: 7d:b8:5e:c1:e5:72:46:84:cf:d5:4c:67:d1:e7:43:d4:64:be: ec:09:f4:70:84:42:72:a9:0a:f5:70:ae:ab:ff:22:49:bd:f8: 44:19:eb:b8:4a:22:14:b6:ff:06:0d:3f:4a:41:f8:68:5e:53: fa:26:92:05:b9:86:c2:02:1f:97:4e:cd:ba:40:ad:ac:49:99: 3f:52:a5:4e:1e:05:8b:49:97:40:2d:4a:0f:e6:aa:d2:d7:10: 68:52:15:f9:02:39:5f:da:40:e9:d0:05:10:5d:0c:c9:f3:9b: cc:2a:a1:b2:3c:ed:d5:35:8a:aa:db:bc:c1:fb:18:ac:c9:48: 63:9d:57:4d:ba:d8:93:95:20:59:b0:05:0c:31:e0:f8:26:3a: bb:8b:10:e9:7f:08:9c:64:b0:7b:53:5a:42:5c:39:89:35:1f: 52:52:6f:30:5a:86:34:28:12:53:d6:4f:63:d9:f1:77:f5:b7: 04:86:1b:d4:5e:11:ae:b1:00:0a:31:7d:f2:ac:7c:f1:10:30: ea:1d:2a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpWR/JU0qOkvzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MDEzZDJmNjQtODQxZC00ZjE2LTgyN2UtZjM2YWI2ZjNmOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDG7cYryyvNJHpQEcNvImJ77DkWOHHlKCJ6v 32dhe5iXd3dK0ocD41Zq3Wl/3AoIuCG5Lya0fMJmXZJk59JZOKYz4h4PH1KcFXSh 7LPm87eZgpgCYA4Tu5LSBG3LEkYIeTflRwyvchZx0JpgtLCRw2rMGGh9W7wD4/eD ax2NGXG5+GGgo8LucbdkUSlqS3TwVmTCD2K8YsickxuuuhuQJRFwsQZxE9l52Vne SOox0aHxtZTcgIsdXtWIQSj3rApGDZ2kQsp/EOfab/5gOwrRkE9aDk2DMb07gkGp /27jpqQkVWa/qPfiJF/VG3ahmS1WDKaZirBacRPq3pIArvrEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT2jlvxsZRihhNiq9CxwbAPk5ZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyODI0ZjYtNjA3MC0z MTMyLThjZWUtYWQyOTBmOTgyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfI7oHFE03jtUJgN+mwIR6VaN7S3YUSy1+FB89e9dodRYQJO0R01SH5 6ZWUOl/QxHlR8whtv324XsHlckaEz9VMZ9HnQ9RkvuwJ9HCEQnKpCvVwrqv/Ikm9 +EQZ67hKIhS2/wYNP0pB+GheU/omkgW5hsICH5dOzbpAraxJmT9SpU4eBYtJl0At Sg/mqtLXEGhSFfkCOV/aQOnQBRBdDMnzm8wqobI87dU1iqrbvMH7GKzJSGOdV026 2JOVIFmwBQwx4PgmOruLEOl/CJxksHtTWkJcOYk1H1JSbzBahjQoElPWT2PZ8Xf1 twSGG9ReEa6xAAoxffKsfPEQMOodKrg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:54 2025 by rpki-client