$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa File: 99b607dc-2978-3b44-84fa-7abdd10b450a.roa (raw, json) Hash identifier: tPa8SxD4vxZL68EGMCeWBKhQXIUQ8gvGT2ndlO7YsJ0= Subject key identifier: CD:62:87:70:08:F2:A2:BA:25:2E:95:1A:A7:7D:9C:0F:38:19:D4:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6695DCC670C044D0CCF260 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.21.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:95:dc:c6:70:c0:44:d0:cc:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=41c0df7e-719a-4ab1-a1b4-894314b13d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:e9:19:74:ad:14:b4:c5:bb:4f:f6:5e:f2: 8e:8a:ad:60:6e:ab:d4:39:b8:08:06:e9:e3:92:38: 55:0f:87:56:0f:36:af:61:4b:a2:97:24:78:cd:2d: 06:cf:82:ae:d7:34:93:d1:40:1d:7c:2d:94:2f:e1: 20:87:f1:a2:50:e3:10:b4:70:c0:54:94:ae:04:68: c1:5c:b4:8a:b4:d5:8f:8a:25:35:15:d7:0f:4f:01: 46:20:66:36:fe:c8:55:40:3b:df:ef:42:3e:b7:be: 1e:8e:43:e7:34:6d:e7:5a:a0:1b:22:3f:e7:6f:ab: d5:c0:ed:07:25:20:9c:d5:52:e6:3d:b0:78:78:d9: ce:ab:17:16:2a:51:83:5a:51:9d:b1:36:f8:be:28: 2b:b7:e8:61:43:c3:f7:ee:37:96:14:7c:c7:fd:ff: 8b:73:c0:ca:d8:cc:2f:fc:e0:22:4a:8e:18:da:30: 57:d1:a6:77:9d:1b:b4:26:57:b2:5e:62:30:d0:bc: 60:5b:e4:c3:f7:b3:59:7a:3c:d2:27:96:e1:d8:86: fa:31:a1:6e:0f:65:be:40:90:7f:8a:c2:54:7b:b9: c6:3b:25:27:fc:73:11:26:99:02:ff:f9:44:3e:3a: e5:90:83:21:bc:92:d4:9e:e5:7e:3a:7a:77:ce:86: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:87:70:08:F2:A2:BA:25:2E:95:1A:A7:7D:9C:0F:38:19:D4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:2f:25:17:1f:4a:ab:8b:ba:9c:e9:b4:f6:ba:4d:de:b2: a6:96:1a:93:64:55:19:2c:d8:f0:17:cd:64:9e:f0:f6:b4:ed: d0:f4:ae:78:e4:f7:16:57:09:50:29:7b:1b:ad:32:2b:8c:09: a9:89:a5:66:90:5c:41:32:ea:53:a9:4a:f7:a5:f8:3b:17:cd: 68:90:b4:01:f4:7e:ac:29:5a:9b:c8:99:09:28:f0:09:00:72: f5:08:11:4e:16:1b:1d:81:0b:f3:28:b3:9a:78:1c:26:3e:91: 90:88:8d:c7:0c:50:99:a4:63:e7:fa:e3:6f:ba:0b:15:b4:e2: a6:f4:b2:39:33:be:f0:cd:d1:a8:a7:bc:74:5e:c9:2b:82:d3: b4:f6:1c:e5:79:4c:d6:16:b5:2c:8f:6b:53:f1:a5:c7:d2:c4: 71:9b:c9:2c:48:73:ab:25:2f:a6:4f:a2:7b:11:6b:24:b6:0d: 2c:31:25:3c:89:5a:b4:4c:9b:ce:bc:38:d5:49:d7:63:fc:e4: 15:9f:0c:55:6b:7b:bf:b8:59:22:70:50:70:a7:ed:77:49:15: 40:da:f6:2e:9b:88:af:5d:4e:a9:3f:ac:da:e8:cc:3d:bd:3f: 28:b3:50:87:f1:5d:64:74:40:48:eb:5f:86:f4:19:84:eb:d3: 6a:b9:ab:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpXcxnDARNDM8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NDFjMGRmN2UtNzE5YS00YWIxLWExYjQtODk0MzE0YjEzZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm/pGXStFLTFu0/2XvKOiq1gbqvUObgIBunj kjhVD4dWDzavYUuilyR4zS0Gz4Ku1zST0UAdfC2UL+Egh/GiUOMQtHDAVJSuBGjB XLSKtNWPiiU1FdcPTwFGIGY2/shVQDvf70I+t74ejkPnNG3nWqAbIj/nb6vVwO0H JSCc1VLmPbB4eNnOqxcWKlGDWlGdsTb4vigrt+hhQ8P37jeWFHzH/f+Lc8DK2Mwv /OAiSo4Y2jBX0aZ3nRu0JleyXmIw0LxgW+TD97NZejzSJ5bh2Ib6MaFuD2W+QJB/ isJUe7nGOyUn/HMRJpkC//lEPjrlkIMhvJLUnuV+Onp3zoaRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1ih3AI8qK6JS6VGqd9nA84GdQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliNjA3ZGMtMjk3OC0z YjQ0LTg0ZmEtN2FiZGQxMGI0NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA62LyUXH0qri7qc6bT2uk3esqaWGpNkVRks2PAXzWSe8Pa07dD0rnjk 9xZXCVApexutMiuMCamJpWaQXEEy6lOpSvel+DsXzWiQtAH0fqwpWpvImQko8AkA cvUIEU4WGx2BC/Mos5p4HCY+kZCIjccMUJmkY+f642+6CxW04qb0sjkzvvDN0ain vHReySuC07T2HOV5TNYWtSyPa1PxpcfSxHGbySxIc6slL6ZPonsRayS2DSwxJTyJ WrRMm868ONVJ12P85BWfDFVre7+4WSJwUHCn7XdJFUDa9i6biK9dTqk/rNrozD29 PyizUIfxXWR0QEjrX4b0GYTr02q5q4w= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:26 2025 by rpki-client