$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa File: 9d08a5cf-3277-3703-9515-b5271bca93a5.roa (raw, json) Hash identifier: Y0DviePqRdacP9xnkDT2cOKUzEqolTPuN8iHP9pSQNA= Subject key identifier: 3D:91:73:8F:2C:D8:8F:50:FE:F6:7F:03:6C:65:6D:EF:65:33:8C:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668C4E4E21369A19295700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.20.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8c:4e:4e:21:36:9a:19:29:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=3f47728b-2551-442a-99ea-986f6659a3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:99:c0:5d:07:4b:ae:3a:cd:08:8e:4a:33: 6e:b4:5f:0d:c2:2d:e9:70:2e:e3:cf:13:fb:bd:0f: 1b:36:ed:f0:a0:de:c1:e3:7f:5c:0a:ad:17:28:58: c9:8f:cb:2b:73:07:67:d9:30:a1:03:84:1a:ff:17: ff:67:89:d9:07:a3:17:20:55:a3:73:40:f7:ac:2e: c8:37:06:8d:cb:b0:bb:73:e2:35:5f:66:be:36:5b: 51:86:51:b5:89:4e:0a:40:85:e4:49:95:6b:17:9f: 2b:e2:3e:e0:f8:5e:4f:d7:4b:59:dc:8e:6e:be:b4: f0:15:38:f4:28:a9:07:d9:63:3b:8f:6e:e7:3c:10: d2:cd:28:4c:ac:34:3f:d7:bc:95:69:b1:64:51:90: 4e:9a:9c:d5:99:b2:52:ce:4b:61:f8:55:28:d0:57: 70:6d:66:9f:73:ad:d0:c1:f8:20:11:de:84:c8:d8: 43:97:f9:6e:79:be:2e:63:8e:91:14:25:d7:04:b6: 5a:c0:03:5a:b0:cd:30:93:40:dc:f6:dd:47:a1:a1: a3:5f:18:2f:18:34:57:8f:16:51:fd:49:cb:2f:09: f9:55:d1:59:f2:06:40:1b:b6:d6:e4:bb:f0:d3:b5: 8b:d1:2c:c8:85:40:87:90:f4:00:fa:8a:35:69:98: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:91:73:8F:2C:D8:8F:50:FE:F6:7F:03:6C:65:6D:EF:65:33:8C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:21:16:f1:bd:c3:d9:f2:7f:0a:c9:8a:94:16:e4:90:7f:b1: 5f:fe:db:94:7f:b6:52:df:21:d0:b0:53:ba:e6:d5:b2:28:46: c8:0d:2d:1a:14:8e:d7:70:bc:dc:a7:66:9a:7a:b3:74:17:c1: 33:bd:50:93:f4:3f:64:1f:81:20:82:ed:63:3b:16:94:99:96: 02:d2:7a:d8:c3:13:cd:76:df:de:fe:05:70:09:43:50:f6:bf: d3:4d:34:8b:91:b1:42:91:80:0c:49:7e:df:80:38:cd:e0:fc: 8f:d6:79:a3:5b:17:ef:31:e9:7c:76:e7:b7:a4:ec:6f:8b:c5: 7f:99:ee:9b:c6:2e:67:62:ac:31:78:99:33:2c:ba:0b:c3:7d: 4a:ab:87:3d:af:22:08:1d:28:11:95:b6:f8:07:ba:dc:c9:29: 47:d9:24:57:2d:4f:83:1f:e3:85:d4:66:ba:81:0d:67:a6:7f: bf:3b:24:20:a3:b7:6c:69:f7:26:e5:87:40:9d:2a:31:a7:3e: 93:db:b2:37:05:3f:d9:57:ac:6e:8b:35:1d:2e:b0:17:76:47: 0f:22:61:64:e2:d4:52:8b:b4:8d:0d:5d:2e:32:6a:fc:67:c9: 08:88:1e:70:7a:01:90:72:29:5a:13:ce:30:90:5b:34:73:a4: 30:4a:49:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoxOTiE2mhkpVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk M2Y0NzcyOGItMjU1MS00NDJhLTk5ZWEtOTg2ZjY2NTlhM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXSZwF0HS646zQiOSjNutF8Nwi3pcC7jzxP7 vQ8bNu3woN7B439cCq0XKFjJj8srcwdn2TChA4Qa/xf/Z4nZB6MXIFWjc0D3rC7I NwaNy7C7c+I1X2a+NltRhlG1iU4KQIXkSZVrF58r4j7g+F5P10tZ3I5uvrTwFTj0 KKkH2WM7j27nPBDSzShMrDQ/17yVabFkUZBOmpzVmbJSzkth+FUo0FdwbWafc63Q wfggEd6EyNhDl/lueb4uY46RFCXXBLZawANasM0wk0Dc9t1HoaGjXxgvGDRXjxZR /UnLLwn5VdFZ8gZAG7bW5Lvw07WL0SzIhUCHkPQA+oo1aZgKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2Rc48s2I9Q/vZ/A2xlbe9lM4ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWQwOGE1Y2YtMzI3Ny0z NzAzLTk1MTUtYjUyNzFiY2E5M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEhFvG9w9nyfwrJipQW5JB/sV/+25R/tlLfIdCwU7rm1bIoRsgNLRoU jtdwvNynZpp6s3QXwTO9UJP0P2QfgSCC7WM7FpSZlgLSetjDE812397+BXAJQ1D2 v9NNNIuRsUKRgAxJft+AOM3g/I/WeaNbF+8x6Xx257ek7G+LxX+Z7pvGLmdirDF4 mTMsugvDfUqrhz2vIggdKBGVtvgHutzJKUfZJFctT4Mf44XUZrqBDWemf787JCCj t2xp9yblh0CdKjGnPpPbsjcFP9lXrG6LNR0usBd2Rw8iYWTi1FKLtI0NXS4yavxn yQiIHnB6AZByKVoTzjCQWzRzpDBKSTE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:07 2025 by rpki-client