$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa File: 9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa (raw, json) Hash identifier: ZkuTIos+knX+/OPh0cN7+bcatB3dAm2mNzeRlwEVtKw= Subject key identifier: F3:93:9C:20:A7:3C:F1:99:87:4F:5E:A6:9F:C9:92:C8:55:34:9E:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668C1BD8722DD8427EC800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.18.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8c:1b:d8:72:2d:d8:42:7e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=15553632-00bd-4545-aa51-2f03fa3877f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:d9:fe:93:34:3a:e5:50:37:58:86:11:ed: 21:e5:9d:01:eb:39:c3:8f:40:d1:00:64:c5:aa:cf: ea:a2:3a:b7:84:01:57:0f:70:27:9d:ec:71:78:fb: 79:76:69:b6:ab:9f:19:be:4d:41:62:e0:44:75:dc: 25:8f:76:b5:08:b9:fd:a7:6c:eb:56:7c:a3:56:bf: 4b:e1:2e:13:70:c3:c7:13:e5:2f:4f:4d:e8:7f:bd: ba:a2:d2:ef:19:45:a4:a4:55:d8:00:6f:b9:c3:cb: e6:b0:f8:20:6e:af:bf:7c:a6:1f:0d:2a:0c:48:b6: ee:f0:f0:48:29:32:1f:55:4f:ed:2a:ea:37:ea:f8: 3b:22:08:4f:91:5d:5a:6f:a6:4a:7d:ea:83:cb:f1: 27:6a:a4:d0:72:b2:cb:44:44:2f:9f:26:ff:45:df: d6:6b:e9:7e:70:ff:6a:c0:8f:c5:33:9e:98:6c:bd: 10:83:f8:78:ec:d8:63:1c:c5:45:71:f9:ca:99:4b: 9c:3a:ae:75:0a:3f:94:e9:28:f3:4d:61:35:e2:a6: 45:1b:3e:f3:c4:67:bc:d6:0e:d1:d2:ca:b2:78:d3: 97:46:a9:25:f6:df:e4:22:48:6a:f1:0e:da:fe:2e: 3e:e0:fa:09:15:75:6f:66:e4:bb:aa:54:10:7f:bb: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:9C:20:A7:3C:F1:99:87:4F:5E:A6:9F:C9:92:C8:55:34:9E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:19:eb:71:f2:57:c2:42:66:86:0d:9a:8b:a3:cd:c3:06:a6: 34:24:5b:c0:a2:3e:db:b6:8f:25:02:5e:51:48:e0:e7:ca:03: 33:8b:a7:8d:21:0b:6a:27:ff:0f:b2:92:78:ad:d2:70:69:8a: 3a:65:c6:d7:c3:92:86:0f:be:24:62:a2:60:db:65:2c:be:65: 8e:ea:b7:41:98:e1:bb:f3:c7:ba:57:04:ed:f1:be:9c:2e:30: 2d:a4:39:c2:6b:4d:88:a8:5a:d1:4b:b2:9e:d0:81:f9:d8:29: 12:f1:db:37:cf:d9:b4:c9:4f:68:e3:1b:e7:91:57:b1:f4:85: 35:07:1d:40:ba:6c:dc:28:12:1f:85:52:49:23:41:d5:b5:47: 57:c4:e3:d5:63:49:d2:87:ec:6f:1b:89:23:de:bc:31:d6:0c: 67:a9:c9:4a:ed:fe:45:0d:34:08:f1:61:6d:a4:ad:84:51:f4: 92:7a:ac:85:83:dd:b6:47:4a:48:b5:24:ef:ad:91:84:53:8f: c9:d2:87:94:db:c7:d2:07:63:ef:47:83:d7:23:f0:27:31:62: a2:9a:93:95:87:0d:8a:82:94:48:af:2f:cb:7e:9e:f9:d7:58: b1:f5:ab:4a:d3:02:f7:c9:6e:ee:31:c4:02:e9:a5:93:ae:4d: 0f:6c:43:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZowb2HIt2EJ+yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MTU1NTM2MzItMDBiZC00NTQ1LWFhNTEtMmYwM2ZhMzg3N2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9zZ/pM0OuVQN1iGEe0h5Z0B6znDj0DRAGTF qs/qojq3hAFXD3AnnexxePt5dmm2q58Zvk1BYuBEddwlj3a1CLn9p2zrVnyjVr9L 4S4TcMPHE+UvT03of726otLvGUWkpFXYAG+5w8vmsPggbq+/fKYfDSoMSLbu8PBI KTIfVU/tKuo36vg7IghPkV1ab6ZKfeqDy/EnaqTQcrLLREQvnyb/Rd/Wa+l+cP9q wI/FM56YbL0Qg/h47NhjHMVFcfnKmUucOq51Cj+U6SjzTWE14qZFGz7zxGe81g7R 0sqyeNOXRqkl9t/kIkhq8Q7a/i4+4PoJFXVvZuS7qlQQf7teRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOTnCCnPPGZh09epp/JkshVNJ6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxY2Q0YjEtOGM3OS0z MmY3LThkYWMtNjhkOGZjYjczZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Z63HyV8JCZoYNmoujzcMGpjQkW8CiPtu2jyUCXlFI4OfKAzOLp40h C2on/w+yknit0nBpijplxtfDkoYPviRiomDbZSy+ZY7qt0GY4bvzx7pXBO3xvpwu MC2kOcJrTYioWtFLsp7QgfnYKRLx2zfP2bTJT2jjG+eRV7H0hTUHHUC6bNwoEh+F UkkjQdW1R1fE49VjSdKH7G8biSPevDHWDGepyUrt/kUNNAjxYW2krYRR9JJ6rIWD 3bZHSki1JO+tkYRTj8nSh5Tbx9IHY+9Hg9cj8CcxYqKak5WHDYqClEivL8t+nvnX WLH1q0rTAvfJbu4xxALppZOuTQ9sQ3A= -----END CERTIFICATE-----Generated at Sat Aug 23 15:58:11 2025 by rpki-client