$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa File: a1a78e31-2fd1-340f-9abd-830bb997d842.roa (raw, json) Hash identifier: GcG6TN9q6DgOfE/Y4g/scHS6HvGq0iC8lQXmtbwfMXk= Subject key identifier: B6:FC:E7:8A:CF:2F:B9:2A:2B:C7:7A:E7:7A:5F:08:8D:D0:A9:92:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6695A2379892322F94CB48 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.19.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:95:a2:37:98:92:32:2f:94:cb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=19ad12d6-409f-411a-8985-d8782266bc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:f3:5a:a9:13:f7:4a:ed:f8:ec:71:64:37: 51:43:a9:23:7b:cb:da:6d:87:87:a9:02:5b:e3:11: 6b:f6:60:69:bd:be:c4:49:0e:3e:45:b8:d5:c7:0d: 63:69:9f:47:12:f8:be:9e:40:7d:78:36:74:90:66: 47:2c:b6:a6:c7:34:eb:58:e5:17:32:f2:6d:ea:64: cb:bc:f3:59:d0:6d:8c:a3:7e:cc:82:d1:17:0f:61: ad:85:fc:ce:16:a3:2c:7a:a5:9b:7a:17:28:ed:74: 2c:e5:e4:ff:ca:a7:c8:3f:8d:b3:be:b6:fb:25:f3: 54:e1:bc:2f:21:d8:53:1d:14:c0:17:54:1b:4a:86: 48:bd:74:71:44:2c:11:a9:e2:b5:96:91:4b:7e:07: 46:77:e9:9c:be:63:34:2a:ac:2d:81:1d:f4:a6:d6: f8:74:ad:73:95:74:70:f9:2c:90:77:77:52:f2:7b: c1:49:c9:94:a0:85:f6:aa:db:82:73:d3:9b:86:ad: 26:0a:2d:e5:33:3b:73:c9:c3:44:ec:88:d3:c1:71: 87:2c:f3:42:06:b7:0f:f7:f3:0c:75:77:c7:ec:99: e5:71:9e:da:5a:a5:95:4b:6d:85:d9:ef:01:27:13: ca:50:59:ec:3e:5f:69:83:ae:1b:b3:9c:74:de:d4: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FC:E7:8A:CF:2F:B9:2A:2B:C7:7A:E7:7A:5F:08:8D:D0:A9:92:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:30:46:80:03:36:60:11:86:d7:a5:4c:50:ea:01:2d:bf:81: c4:76:45:4d:34:c6:0c:d8:88:e0:ff:d9:fc:fa:f5:33:8e:9b: 30:40:a5:38:32:1a:bd:28:8b:a4:13:44:4e:d6:bb:1d:ff:c1: 0f:e8:1f:b0:55:93:19:70:f9:ed:9a:65:16:72:26:70:b2:d5: 02:a5:0a:f8:25:9e:7a:d5:99:79:ce:30:8c:dc:2b:f0:0f:b7: 61:33:4a:da:fc:b7:89:4d:38:99:02:62:3a:dc:7d:8d:2d:4e: e8:da:0f:20:44:84:ee:34:a9:39:43:20:ec:f2:81:e0:6a:7e: 34:cd:60:47:7c:fe:b8:29:95:8a:79:62:ca:ac:88:57:9e:42: 35:85:00:cb:bc:40:53:0b:10:45:c3:f6:99:1e:49:9c:ff:4e: b9:e4:9d:b3:18:f3:12:dc:fd:de:3d:ce:63:0b:4f:66:d9:c6: 5b:ec:b9:f4:1e:4a:a7:37:bf:2a:84:3f:7e:7c:fb:c7:ba:e0: 03:c0:63:70:73:1b:19:75:1f:ef:5f:6c:8e:77:a0:69:ab:4e: 02:e3:26:e8:26:00:a5:0a:6c:ef:81:dc:2d:9b:e1:6c:35:79: be:40:0b:16:50:1c:63:e1:a4:07:61:94:cd:e5:06:a4:6d:de: 17:1f:60:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpWiN5iSMi+Uy0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MTlhZDEyZDYtNDA5Zi00MTFhLTg5ODUtZDg3ODIyNjZiYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyvzWqkT90rt+OxxZDdRQ6kje8vabYeHqQJb 4xFr9mBpvb7ESQ4+RbjVxw1jaZ9HEvi+nkB9eDZ0kGZHLLamxzTrWOUXMvJt6mTL vPNZ0G2Mo37MgtEXD2GthfzOFqMseqWbehco7XQs5eT/yqfIP42zvrb7JfNU4bwv IdhTHRTAF1QbSoZIvXRxRCwRqeK1lpFLfgdGd+mcvmM0KqwtgR30ptb4dK1zlXRw +SyQd3dS8nvBScmUoIX2qtuCc9Obhq0mCi3lMztzycNE7IjTwXGHLPNCBrcP9/MM dXfH7JnlcZ7aWqWVS22F2e8BJxPKUFnsPl9pg64bs5x03tSrYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb854rPL7kqK8d653pfCI3QqZIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFhNzhlMzEtMmZkMS0z NDBmLTlhYmQtODMwYmI5OTdkODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgwRoADNmARhtelTFDqAS2/gcR2RU00xgzYiOD/2fz69TOOmzBApTgy Gr0oi6QTRE7Wux3/wQ/oH7BVkxlw+e2aZRZyJnCy1QKlCvglnnrVmXnOMIzcK/AP t2EzStr8t4lNOJkCYjrcfY0tTujaDyBEhO40qTlDIOzygeBqfjTNYEd8/rgplYp5 YsqsiFeeQjWFAMu8QFMLEEXD9pkeSZz/TrnknbMY8xLc/d49zmMLT2bZxlvsufQe Sqc3vyqEP358+8e64APAY3BzGxl1H+9fbI53oGmrTgLjJugmAKUKbO+B3C2b4Ww1 eb5ACxZQHGPhpAdhlM3lBqRt3hcfYE0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:54 2025 by rpki-client