$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa File: a72af3db-4149-3870-b873-369d08de432c.roa (raw, json) Hash identifier: N1i8wxc4ZL1t2UVeKAeGX3ie5y24TZjwps96WfQBgYU= Subject key identifier: 17:5E:24:AB:26:CC:7E:33:4C:8E:9C:8E:F4:49:F0:52:48:F8:75:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66935A68967BC65D7FDE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.19.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:93:5a:68:96:7b:c6:5d:7f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=1326afc3-3e61-4639-87b5-9877002b8ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:65:c9:ba:86:34:34:a3:d6:3f:77:fd:ac: 4d:73:b7:93:33:0a:5c:c3:bf:81:2d:99:6b:a7:e6: 6c:5e:a1:58:ec:78:f5:4c:61:43:73:1a:a4:4f:46: 6c:86:21:07:61:74:d6:cd:3c:69:0e:f0:b9:8a:65: 58:54:a3:01:a0:4b:d2:4c:e3:14:fa:7c:aa:c1:ee: 67:04:bb:c1:9b:08:20:8a:d6:d7:1f:5e:75:4c:8b: c6:8d:e5:2b:ad:d6:af:d1:09:e0:81:45:88:92:e6: 59:db:51:90:a3:09:d8:5e:21:d8:e8:3c:c0:c7:fe: 56:cd:74:c1:09:b5:84:a4:c9:b7:35:12:b6:5a:60: bd:38:9b:eb:8e:d1:a8:1c:27:38:d1:01:71:15:03: e3:ea:c1:92:df:48:b6:45:89:49:80:89:b7:3e:59: 3b:35:cd:af:93:73:4c:9e:47:5f:82:39:e0:59:e5: 28:a6:58:8c:a3:db:09:cf:25:b5:9d:d2:68:d9:6b: 25:f3:2e:2a:52:60:70:b4:0d:16:3c:56:44:8c:f5: 21:39:7f:b9:6a:40:88:ed:72:07:02:e6:7c:7e:b2: d0:81:6b:27:58:0c:ad:73:24:91:31:45:e4:d4:2a: 17:d4:08:6f:eb:d0:19:65:22:61:c8:7c:26:e3:6e: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5E:24:AB:26:CC:7E:33:4C:8E:9C:8E:F4:49:F0:52:48:F8:75:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:25:0c:cb:a6:a0:71:11:a2:85:ae:45:82:f0:9c:cb:54:32: 91:3f:dc:07:f9:bb:f6:78:1d:20:41:f3:74:f6:d1:c2:ac:b3: 03:4b:bb:c3:82:f4:fb:21:4e:53:35:3a:7f:51:ab:9e:79:71: f7:35:65:fc:f5:8d:8f:58:24:bf:78:2d:71:65:1a:5f:ae:24: b5:e7:bb:1e:42:c0:9b:3f:db:6e:38:05:2e:b0:fb:e0:a3:91: f4:08:7e:c5:57:8f:93:d4:bc:d1:af:90:83:bf:28:4a:f1:63: 58:47:29:e7:31:eb:12:01:01:da:e3:0c:ce:6a:f8:b1:ee:23: 15:7f:f3:34:d4:b4:0a:18:d6:3a:32:98:ca:b6:e9:b8:98:4b: fc:71:73:f7:e2:2e:b5:7d:b8:10:ec:c8:bb:83:c1:47:e2:02: 3c:cf:b3:be:c5:df:2b:39:37:50:c9:19:02:65:95:c8:8b:bd: eb:ea:97:ea:1e:e7:13:0a:a3:72:5e:77:2f:66:4d:9f:5b:f3: 68:43:87:b5:22:dd:28:aa:97:cf:34:1d:4d:28:96:a7:fb:9a: 85:60:47:47:e8:13:e7:49:09:91:22:00:d0:57:1d:7b:2d:93: 25:95:08:3c:a6:97:87:82:d8:48:51:d4:9c:db:cd:ea:9e:0c: ae:7c:46:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpNaaJZ7xl1/3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MTMyNmFmYzMtM2U2MS00NjM5LTg3YjUtOTg3NzAwMmI4YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhctlybqGNDSj1j93/axNc7eTMwpcw7+BLZlr p+ZsXqFY7Hj1TGFDcxqkT0ZshiEHYXTWzTxpDvC5imVYVKMBoEvSTOMU+nyqwe5n BLvBmwggitbXH151TIvGjeUrrdav0QnggUWIkuZZ21GQownYXiHY6DzAx/5WzXTB CbWEpMm3NRK2WmC9OJvrjtGoHCc40QFxFQPj6sGS30i2RYlJgIm3Plk7Nc2vk3NM nkdfgjngWeUopliMo9sJzyW1ndJo2Wsl8y4qUmBwtA0WPFZEjPUhOX+5akCI7XIH AuZ8frLQgWsnWAytcySRMUXk1CoX1Ahv69AZZSJhyHwm424qWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdeJKsmzH4zTI6cjvRJ8FJI+HUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTcyYWYzZGItNDE0OS0z ODcwLWI4NzMtMzY5ZDA4ZGU0MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUlDMumoHERooWuRYLwnMtUMpE/3Af5u/Z4HSBB83T20cKsswNLu8OC 9PshTlM1On9Rq555cfc1Zfz1jY9YJL94LXFlGl+uJLXnux5CwJs/2244BS6w++Cj kfQIfsVXj5PUvNGvkIO/KErxY1hHKecx6xIBAdrjDM5q+LHuIxV/8zTUtAoY1joy mMq26biYS/xxc/fiLrV9uBDsyLuDwUfiAjzPs77F3ys5N1DJGQJllciLvevql+oe 5xMKo3Jedy9mTZ9b82hDh7Ui3Siql880HU0olqf7moVgR0foE+dJCZEiANBXHXst kyWVCDyml4eC2EhR1JzbzeqeDK58RoY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:23:34 2025 by rpki-client