$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa File: aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa (raw, json) Hash identifier: k+619Cd+1a23rXh7C8bfD90qIZcy8NCMe7G+2OPVgjo= Subject key identifier: 90:37:1F:38:2F:32:1A:23:E0:56:F5:88:EC:D8:7D:76:B4:24:E2:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66944C2D4EA27543E5BB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.22.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:94:4c:2d:4e:a2:75:43:e5:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=8d34cac5-77bc-4fc8-a28b-cbf2d5b7bdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:86:9c:56:98:db:71:f0:06:f9:50:aa:dd: 02:63:dc:48:3c:1e:e4:ea:bd:10:e6:83:4c:8a:bc: a6:2e:1e:3e:8d:16:90:0a:24:7f:9c:72:e8:19:69: 5a:d3:fc:f4:f0:56:db:98:1b:7b:a9:66:4e:12:99: b1:23:75:57:c6:5c:b3:fa:60:f0:9c:45:59:57:2f: c9:a1:1e:4e:f6:af:8d:98:5f:e5:29:c3:4b:8c:74: 36:60:e8:de:21:1b:31:40:da:2c:db:b9:ea:e8:73: a9:ac:3c:52:fa:b2:30:cb:0b:11:83:6d:da:5b:41: 02:b8:42:4f:ef:54:9f:e6:e9:6e:98:ec:ed:f3:a7: ce:15:84:7a:f1:e3:a4:a9:9e:f7:27:7c:26:40:c5: 11:f6:d5:ad:8e:6e:9b:47:d2:bc:35:d4:9e:36:cd: 75:f2:04:a1:74:fc:fc:79:61:61:21:55:8e:8a:87: de:57:1d:01:60:c1:3f:88:09:c1:e8:c4:94:be:eb: 44:21:ad:03:14:19:1b:73:54:bb:52:56:1a:5d:45: 1e:fd:e2:fe:58:eb:c6:9f:d5:fd:d1:a4:3a:8e:83: ca:d9:8b:ac:8a:12:70:83:ce:ff:41:1c:53:1d:81: 69:eb:f4:58:39:a5:2c:38:77:2c:7e:54:f0:36:27: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:37:1F:38:2F:32:1A:23:E0:56:F5:88:EC:D8:7D:76:B4:24:E2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2a:c6:d7:5f:7a:6d:b8:b1:cd:7c:fc:ba:f9:0e:eb:a4:aa: 21:a6:68:f4:61:de:be:fe:2f:6c:48:0f:26:a0:2e:0d:a3:8a: d6:22:2e:7c:89:72:83:58:93:8e:c2:66:f9:f8:a5:4a:6d:78: a5:79:62:c1:1d:3b:fb:e3:9a:f6:5e:04:0f:68:d8:72:c1:82: f1:5b:89:5a:38:a3:c1:4f:92:3a:6b:21:68:c7:5f:93:af:7c: 7a:8e:28:db:62:54:7f:2f:80:07:28:cd:25:3a:b1:f5:e1:f8: 23:18:0a:13:13:19:8c:fc:b4:92:b5:28:fc:7c:28:a4:1b:f7: e8:1f:47:aa:f0:55:b5:93:dc:33:99:87:72:e4:e1:94:63:89: 5e:d3:6c:27:ff:f7:6d:e1:3c:e3:e9:d9:ea:d7:1e:31:7e:67: d4:e5:b4:d6:81:fd:b0:81:a5:bc:7a:97:c4:03:8a:cc:6b:6e: f8:f5:62:76:2e:f5:d1:a1:b1:a2:36:2a:87:03:0c:af:e2:43: 88:fb:27:23:e0:0b:b7:cb:cd:44:00:9c:d4:da:ef:f3:af:96: c6:84:ac:d9:9d:ac:de:9c:dc:85:b5:94:94:8d:2b:ab:e1:19: c8:95:b1:84:4b:4d:6d:5e:23:c5:df:16:51:39:0f:64:e9:51: 02:d4:4d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpRMLU6idUPlu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OGQzNGNhYzUtNzdiYy00ZmM4LWEyOGItY2JmMmQ1YjdiZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCaGnFaY23HwBvlQqt0CY9xIPB7k6r0Q5oNM irymLh4+jRaQCiR/nHLoGWla0/z08FbbmBt7qWZOEpmxI3VXxlyz+mDwnEVZVy/J oR5O9q+NmF/lKcNLjHQ2YOjeIRsxQNos27nq6HOprDxS+rIwywsRg23aW0ECuEJP 71Sf5ulumOzt86fOFYR68eOkqZ73J3wmQMUR9tWtjm6bR9K8NdSeNs118gShdPz8 eWFhIVWOiofeVx0BYME/iAnB6MSUvutEIa0DFBkbc1S7UlYaXUUe/eL+WOvGn9X9 0aQ6joPK2YusihJwg87/QRxTHYFp6/RYOaUsOHcsflTwNidphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA3HzgvMhoj4Fb1iOzYfXa0JOLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEzZWYxMDEtNjdkMC0z ZDU0LTkwYWUtMmY5NGNmNmFjNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0qxtdfem24sc18/Lr5DuukqiGmaPRh3r7+L2xIDyagLg2jitYiLnyJ coNYk47CZvn4pUpteKV5YsEdO/vjmvZeBA9o2HLBgvFbiVo4o8FPkjprIWjHX5Ov fHqOKNtiVH8vgAcozSU6sfXh+CMYChMTGYz8tJK1KPx8KKQb9+gfR6rwVbWT3DOZ h3Lk4ZRjiV7TbCf/923hPOPp2erXHjF+Z9TltNaB/bCBpbx6l8QDisxrbvj1YnYu 9dGhsaI2KocDDK/iQ4j7JyPgC7fLzUQAnNTa7/OvlsaErNmdrN6c3IW1lJSNK6vh GciVsYRLTW1eI8XfFlE5D2TpUQLUTVQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:35 2025 by rpki-client