$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa File: f2134156-80a5-3a22-8250-44093645e181.roa (raw, json) Hash identifier: KagrBvNMKShME1BgKt/jGpfyZEo0ir64PB2ecM51uXg= Subject key identifier: 31:3B:36:C3:C7:68:43:C5:C4:41:EA:69:F0:A6:2D:17:F1:55:2D:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66966B571C9DE3D9491350 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.16.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:96:6b:57:1c:9d:e3:d9:49:13:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=78cd4297-cb35-4469-b893-68b425a573ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:e1:8b:78:3e:f3:87:dc:76:94:7a:f2:77: fc:fe:90:d0:98:10:28:f8:87:84:a4:9d:be:13:b4: dd:97:c8:88:e1:25:33:c0:32:98:04:ba:6e:d0:4f: 4f:d4:4d:b1:0d:0f:e4:a4:d8:d4:b7:de:70:3d:e2: 84:42:95:45:c7:41:7e:a9:94:ff:56:42:d9:65:f4: d7:6b:43:b2:c0:66:47:f5:30:17:d9:5a:2e:15:ab: 45:99:0e:bf:e9:e0:c7:11:cf:81:01:86:f8:e8:97: 9a:50:8d:68:bc:1b:82:aa:2b:16:21:0a:e8:83:ef: 1b:0d:ae:db:3d:89:b6:f9:ef:5b:04:b5:22:48:85: a7:24:e5:3d:dc:cf:37:8c:d6:e7:08:ef:28:11:28: cd:05:86:c0:a9:e9:a1:ec:0f:23:c2:22:99:42:52: 9c:a5:b1:43:93:b4:39:8f:57:d1:e2:53:83:17:e1: 7d:ba:2a:b8:3b:41:9d:ae:37:e1:61:15:35:b3:58: 6e:c0:6b:a4:d4:19:d6:03:75:8f:6f:ab:91:d1:e4: 9f:85:23:9d:ac:0c:c5:ec:d7:2f:07:c3:f9:92:c3: 12:12:bd:f8:20:ec:60:80:0a:01:c4:ca:75:bf:45: 03:28:0f:11:ca:a9:0e:5c:4d:2a:45:da:99:b9:1b: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3B:36:C3:C7:68:43:C5:C4:41:EA:69:F0:A6:2D:17:F1:55:2D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:49:3b:ab:cf:87:7d:71:45:4c:a5:d9:25:52:d8:8a:98:21: 2a:55:76:41:42:3b:a8:f1:00:ee:a9:66:de:58:22:5a:4a:ee: bb:c4:21:5f:dc:7e:ed:4c:05:71:c8:2d:a3:d8:2e:ef:2e:40: fa:5b:f4:67:86:54:35:eb:a4:cb:eb:3f:e4:f6:21:9b:2b:e5: 54:c9:b1:55:30:05:44:c8:8d:bd:12:1a:7e:97:ba:0c:18:e5: 08:cb:d7:15:2d:60:70:c0:15:eb:67:bb:86:e6:68:eb:77:7b: 8c:50:90:70:0f:0e:3b:a7:8c:e5:06:43:ed:ed:b1:de:f3:66: ae:30:0e:a6:84:b1:7d:fc:29:ef:27:fa:b5:f4:db:76:81:ac: c3:3f:40:5c:c0:75:2b:50:bf:63:70:c9:f7:2c:82:94:2c:d5: 3e:90:8e:bf:e6:5b:37:10:d6:01:0c:b4:65:cf:fe:c2:aa:a3: 90:ba:71:05:75:74:1b:02:8e:40:df:b5:2a:58:4a:b0:1b:b9: cf:89:13:61:ec:49:a8:38:0f:ae:35:cb:84:ae:5b:71:32:35: 67:4f:c0:63:50:e3:91:87:a5:c9:ac:05:58:f6:22:c5:1c:03: 2d:36:47:ec:56:e0:23:8e:31:37:7e:96:fd:72:5f:9a:10:ff: 09:06:aa:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpZrVxyd49lJE1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NzhjZDQyOTctY2IzNS00NDY5LWI4OTMtNjhiNDI1YTU3M2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1vhi3g+84fcdpR68nf8/pDQmBAo+IeEpJ2+ E7Tdl8iI4SUzwDKYBLpu0E9P1E2xDQ/kpNjUt95wPeKEQpVFx0F+qZT/VkLZZfTX a0OywGZH9TAX2VouFatFmQ6/6eDHEc+BAYb46JeaUI1ovBuCqisWIQrog+8bDa7b PYm2+e9bBLUiSIWnJOU93M83jNbnCO8oESjNBYbAqemh7A8jwiKZQlKcpbFDk7Q5 j1fR4lODF+F9uiq4O0GdrjfhYRU1s1huwGuk1BnWA3WPb6uR0eSfhSOdrAzF7Ncv B8P5ksMSEr34IOxggAoBxMp1v0UDKA8RyqkOXE0qRdqZuRtKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE7NsPHaEPFxEHqafCmLRfxVS3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIxMzQxNTYtODBhNS0z YTIyLTgyNTAtNDQwOTM2NDVlMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVJO6vPh31xRUyl2SVS2IqYISpVdkFCO6jxAO6pZt5YIlpK7rvEIV/c fu1MBXHILaPYLu8uQPpb9GeGVDXrpMvrP+T2IZsr5VTJsVUwBUTIjb0SGn6XugwY 5QjL1xUtYHDAFetnu4bmaOt3e4xQkHAPDjunjOUGQ+3tsd7zZq4wDqaEsX38Ke8n +rX023aBrMM/QFzAdStQv2NwyfcsgpQs1T6Qjr/mWzcQ1gEMtGXP/sKqo5C6cQV1 dBsCjkDftSpYSrAbuc+JE2HsSag4D641y4SuW3EyNWdPwGNQ45GHpcmsBVj2IsUc Ay02R+xW4COOMTd+lv1yX5oQ/wkGqvw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:23 2025 by rpki-client