$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fce5fc71-9665-3715-8c93-7ea00f49027d.roa File: fce5fc71-9665-3715-8c93-7ea00f49027d.roa (raw, json) Hash identifier: Jx9XuDjJLZnz/0HPGbuEXDKE1X4SJVbwLUWKUZ5b65I= Subject key identifier: 15:C6:BC:16:8E:87:B6:C9:5F:DB:CC:C5:47:DB:9D:40:34:8A:A8:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6695B4225F8247E27C5740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fce5fc71-9665-3715-8c93-7ea00f49027d.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.19.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:95:b4:22:5f:82:47:e2:7c:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=771bc59b-1690-4760-9841-94f962e44364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:06:60:ff:9d:c8:67:20:e8:7f:12:80:09: a6:89:51:27:0b:15:f6:36:9f:25:2a:9d:dd:bf:e8: 16:e4:c4:aa:e4:59:cd:4d:47:62:fb:55:90:52:2b: 14:09:f2:cf:c8:50:c0:34:f5:56:32:14:7b:ab:00: 76:23:bd:9d:21:82:60:c7:79:9f:6c:8a:bf:ab:2d: 20:f0:1f:32:6c:1b:5c:ea:0d:22:0d:e0:fa:29:65: ef:37:f4:fc:1c:da:90:f7:68:21:8a:34:7e:01:90: 4d:b3:86:a0:93:10:11:af:27:d9:16:12:0c:4e:ba: 53:3e:84:ec:00:53:31:84:0a:19:21:ca:e7:a2:87: 5f:ef:9e:2a:d9:dc:bf:e1:08:53:76:d0:ff:f0:f3: e5:cd:40:07:68:f5:8a:35:d4:a4:f0:03:5d:ae:e1: 6e:c8:8f:6f:e5:d9:de:ab:9b:d2:a0:c1:1d:e8:6d: 37:4a:e4:e8:28:08:09:a5:c9:46:5b:bb:a2:b3:e5: 72:1a:b0:a9:41:e6:13:c1:f6:de:32:51:d3:8b:59: ee:64:44:ae:80:5d:74:2b:83:ea:c2:83:d0:b2:3d: 7f:ef:fd:cd:7c:17:bb:1c:24:78:60:92:e5:12:e3: a5:ec:3a:d0:0d:52:64:e1:b1:8c:56:4b:9a:1d:94: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C6:BC:16:8E:87:B6:C9:5F:DB:CC:C5:47:DB:9D:40:34:8A:A8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fce5fc71-9665-3715-8c93-7ea00f49027d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ce:f8:fe:67:54:17:e5:a4:51:95:5a:10:52:dc:53:88:d4: 64:f5:72:56:51:dc:92:40:0a:39:b6:da:ff:ec:1b:13:5c:57: 32:bd:12:b1:69:d2:98:26:bc:29:bc:0c:80:55:08:9d:f5:26: 35:ce:9c:b3:06:16:60:d4:67:4f:2d:20:3c:19:a1:5c:86:8c: 18:94:79:20:22:42:b9:a1:63:c7:73:24:72:56:01:93:00:de: 80:e0:05:73:88:ff:6d:4f:51:3d:6a:d7:88:9b:57:1e:d4:61: 6a:35:42:9b:b7:d9:ed:29:3e:1a:0c:40:84:c0:30:95:2e:d0: a2:77:41:99:b8:09:d8:97:6c:28:fd:c2:d1:b1:64:46:38:7a: f1:37:d1:32:79:a8:64:9a:c2:f4:99:6e:85:16:01:ee:90:8a: 6a:86:d8:1e:e2:ee:7a:f3:6e:a7:55:d3:5e:4e:e9:72:18:92: 78:67:12:c9:b7:19:9c:49:ee:82:0a:88:30:41:8a:b5:44:06: fc:4c:f0:52:f4:6b:97:13:84:ba:ab:52:e9:e9:9b:46:96:24: e0:9d:f6:7f:77:9f:d7:99:e8:58:56:6b:ef:b6:9a:18:c5:ac: 95:3f:ea:d8:51:a2:50:17:16:0c:6a:46:28:b2:38:18:06:db: 0d:31:b5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpW0Il+CR+J8V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NzcxYmM1OWItMTY5MC00NzYwLTk4NDEtOTRmOTYyZTQ0MzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8GYP+dyGcg6H8SgAmmiVEnCxX2Np8lKp3d v+gW5MSq5FnNTUdi+1WQUisUCfLPyFDANPVWMhR7qwB2I72dIYJgx3mfbIq/qy0g 8B8ybBtc6g0iDeD6KWXvN/T8HNqQ92ghijR+AZBNs4agkxARryfZFhIMTrpTPoTs AFMxhAoZIcrnoodf754q2dy/4QhTdtD/8PPlzUAHaPWKNdSk8ANdruFuyI9v5dne q5vSoMEd6G03SuToKAgJpclGW7uis+VyGrCpQeYTwfbeMlHTi1nuZESugF10K4Pq woPQsj1/7/3NfBe7HCR4YJLlEuOl7DrQDVJk4bGMVkuaHZSNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXGvBaOh7bJX9vMxUfbnUA0iqgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNlNWZjNzEtOTY2NS0z NzE1LThjOTMtN2VhMDBmNDkwMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3O+P5nVBflpFGVWhBS3FOI1GT1clZR3JJACjm22v/sGxNcVzK9ErFp 0pgmvCm8DIBVCJ31JjXOnLMGFmDUZ08tIDwZoVyGjBiUeSAiQrmhY8dzJHJWAZMA 3oDgBXOI/21PUT1q14ibVx7UYWo1Qpu32e0pPhoMQITAMJUu0KJ3QZm4CdiXbCj9 wtGxZEY4evE30TJ5qGSawvSZboUWAe6QimqG2B7i7nrzbqdV015O6XIYknhnEsm3 GZxJ7oIKiDBBirVEBvxM8FL0a5cThLqrUunpm0aWJOCd9n93n9eZ6FhWa++2mhjF rJU/6thRolAXFgxqRiiyOBgG2w0xtcA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:16 2025 by rpki-client