$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa File: 4dac845c-f6b7-3920-8c86-2e4456a0f133.roa (raw, json) Hash identifier: QkAyEa0gnc4M9d+OzVz9fsYZr+0/FV4QUYN0RM/pIEw= Subject key identifier: 61:B4:EB:89:F7:01:72:B4:73:FC:8A:FC:A1:65:73:55:64:5B:AC:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605F06A1FD302597D6A51C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.16.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5f:06:a1:fd:30:25:97:d6:a5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=71774f30-4242-4d9d-96ab-eb06eb244738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:ae:ea:aa:c8:19:fb:d1:c8:32:75:6b:81: 32:13:6b:dc:b1:aa:42:b5:1b:62:56:f4:cb:f9:04: b5:3c:1e:ac:2f:1f:9f:07:4e:82:b2:1e:39:8c:f1: 2d:da:0c:55:3d:26:72:09:52:67:0b:b2:3d:46:38: 7d:b0:63:e5:5a:07:6a:3c:ab:f7:22:6b:e3:9a:16: 28:af:d5:9e:36:2a:c7:31:1d:21:ad:5e:dd:f6:19: ae:81:89:15:cf:6b:c1:ff:60:42:c2:50:11:61:77: 8b:6e:1d:3d:0e:a7:00:87:82:56:f2:ad:4b:78:82: 8c:fd:25:7f:90:e3:89:02:92:8c:c8:0b:39:c9:62: 9b:c1:77:7b:92:e3:d1:04:1a:c9:61:ae:fc:e1:a9: 87:49:c5:b4:4f:84:dc:27:69:c2:60:91:ae:5b:a1: 60:d6:5a:5d:6e:41:ea:04:7c:ac:7f:88:56:4a:a3: f5:ec:cc:da:6d:d6:24:e8:2d:1d:37:ca:64:2d:91: 6f:d1:e7:8e:53:06:ff:cb:09:ba:45:b5:fa:95:d9: 38:50:cd:e4:59:49:19:bc:4b:31:f8:1a:a4:27:a9: 79:82:30:5c:2c:f6:7d:c8:41:df:35:28:74:46:00: f3:65:8d:1b:d0:47:1d:34:d6:c2:fd:83:db:b2:df: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B4:EB:89:F7:01:72:B4:73:FC:8A:FC:A1:65:73:55:64:5B:AC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e7:38:a6:e7:bc:98:c2:6b:ed:e4:6d:ee:09:6d:2a:1a:f7: 37:e3:41:a9:5c:10:a4:d6:4b:4a:39:9d:3b:09:6e:b5:bf:9a: bd:4e:0c:af:95:87:20:00:0b:7d:f2:74:10:00:1a:ae:a6:ce: f4:dd:ec:1d:fa:c1:7b:e4:52:d6:f2:cc:80:88:ad:6f:0a:05: ca:48:e3:df:47:c0:54:f4:71:7f:67:bb:4d:78:b6:cb:96:94: 92:cf:c0:62:9d:ad:b1:c5:95:e5:2a:03:76:73:59:77:b0:78: f2:af:2a:89:8e:8b:d8:d6:a5:20:67:48:92:ce:57:9c:46:85: be:c8:69:3f:c0:e7:92:0e:63:4f:6d:9e:ce:0f:df:78:d9:dd: f4:8a:04:33:5c:5c:20:57:69:a4:66:70:2b:99:46:bc:4a:41: 3d:14:dc:76:11:e5:29:e4:b3:84:6b:00:f7:a2:c0:15:12:05: 29:25:1b:5d:a1:9f:d0:6f:9a:3f:27:ba:de:72:a6:34:28:16: b6:45:d0:c8:59:d4:5a:a3:bf:40:87:19:72:f7:47:97:5a:28: dc:dd:49:9c:63:4d:64:b5:54:be:02:9f:0a:e8:6f:45:3b:af: 1e:a9:e2:98:2a:84:c1:17:29:5b:5d:80:06:f0:27:d5:0e:c5: c9:27:c3:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF8Gof0wJZfWpRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NzE3NzRmMzAtNDI0Mi00ZDlkLTk2YWItZWIwNmViMjQ0NzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxOu6qrIGfvRyDJ1a4EyE2vcsapCtRtiVvTL +QS1PB6sLx+fB06Csh45jPEt2gxVPSZyCVJnC7I9Rjh9sGPlWgdqPKv3ImvjmhYo r9WeNirHMR0hrV7d9hmugYkVz2vB/2BCwlARYXeLbh09DqcAh4JW8q1LeIKM/SV/ kOOJApKMyAs5yWKbwXd7kuPRBBrJYa784amHScW0T4TcJ2nCYJGuW6Fg1lpdbkHq BHysf4hWSqP17MzabdYk6C0dN8pkLZFv0eeOUwb/ywm6RbX6ldk4UM3kWUkZvEsx +BqkJ6l5gjBcLPZ9yEHfNSh0RgDzZY0b0EcdNNbC/YPbst+2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG064n3AXK0c/yK/KFlc1VkW6yTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhYzg0NWMtZjZiNy0z OTIwLThjODYtMmU0NDU2YTBmMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfnOKbnvJjCa+3kbe4JbSoa9zfjQalcEKTWS0o5nTsJbrW/mr1ODK+V hyAAC33ydBAAGq6mzvTd7B36wXvkUtbyzICIrW8KBcpI499HwFT0cX9nu014tsuW lJLPwGKdrbHFleUqA3ZzWXewePKvKomOi9jWpSBnSJLOV5xGhb7IaT/A55IOY09t ns4P33jZ3fSKBDNcXCBXaaRmcCuZRrxKQT0U3HYR5Snks4RrAPeiwBUSBSklG12h n9Bvmj8nut5ypjQoFrZF0MhZ1Fqjv0CHGXL3R5daKNzdSZxjTWS1VL4Cnwrob0U7 rx6p4pgqhMEXKVtdgAbwJ9UOxcknw8o= -----END CERTIFICATE-----Generated at Wed Jul 9 12:55:38 2025 by rpki-client