$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa File: 0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa (raw, json) Hash identifier: +sXEO0jjRWiVMuGgVA+3k2gpyBGEaofPwPVAwz6+X04= Subject key identifier: 1C:93:D3:7C:5B:48:B6:0A:BB:09:E3:79:9A:79:93:73:D5:EE:79:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA915EAB5D0FC83E201FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.23.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:91:5e:ab:5d:0f:c8:3e:20:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=476b0133-ec82-49c0-a72b-5e57a47e62dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:d1:48:67:6e:70:ce:50:9c:7d:ba:09:c3: e3:1f:ad:46:df:76:db:74:aa:de:43:25:bc:56:fd: 18:27:39:1d:20:89:27:4c:42:f4:14:1d:c2:75:e2: c6:c4:6d:52:6d:87:3b:ee:a4:5e:9e:39:ba:d3:c1: 36:a0:33:15:bd:77:5d:56:f2:67:34:67:5e:13:5f: cb:d0:06:a0:a6:77:66:ba:89:ec:30:f4:c7:18:15: 26:6e:41:1d:fb:50:c1:88:65:6e:c7:58:75:71:0e: 9e:4d:ef:72:1b:b5:83:71:25:37:09:7c:29:98:4a: 9f:fe:29:ee:43:94:62:df:92:95:4b:5a:ed:89:52: 1b:11:59:5b:24:69:9d:ce:66:69:5c:69:a2:9f:4a: 82:68:d3:ed:80:c0:8e:c4:1a:47:13:92:9c:2c:11: e5:12:83:7f:1f:ba:d0:ff:ce:f0:f4:28:5e:56:0b: 8b:93:1f:c7:55:d6:f8:59:c4:97:81:f8:76:89:f3: ef:3e:98:b7:90:86:91:9e:92:97:df:ca:2a:46:32: be:3d:86:8d:1b:83:56:08:71:4f:df:fe:96:d5:bc: 87:f3:5b:4b:26:4d:65:51:f5:bd:e3:47:61:e4:0a: eb:b7:7d:c9:05:28:58:8a:32:77:9b:74:64:7b:47: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:93:D3:7C:5B:48:B6:0A:BB:09:E3:79:9A:79:93:73:D5:EE:79:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c510db3-858a-3d76-aaaf-09deeb46d6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:72:c4:d8:8a:97:c9:ce:6a:29:36:89:41:4d:5f:fc:dc:44: 7f:23:c4:95:c5:02:a3:b8:82:40:e7:54:5a:5e:cc:d0:be:30: 8a:63:eb:e6:e6:6d:dd:aa:f6:dd:2f:05:13:58:a0:dd:6f:52: c4:79:9e:32:ec:9a:a2:48:d6:4c:2a:21:a8:71:1b:51:86:57: d3:1c:48:9a:79:5d:fe:f0:ec:bf:59:cc:01:8f:e8:20:23:2c: 87:a8:5f:71:29:30:0f:89:4b:3d:c0:17:1c:e9:ce:76:a0:68: f9:0f:51:1e:31:82:13:25:3c:b9:61:b0:53:8b:ec:55:03:14: 01:b7:01:9d:4f:bc:7d:69:25:35:54:65:24:7a:68:26:9f:ea: 8a:10:62:e1:cf:b8:40:33:55:2d:b4:86:e1:8c:3e:36:ef:32: 08:45:8d:dc:39:fe:2c:e5:7b:e2:0a:15:6f:17:d8:91:0d:af: 63:bf:e0:5b:99:d0:23:73:5d:51:b1:0c:a6:c7:f0:5f:6b:cd: 7e:d3:91:77:bc:04:97:cc:49:df:8f:01:79:93:35:90:5d:7d: 1a:4d:57:d9:39:97:51:2a:23:70:0d:87:66:38:bb:0b:9f:f2: 51:da:bb:3c:be:e0:f2:24:f1:35:55:7e:4d:82:3d:05:06:3d: ec:29:ba:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpFeq10PyD4gH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NDc2YjAxMzMtZWM4Mi00OWMwLWE3MmItNWU1N2E0N2U2MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwzRSGducM5QnH26CcPjH61G33bbdKreQyW8 Vv0YJzkdIIknTEL0FB3CdeLGxG1SbYc77qRenjm608E2oDMVvXddVvJnNGdeE1/L 0AagpndmuonsMPTHGBUmbkEd+1DBiGVux1h1cQ6eTe9yG7WDcSU3CXwpmEqf/inu Q5Ri35KVS1rtiVIbEVlbJGmdzmZpXGmin0qCaNPtgMCOxBpHE5KcLBHlEoN/H7rQ /87w9CheVguLkx/HVdb4WcSXgfh2ifPvPpi3kIaRnpKX38oqRjK+PYaNG4NWCHFP 3/6W1byH81tLJk1lUfW940dh5Arrt33JBShYijJ3m3Rke0fxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByT03xbSLYKuwnjeZp5k3PV7nlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM1MTBkYjMtODU4YS0z ZDc2LWFhYWYtMDlkZWViNDZkNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACByxNiKl8nOaik2iUFNX/zcRH8jxJXFAqO4gkDnVFpezNC+MIpj6+bm bd2q9t0vBRNYoN1vUsR5njLsmqJI1kwqIahxG1GGV9McSJp5Xf7w7L9ZzAGP6CAj LIeoX3EpMA+JSz3AFxzpznagaPkPUR4xghMlPLlhsFOL7FUDFAG3AZ1PvH1pJTVU ZSR6aCaf6ooQYuHPuEAzVS20huGMPjbvMghFjdw5/izle+IKFW8X2JENr2O/4FuZ 0CNzXVGxDKbH8F9rzX7TkXe8BJfMSd+PAXmTNZBdfRpNV9k5l1EqI3ANh2Y4uwuf 8lHauzy+4PIk8TVVfk2CPQUGPewpukI= -----END CERTIFICATE-----Generated at Sun Jun 15 13:04:15 2025 by rpki-client