$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1bc1fc8f-9409-3829-bf00-d74e3355a8f9.roa File: 1bc1fc8f-9409-3829-bf00-d74e3355a8f9.roa (raw, json) Hash identifier: sgBTLaLsMsc1uv36dgQX9GFI97DYRdo0BxDvjDK09mI= Subject key identifier: 49:AE:39:3F:C8:61:C6:BC:50:A1:CA:3F:B8:F0:44:56:A8:94:91:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D16587A7BD03F71239215E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1bc1fc8f-9409-3829-bf00-d74e3355a8f9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.19.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:a7:bd:03:f7:12:39:21:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=d8f68919-c80c-4d9b-9633-4111efca3152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:56:9d:4a:19:89:db:eb:06:1b:88:e9:0c: 55:50:54:d6:64:f7:32:31:20:c3:40:71:b9:97:6c: 47:0e:18:42:24:c9:20:47:92:6f:b5:e6:76:02:91: b9:eb:01:c9:91:0b:70:26:2f:38:e0:df:80:1c:75: c8:fa:41:52:78:ad:df:38:59:8b:a8:a5:9e:73:5d: 76:0b:04:19:5e:65:3f:20:19:42:4b:ca:de:63:93: 60:d4:f3:32:e6:5f:60:f5:15:72:33:f3:12:58:35: ae:df:1d:33:6e:a7:61:13:17:dd:40:c0:a7:a6:ae: b1:9e:90:d4:15:42:bf:b1:a9:2d:bc:34:6b:59:d2: 44:27:23:4b:04:4f:f3:49:95:3f:8e:8a:57:89:8e: 12:32:2b:61:37:4a:58:95:0f:b0:79:58:47:ad:2d: ac:06:14:f3:e9:8e:ad:a8:07:69:ed:c8:e8:84:68: 3d:e8:43:48:81:8b:5f:2c:f1:a1:f0:16:26:87:37: 0c:a1:54:2d:e7:d0:8f:fc:7a:87:c3:29:bf:67:02: b8:96:1c:e8:16:50:db:4c:83:49:99:ed:85:b5:91: 8e:3d:a9:25:9e:3a:01:67:c9:4d:81:08:cd:2e:29: 43:48:df:ba:4c:83:75:39:20:47:3a:70:5b:c5:f7: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AE:39:3F:C8:61:C6:BC:50:A1:CA:3F:B8:F0:44:56:A8:94:91:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1bc1fc8f-9409-3829-bf00-d74e3355a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:41:33:bc:aa:0e:26:5f:45:4e:c7:d5:6e:ca:71:ea:da:ce: 9e:cb:c0:cb:2f:dc:46:06:8d:9a:33:f1:97:0e:f6:86:f4:9c: ff:e6:60:04:41:38:6b:22:a2:1a:b9:5f:0f:93:89:d3:9a:ef: 23:43:bc:f0:30:e5:c3:a2:bf:cd:cd:09:1a:25:75:08:28:f2: 5a:3b:40:97:e6:7f:89:d1:00:ea:bf:64:f6:3f:82:c3:2b:18: a4:46:e8:f2:23:4a:7c:ac:ae:af:da:82:db:73:9f:13:c1:33: 08:5b:3f:49:90:0c:e3:27:90:46:7c:f8:bf:3b:53:c2:47:e8: 92:ca:dd:50:d8:ad:83:d4:60:73:a1:96:4d:bc:07:a4:e3:f0: 22:e8:6b:14:a2:5b:04:68:ac:60:c1:68:ee:d6:68:f5:2d:1a: f0:b0:9e:86:d2:7b:e3:7f:2e:0c:aa:4e:e2:61:e4:48:3e:b2: 5b:6c:1b:a8:b2:f1:e5:f6:8b:92:00:02:75:c4:ef:fd:97:2c: 95:dd:fa:b8:70:a3:fd:04:ae:be:48:ad:2c:7e:e9:d2:1e:9f: 89:f9:b3:71:c7:a6:a0:3d:78:99:17:dd:4f:ef:fc:9d:5e:01: 91:a1:89:e4:03:33:45:08:90:18:e0:e0:8a:ec:32:53:92:69: ed:42:78:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYenvQP3EjkhXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDhmNjg5MTktYzgwYy00ZDliLTk2MzMtNDExMWVmY2EzMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvJWnUoZidvrBhuI6QxVUFTWZPcyMSDDQHG5 l2xHDhhCJMkgR5JvteZ2ApG56wHJkQtwJi844N+AHHXI+kFSeK3fOFmLqKWec112 CwQZXmU/IBlCS8reY5Ng1PMy5l9g9RVyM/MSWDWu3x0zbqdhExfdQMCnpq6xnpDU FUK/saktvDRrWdJEJyNLBE/zSZU/jopXiY4SMithN0pYlQ+weVhHrS2sBhTz6Y6t qAdp7cjohGg96ENIgYtfLPGh8BYmhzcMoVQt59CP/HqHwym/ZwK4lhzoFlDbTINJ me2FtZGOPaklnjoBZ8lNgQjNLilDSN+6TIN1OSBHOnBbxfe61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmuOT/IYca8UKHKP7jwRFaolJETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWJjMWZjOGYtOTQwOS0z ODI5LWJmMDAtZDc0ZTMzNTVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5BM7yqDiZfRU7H1W7Kcerazp7LwMsv3EYGjZoz8ZcO9ob0nP/mYARB OGsiohq5Xw+TidOa7yNDvPAw5cOiv83NCRoldQgo8lo7QJfmf4nRAOq/ZPY/gsMr GKRG6PIjSnysrq/agttznxPBMwhbP0mQDOMnkEZ8+L87U8JH6JLK3VDYrYPUYHOh lk28B6Tj8CLoaxSiWwRorGDBaO7WaPUtGvCwnobSe+N/LgyqTuJh5Eg+sltsG6iy 8eX2i5IAAnXE7/2XLJXd+rhwo/0Err5IrSx+6dIen4n5s3HHpqA9eJkX3U/v/J1e AZGhieQDM0UIkBjg4IrsMlOSae1CeKg= -----END CERTIFICATE-----Generated at Sun Jun 15 13:23:56 2025 by rpki-client