$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa File: 201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa (raw, json) Hash identifier: YrPfUnVepqDAG541nrfbVpEFz+XdbWw6um0w9LpuYVM= Subject key identifier: E0:DD:40:AD:4A:CE:86:A1:D2:6E:8D:C5:92:90:5E:07:FE:9F:A4:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D16587B772BFA3B740FB1480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.22.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:b7:72:bf:a3:b7:40:fb:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=48ba2f9e-b64a-4778-9af0-b916ad66a7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:75:6b:3f:1f:7b:81:48:55:21:91:f7:46: 82:86:32:59:0f:a3:99:7e:31:d9:77:7a:42:05:52: fe:a0:1e:05:50:c3:bb:d2:4f:24:43:70:82:48:5d: 75:23:3a:57:bf:84:58:d7:53:67:7b:74:98:a9:b6: ec:2e:81:97:b8:c4:d9:8f:40:0d:60:5f:5d:40:ee: 0a:4c:f6:ab:f5:b1:aa:a1:b9:27:ad:94:ac:90:d4: 2d:a7:d1:13:31:c7:2b:e6:93:2f:89:e9:01:cc:65: 6d:b0:61:81:1b:b0:c6:6b:bf:7e:8e:e6:b9:32:20: 64:33:7a:8b:37:51:c3:f4:c9:7c:3d:7a:20:40:9b: f4:9b:9e:76:1c:4c:35:ad:45:fc:b2:4e:0b:f0:91: 9e:27:3c:56:d3:12:56:97:c1:67:f5:6a:13:26:f0: 62:e6:05:65:74:e1:a9:8c:a5:26:27:b2:a8:da:b8: 5d:6b:aa:4b:58:85:c0:ab:af:ea:b9:28:23:39:7d: 33:02:ec:97:62:61:70:dd:de:54:77:bc:ea:99:de: 89:3a:b6:71:a3:3d:b4:2b:8c:17:68:38:93:33:07: 9b:09:a2:37:47:98:7e:33:78:d8:5c:0b:c5:ea:c1: 47:54:17:ab:d2:68:02:ca:7e:e3:e2:4e:26:f6:3f: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:40:AD:4A:CE:86:A1:D2:6E:8D:C5:92:90:5E:07:FE:9F:A4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ff:0f:7e:46:ea:4c:71:37:f4:c9:de:a7:5c:cf:65:a0:50: 8e:07:5f:30:93:46:0c:09:22:a7:72:80:e9:90:1a:8a:05:aa: 8f:12:a4:28:84:31:89:1d:1a:d0:64:00:48:24:24:b7:fe:4a: 12:5d:1e:ab:99:63:29:c6:a7:cd:e9:d0:b0:e9:fe:43:c2:c8: de:83:26:93:72:78:2d:fb:e6:70:b2:a0:ab:f8:b7:af:31:58: 12:3c:4a:f9:75:ef:be:03:a5:5e:b2:1c:56:b0:58:03:ef:d7: ce:46:d0:b3:1a:44:20:74:65:fd:a3:ab:75:9c:ea:26:1a:db: f8:4c:41:d9:ac:b0:1d:ab:82:31:02:3b:df:55:bf:3e:6f:50: 33:0d:1a:89:b5:59:b8:95:0c:3c:e4:91:58:57:be:71:ec:15: 83:37:aa:ec:86:d7:9e:df:4a:0f:4b:3a:f5:d2:d6:0d:39:22: 82:9e:99:7a:7f:70:33:74:a6:c7:d5:08:c8:df:7c:61:7a:70: 1d:b3:10:58:2b:5b:ed:43:3e:80:d6:b7:9b:06:a7:8c:6e:f7: 76:ec:0d:98:64:92:e1:af:2a:02:c0:8a:59:a4:26:98:6d:85: 32:a4:d8:f4:31:ea:51:59:7e:29:31:ec:79:77:54:19:9a:ff: 52:57:36:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYe3cr+jt0D7FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NDhiYTJmOWUtYjY0YS00Nzc4LTlhZjAtYjkxNmFkNjZhN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSh1az8fe4FIVSGR90aChjJZD6OZfjHZd3pC BVL+oB4FUMO70k8kQ3CCSF11IzpXv4RY11Nne3SYqbbsLoGXuMTZj0ANYF9dQO4K TPar9bGqobknrZSskNQtp9ETMccr5pMviekBzGVtsGGBG7DGa79+jua5MiBkM3qL N1HD9Ml8PXogQJv0m552HEw1rUX8sk4L8JGeJzxW0xJWl8Fn9WoTJvBi5gVldOGp jKUmJ7Ko2rhda6pLWIXAq6/quSgjOX0zAuyXYmFw3d5Ud7zqmd6JOrZxoz20K4wX aDiTMwebCaI3R5h+M3jYXAvF6sFHVBer0mgCyn7j4k4m9j+ZsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODdQK1Kzoah0m6NxZKQXgf+n6R3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAxYmM1OGYtNzA0ZC0z OGJiLTk3MzEtMGY0Y2E0YjBkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb/D35G6kxxN/TJ3qdcz2WgUI4HXzCTRgwJIqdygOmQGooFqo8SpCiE MYkdGtBkAEgkJLf+ShJdHquZYynGp83p0LDp/kPCyN6DJpNyeC375nCyoKv4t68x WBI8Svl1774DpV6yHFawWAPv185G0LMaRCB0Zf2jq3Wc6iYa2/hMQdmssB2rgjEC O99Vvz5vUDMNGom1WbiVDDzkkVhXvnHsFYM3quyG157fSg9LOvXS1g05IoKemXp/ cDN0psfVCMjffGF6cB2zEFgrW+1DPoDWt5sGp4xu93bsDZhkkuGvKgLAilmkJpht hTKk2PQx6lFZfikx7Hl3VBma/1JXNks= -----END CERTIFICATE-----Generated at Sun Jun 15 20:42:25 2025 by rpki-client