$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa File: 2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa (raw, json) Hash identifier: Cvv9BKnc+PUp64HVzeWR06dGEa7S64KO43xi20Uc43Q= Subject key identifier: F8:A3:4A:17:CE:DB:F6:9B:61:7E:F0:51:03:53:7F:ED:A1:F5:72:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D165879C536DA3DB1B03F700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.18.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:9c:53:6d:a3:db:1b:03:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=8918d01d-a6e5-4be0-9ff3-a5872726143c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:2f:74:28:34:13:0e:bb:78:ee:be:6c:4f: 65:4b:27:bd:0e:43:d4:75:6f:4a:d3:61:68:e3:26: d9:d9:de:ac:53:eb:8c:25:4c:e6:90:01:b3:a1:51: c6:3d:bb:51:d6:4d:4b:e5:60:14:7d:c8:da:d9:1c: 30:7a:fd:1d:35:c5:18:4b:ed:3a:53:a8:7f:c2:4f: d0:04:aa:0b:67:e1:ec:81:a1:27:bf:52:95:b4:cd: 0e:0e:53:c8:35:ff:32:43:d4:10:37:94:96:2c:dc: 04:17:e0:80:7a:dc:8e:0c:a6:a0:78:40:16:5f:bb: e0:07:11:85:c3:de:7d:1d:ef:2a:dd:7f:9d:08:f8: 96:09:93:82:73:3c:dd:53:c4:03:64:6f:23:b7:50: 04:a2:5e:02:70:5d:16:81:d4:95:29:d4:9e:f7:2f: 38:1e:96:ca:25:bc:19:9e:b8:fd:83:6c:ff:00:6c: 32:3f:3c:3d:e6:74:f5:e5:f5:ec:da:ee:70:45:11: ae:92:f9:dd:52:02:4d:41:07:04:2a:7f:cc:eb:f4: c4:50:7c:57:e9:92:8d:d3:0e:28:f9:ed:5f:5f:1a: b0:a4:5c:50:e4:66:a9:72:51:87:30:c3:77:a9:da: c4:22:1f:42:3b:3a:48:ba:7e:cf:51:7a:c9:34:3b: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:4A:17:CE:DB:F6:9B:61:7E:F0:51:03:53:7F:ED:A1:F5:72:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:38:97:b7:f0:f6:a3:88:ef:16:39:db:c9:d6:a4:33:1b:4e: a5:95:3e:c0:72:dd:36:85:5f:4f:9e:ec:4b:10:7e:84:31:b4: 05:d9:8a:e1:ae:18:b6:a6:46:7c:50:88:1e:ff:e3:e2:d4:54: dc:0c:7c:5b:10:ca:40:bc:fc:e2:47:8f:c3:7c:e3:81:27:7b: 70:b4:7f:84:43:41:2c:c4:ad:32:ee:54:4c:ae:0d:02:80:98: f4:87:3c:0d:34:3e:8e:4b:c3:89:aa:34:9f:8b:fa:5c:1f:96: bc:bf:f0:c6:54:54:2a:f3:49:bf:44:ec:72:67:d1:3b:fd:0a: 30:53:85:19:f8:71:b3:2e:19:5e:5a:35:20:c5:76:90:5a:eb: 9d:a8:63:8f:21:3b:37:a8:f2:7f:20:77:d6:9e:64:92:e1:c2: e0:f4:39:0b:e6:2c:d9:ab:19:f1:9e:94:00:a5:99:88:3f:69: fb:97:5d:33:7e:0a:ad:17:ff:24:55:87:52:74:22:52:42:ad: 56:e4:e5:ff:99:3a:95:68:5e:ff:ff:8a:0f:07:5f:e5:ac:63: a1:bc:2b:8c:bc:1c:fa:3a:af:0d:ae:01:ad:9f:62:13:46:ac: 73:06:23:4c:7b:39:d2:10:4f:92:f7:22:7a:ac:27:28:0e:d1: a9:19:b3:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYecU22j2xsD9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODkxOGQwMWQtYTZlNS00YmUwLTlmZjMtYTU4NzI3MjYxNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna8vdCg0Ew67eO6+bE9lSye9DkPUdW9K02Fo 4ybZ2d6sU+uMJUzmkAGzoVHGPbtR1k1L5WAUfcja2Rwwev0dNcUYS+06U6h/wk/Q BKoLZ+HsgaEnv1KVtM0ODlPINf8yQ9QQN5SWLNwEF+CAetyODKageEAWX7vgBxGF w959He8q3X+dCPiWCZOCczzdU8QDZG8jt1AEol4CcF0WgdSVKdSe9y84HpbKJbwZ nrj9g2z/AGwyPzw95nT15fXs2u5wRRGukvndUgJNQQcEKn/M6/TEUHxX6ZKN0w4o +e1fXxqwpFxQ5GapclGHMMN3qdrEIh9COzpIun7PUXrJNDvPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPijShfO2/abYX7wUQNTf+2h9XLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmExMjMwYTctNmU1NC0z MGU4LTk3M2ItZmRkZjZjZGI5YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI44l7fw9qOI7xY528nWpDMbTqWVPsBy3TaFX0+e7EsQfoQxtAXZiuGu GLamRnxQiB7/4+LUVNwMfFsQykC8/OJHj8N844Ene3C0f4RDQSzErTLuVEyuDQKA mPSHPA00Po5Lw4mqNJ+L+lwflry/8MZUVCrzSb9E7HJn0Tv9CjBThRn4cbMuGV5a NSDFdpBa652oY48hOzeo8n8gd9aeZJLhwuD0OQvmLNmrGfGelAClmYg/afuXXTN+ Cq0X/yRVh1J0IlJCrVbk5f+ZOpVoXv//ig8HX+WsY6G8K4y8HPo6rw2uAa2fYhNG rHMGI0x7OdIQT5L3InqsJygO0akZs/c= -----END CERTIFICATE-----Generated at Sun Jun 15 11:47:17 2025 by rpki-client