$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa File: 2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa (raw, json) Hash identifier: fZRT8XSCJ17zRMTm0zvDuxEm1zmnoRXF6i/jEmLcQns= Subject key identifier: CD:E9:CE:39:17:18:C5:B6:22:48:F7:E0:20:0E:82:5D:44:56:BB:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA913E213795607D8A16C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.19.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:91:3e:21:37:95:60:7d:8a:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=01f5d32c-22e3-4950-b64a-269f76403192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:5a:4f:53:8c:d0:26:2c:13:7f:f7:8e:1e: a2:5f:55:80:a2:6f:b7:10:62:54:f6:c5:e2:22:4c: e4:84:07:6e:96:26:7a:5c:fb:db:29:6e:f8:5a:63: 5e:90:01:cd:d3:93:b2:cd:43:c4:ff:34:c7:a7:27: 6e:18:77:34:df:a0:00:28:46:21:6d:23:3b:c3:ad: 26:b3:ae:7d:b3:d1:5d:d6:a1:96:18:9d:89:73:3a: 9f:4b:77:07:67:54:6e:08:2f:2b:11:23:70:16:b2: 71:03:b0:cd:0e:8e:40:98:a2:6f:67:37:c9:ae:8e: bd:23:e6:05:f5:16:3c:b8:bc:1b:29:d3:de:0a:af: b5:c7:1e:7f:5f:85:dc:72:54:a6:8e:f1:7f:49:72: 0c:0f:18:d1:f6:55:af:a1:59:e6:a7:55:49:cb:e2: c6:3d:3b:1d:04:5b:8f:f5:ef:f2:44:cb:74:83:e5: 32:48:47:94:77:63:79:e4:02:25:10:ea:22:ad:e5: 1d:ef:34:06:2e:17:e6:0c:3e:9a:43:7e:7d:fa:7f: 51:75:b0:48:11:0b:04:d2:dd:ae:10:b1:55:3b:13: 84:2e:5a:5f:53:37:0a:b9:38:e7:2e:44:5c:8b:9d: 5e:bc:d2:93:2d:51:8d:a5:3d:f3:13:91:6c:2e:20: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E9:CE:39:17:18:C5:B6:22:48:F7:E0:20:0E:82:5D:44:56:BB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:23:e7:77:1f:5a:2d:04:68:39:a6:91:76:64:47:ff:9f:a3: fc:4c:9b:94:0d:0e:01:37:14:be:f8:4a:b0:c9:04:2d:43:05: dd:5d:46:ce:98:f8:15:f9:3a:19:73:62:bb:22:13:fe:f9:4f: 92:19:65:a2:8f:49:48:f5:66:04:00:ee:ac:84:28:14:18:7f: f4:39:60:e4:e8:7c:ce:4e:18:bd:ef:3e:e3:1c:74:d6:5a:13: c9:42:e9:89:a6:d5:4e:b3:4d:b4:f2:38:f9:72:8d:3e:8a:41: 26:8f:63:75:0b:47:53:fe:e6:85:5e:c2:a5:97:8a:0f:b9:4a: e5:4f:37:68:97:85:8c:31:33:48:55:a9:e9:c0:07:09:a9:48: f8:2b:e1:31:3f:b2:bd:7f:83:60:16:66:67:5b:45:d2:fe:3a: 38:85:2b:da:d1:75:68:87:71:73:8b:20:17:7b:33:85:eb:1a: 36:a9:4b:b7:2c:7b:3e:62:83:ad:a6:c7:1d:62:33:c0:2f:9a: 01:9b:d5:20:3f:ed:bd:93:d8:74:b0:77:30:1b:24:e8:23:50: 89:47:df:b8:1e:c0:28:68:5f:75:7c:f5:2c:db:22:06:97:ff: 81:9c:b1:24:fa:c6:ea:f4:e0:28:cf:ba:4d:b1:2c:a0:19:7f: 31:25:20:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpE+ITeVYH2KFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MDFmNWQzMmMtMjJlMy00OTUwLWI2NGEtMjY5Zjc2NDAzMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0taT1OM0CYsE3/3jh6iX1WAom+3EGJU9sXi IkzkhAduliZ6XPvbKW74WmNekAHN05OyzUPE/zTHpyduGHc036AAKEYhbSM7w60m s659s9Fd1qGWGJ2JczqfS3cHZ1RuCC8rESNwFrJxA7DNDo5AmKJvZzfJro69I+YF 9RY8uLwbKdPeCq+1xx5/X4XcclSmjvF/SXIMDxjR9lWvoVnmp1VJy+LGPTsdBFuP 9e/yRMt0g+UySEeUd2N55AIlEOoireUd7zQGLhfmDD6aQ359+n9RdbBIEQsE0t2u ELFVOxOELlpfUzcKuTjnLkRci51evNKTLVGNpT3zE5FsLiDmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3pzjkXGMW2Ikj34CAOgl1EVrtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRjYjJjNjctYzdkZS0z OWZkLThmMDYtZGQ0YmMyYmRmNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4j53cfWi0EaDmmkXZkR/+fo/xMm5QNDgE3FL74SrDJBC1DBd1dRs6Y +BX5OhlzYrsiE/75T5IZZaKPSUj1ZgQA7qyEKBQYf/Q5YOTofM5OGL3vPuMcdNZa E8lC6Ymm1U6zTbTyOPlyjT6KQSaPY3ULR1P+5oVewqWXig+5SuVPN2iXhYwxM0hV qenABwmpSPgr4TE/sr1/g2AWZmdbRdL+OjiFK9rRdWiHcXOLIBd7M4XrGjapS7cs ez5ig62mxx1iM8AvmgGb1SA/7b2T2HSwdzAbJOgjUIlH37gewChoX3V89SzbIgaX /4GcsST6xur04CjPuk2xLKAZfzElII4= -----END CERTIFICATE-----Generated at Sun Jun 15 12:31:56 2025 by rpki-client