$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa File: 2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa (raw, json) Hash identifier: RAAEuS18H+IX8vxvl+XRcFtrO82xy0U+m+uNY5CxoqE= Subject key identifier: 02:5D:CA:31:4E:D6:10:6D:F0:15:32:22:FE:E4:91:6D:8A:AE:E0:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA89237FD39BC5484289C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.23.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:89:23:7f:d3:9b:c5:48:42:89:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=eb28f1b6-0da1-4ef8-aeb8-2c82c542fb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cb:37:f7:a5:7f:84:5e:41:c8:1e:85:56:49: f0:3c:ca:f0:c7:b8:95:61:6f:f6:a9:c1:35:89:d9: 8f:63:36:1c:f4:2b:6a:a0:18:c2:e6:26:55:a1:c9: 01:a9:eb:ea:bb:f9:5d:cb:30:1c:2c:ec:b3:d6:fd: d2:bf:5d:e4:ac:e9:42:9d:cf:08:63:3d:68:be:c6: f8:f2:36:e9:c9:88:2a:31:5c:8b:10:70:b4:2e:0c: 69:dc:51:c8:48:78:63:5e:66:da:67:28:44:e2:21: 96:5d:54:7d:8e:ca:b3:6d:47:14:3d:ea:1d:a2:50: 69:fd:22:92:69:b8:61:98:4a:9c:db:3f:cf:f8:4d: d8:6c:1f:30:b8:7b:44:82:5e:9b:1b:f4:75:c9:dc: 3f:ae:e9:94:c7:5a:98:57:9b:88:6f:df:b9:3f:a9: ce:25:ed:6d:0a:28:2b:73:ae:45:d1:09:89:8f:cf: a3:ee:63:f3:34:d7:38:18:4b:7a:57:8f:e0:3b:c6: 42:af:63:5b:ec:8a:46:a4:db:cf:f8:a0:46:2a:9c: cd:45:55:3c:43:44:8a:7b:ef:61:f4:e9:8c:a8:75: 53:ac:7b:19:3a:90:2d:5d:2d:d0:b2:1f:42:f6:49: d1:1a:fc:c3:ea:d6:dc:da:c4:78:9d:c4:51:89:52: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5D:CA:31:4E:D6:10:6D:F0:15:32:22:FE:E4:91:6D:8A:AE:E0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f5f9924-96e9-3f16-8945-0bf961f0c74b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d7:64:11:71:75:f2:a9:fd:60:86:ce:c4:d7:5e:a0:fa:69: f0:e2:64:b4:c7:5f:fe:01:cf:98:13:3a:95:5b:98:3f:ab:8b: 4d:89:5a:1f:13:b1:89:fd:71:01:17:4d:95:1d:c1:5f:b6:59: a1:1e:34:f3:56:b2:a6:d6:ab:ce:b7:4a:fd:a9:1e:e5:56:e1: e8:b2:88:01:09:5b:b0:a7:18:ff:97:57:bf:d1:ed:db:f3:f2: 09:2c:c0:fd:4b:31:7e:f9:af:eb:28:18:a5:65:32:47:b7:e8: fd:ac:85:5d:48:34:f2:b5:78:cc:c3:d0:9b:f2:1c:df:ad:e9: 1f:62:a8:b1:e3:ef:ad:91:4f:56:03:9c:76:c4:3b:f3:44:53: 76:29:65:97:96:b3:8d:11:54:ef:f3:5a:c1:38:81:71:02:1b: 10:24:09:62:c1:eb:f5:4a:1b:3c:77:af:7f:f5:79:18:6e:a4: b4:27:cb:b5:3c:f1:ba:93:2e:5c:cc:e5:38:d8:f7:0d:01:d9: 26:31:4a:2a:9a:e4:d3:ae:cf:76:b5:1e:f6:13:5d:dd:3b:fc: fe:bd:75:51:8d:a4:65:e0:06:c7:60:54:9b:84:7a:6e:95:8b: 2e:f0:ae:58:87:ca:86:4a:1e:51:ef:6b:ab:09:04:ea:ce:6d: a5:a2:99:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qokjf9ObxUhCicgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZWIyOGYxYjYtMGRhMS00ZWY4LWFlYjgtMmM4MmM1NDJmYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjss396V/hF5ByB6FVknwPMrwx7iVYW/2qcE1 idmPYzYc9CtqoBjC5iZVockBqevqu/ldyzAcLOyz1v3Sv13krOlCnc8IYz1ovsb4 8jbpyYgqMVyLEHC0Lgxp3FHISHhjXmbaZyhE4iGWXVR9jsqzbUcUPeodolBp/SKS abhhmEqc2z/P+E3YbB8wuHtEgl6bG/R1ydw/rumUx1qYV5uIb9+5P6nOJe1tCigr c65F0QmJj8+j7mPzNNc4GEt6V4/gO8ZCr2Nb7IpGpNvP+KBGKpzNRVU8Q0SKe+9h 9OmMqHVTrHsZOpAtXS3Qsh9C9knRGvzD6tbc2sR4ncRRiVLnLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJdyjFO1hBt8BUyIv7kkW2KruAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY1Zjk5MjQtOTZlOS0z ZjE2LTg5NDUtMGJmOTYxZjBjNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLXZBFxdfKp/WCGzsTXXqD6afDiZLTHX/4Bz5gTOpVbmD+ri02JWh8T sYn9cQEXTZUdwV+2WaEeNPNWsqbWq863Sv2pHuVW4eiyiAEJW7CnGP+XV7/R7dvz 8gkswP1LMX75r+soGKVlMke36P2shV1INPK1eMzD0JvyHN+t6R9iqLHj762RT1YD nHbEO/NEU3YpZZeWs40RVO/zWsE4gXECGxAkCWLB6/VKGzx3r3/1eRhupLQny7U8 8bqTLlzM5TjY9w0B2SYxSiqa5NOuz3a1HvYTXd07/P69dVGNpGXgBsdgVJuEem6V iy7wrliHyoZKHlHva6sJBOrObaWimaQ= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:24 2025 by rpki-client