$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa File: 40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json) Hash identifier: Pk+Q2gYn+Y5NBbibRVldu7DVCY4j3FEMciPihOV1fZE= Subject key identifier: 53:66:2D:32:25:FE:26:E0:D2:F8:5A:FA:0C:EF:57:A2:5F:33:E1:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849EEB508E0AC15E5B6D2207A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 7029 IP address blocks: 98.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:08:e0:ac:15:e5:b6:d2:20:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=1b3b6be6-e103-4e9a-a0ce-04c2cbd6e654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:58:d7:65:4f:f9:aa:1a:8d:0e:58:7a:d7: cb:8e:6d:88:24:b5:f6:dd:0c:d8:6e:9f:ec:26:aa: 7e:7b:5e:20:46:bc:de:4c:c3:e8:f4:c4:28:86:28: f6:5c:4e:b2:e8:11:63:89:05:11:26:71:12:f7:1f: 89:34:53:aa:88:14:07:47:c3:95:e3:32:fe:ac:c3: e0:c3:9a:aa:02:f4:67:9f:18:e0:ec:7f:f1:e1:c4: 6d:f9:c6:3b:8e:56:75:2d:66:63:eb:b9:15:cc:d5: 9f:9c:45:9b:1f:00:47:77:ed:fa:9a:3c:e2:e9:13: ba:4b:f8:e7:f7:0e:da:59:64:82:7e:e3:22:b0:d0: 13:95:c3:c7:49:b9:bd:93:f9:ad:a4:30:14:da:2c: 09:e0:9f:c0:e9:6c:d4:b0:7e:46:03:e5:f0:fe:ce: 7a:2c:fd:15:45:56:72:2c:64:83:31:10:94:bc:8f: 6d:a0:99:12:fc:d2:d0:ef:3a:4e:da:ce:9b:c2:d0: 9a:68:cd:1b:88:06:00:e6:d1:0f:7c:e7:08:34:47: de:2b:df:38:f6:bc:ec:e1:6d:67:6e:e9:c9:ce:51: 48:bc:7e:c6:c3:94:5d:71:a1:16:0e:f7:ab:6b:5d: 81:5d:8f:4e:ab:f1:09:63:e4:94:66:6e:68:6e:00: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:2D:32:25:FE:26:E0:D2:F8:5A:FA:0C:EF:57:A2:5F:33:E1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9b:1d:56:ae:ce:25:03:b4:15:99:52:54:1f:10:f1:34:7b: 76:1f:20:0e:1d:f6:f6:a7:6d:b4:44:50:ef:02:bc:ce:73:69: 45:4e:50:10:5d:b2:fb:70:0c:95:9f:f2:1f:d1:4d:47:e5:bb: 2f:ac:8a:b8:b9:c6:cb:24:00:9d:47:e9:99:26:5f:7e:29:5e: a2:1c:f5:50:7a:e9:e2:97:bc:43:df:a6:b6:22:85:a4:de:f5: 1d:e1:84:0e:6d:7c:09:e5:4f:25:fc:7f:90:0d:3e:e2:9f:ea: 3f:8c:41:be:f0:9a:1d:b1:e3:f5:12:62:55:50:69:ed:27:6d: 7d:65:14:04:41:82:93:d9:94:62:97:d1:0f:cd:87:5f:5f:e8: a1:6f:fc:a3:b9:2a:b8:71:52:ae:cf:d3:d1:60:dc:83:89:b9: 77:a2:22:c4:ff:2f:c4:5f:88:a0:8b:1f:ce:f0:ee:06:71:a0: 5a:88:8a:81:f0:7d:10:82:06:20:5e:1a:ac:54:9f:d3:02:b2: 05:94:7b:49:b8:c2:8d:fb:2a:36:0d:3b:88:cc:de:54:30:95: d9:04:f3:b5:a2:d1:f6:bf:4d:94:d5:ef:ba:e7:14:b4:c4:d0: c2:31:e6:da:c6:df:1c:99:82:e9:8d:f5:54:39:00:e4:3a:83: e2:85:78:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQjgrBXlttIgegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk MWIzYjZiZTYtZTEwMy00ZTlhLWEwY2UtMDRjMmNiZDZlNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUdY12VP+aoajQ5YetfLjm2IJLX23QzYbp/s Jqp+e14gRrzeTMPo9MQohij2XE6y6BFjiQURJnES9x+JNFOqiBQHR8OV4zL+rMPg w5qqAvRnnxjg7H/x4cRt+cY7jlZ1LWZj67kVzNWfnEWbHwBHd+36mjzi6RO6S/jn 9w7aWWSCfuMisNATlcPHSbm9k/mtpDAU2iwJ4J/A6WzUsH5GA+Xw/s56LP0VRVZy LGSDMRCUvI9toJkS/NLQ7zpO2s6bwtCaaM0biAYA5tEPfOcINEfeK9849rzs4W1n bunJzlFIvH7Gw5RdcaEWDvera12BXY9Oq/EJY+SUZm5obgAG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNmLTIl/ibg0vha+gzvV6JfM+FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBlMGIzMWUtMDFmMi0z MTdmLWE4ZDAtNzdjZTkyN2EyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGebHVauziUDtBWZUlQfEPE0e3YfIA4d9vanbbREUO8CvM5zaUVOUBBd svtwDJWf8h/RTUfluy+siri5xsskAJ1H6ZkmX34pXqIc9VB66eKXvEPfprYihaTe 9R3hhA5tfAnlTyX8f5ANPuKf6j+MQb7wmh2x4/USYlVQae0nbX1lFARBgpPZlGKX 0Q/Nh19f6KFv/KO5KrhxUq7P09Fg3IOJuXeiIsT/L8RfiKCLH87w7gZxoFqIioHw fRCCBiBeGqxUn9MCsgWUe0m4wo37KjYNO4jM3lQwldkE87Wi0fa/TZTV77rnFLTE 0MIx5trG3xyZgumN9VQ5AOQ6g+KFeAA= -----END CERTIFICATE-----Generated at Sun Jun 15 13:00:35 2025 by rpki-client