$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa File: 44079553-10d5-3258-bfe6-683d36cf6241.roa (raw, json) Hash identifier: X+MjH9W6/dJ9jv/D1UEu1Tafc311mGR+Y7fKCK8HX6o= Subject key identifier: DC:20:6F:8E:1C:C0:28:FD:C9:34:41:00:36:0B:22:D6:8A:69:DD:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497079ADB4CA7D1A72CB7C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.20.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:79:ad:b4:ca:7d:1a:72:cb:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=88b0b953-9f6a-454e-8adb-c13a9675b287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:7a:d4:fb:9c:66:56:a9:56:32:ec:03:85: ce:f4:2b:c7:46:73:f4:a8:b2:5d:c1:7a:9e:d8:12: 58:85:75:1f:bc:19:07:ef:8d:6f:55:35:7d:80:35: 3b:5a:a3:de:ec:7b:7e:69:58:11:6b:e3:75:43:4f: ac:db:9d:09:13:93:cf:b1:ee:ac:a4:0c:d8:74:eb: 34:8b:00:3e:ff:76:bc:89:bb:f6:b8:84:d3:41:34: 00:06:bb:66:ed:a9:fc:34:52:ad:2d:35:ac:45:52: dc:50:e8:a7:b2:10:5d:08:49:8a:6c:6b:56:c7:d1: b6:fe:06:49:6b:2a:2e:ae:60:20:c7:4e:55:e3:56: fe:34:9f:c5:91:b2:58:b8:74:7e:2d:6c:6b:04:61: 27:6c:d3:61:8d:c2:fb:23:4f:90:97:ea:03:85:94: 91:5a:a1:ab:4a:e5:28:0c:f0:6c:07:47:8c:8a:cb: 77:45:0f:44:80:ed:d2:e2:b0:ba:47:c7:fb:3b:65: c5:98:8e:a8:75:fd:b8:95:ed:6e:63:8c:2c:04:e1: f1:21:e6:cc:99:c6:50:e8:0c:d7:7a:58:a5:2b:04: ef:f5:89:6f:52:f7:a9:0e:a5:8e:ae:c7:2c:24:52: 9d:69:b3:5d:6a:b5:83:90:28:0a:54:b2:1e:86:16: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:20:6F:8E:1C:C0:28:FD:C9:34:41:00:36:0B:22:D6:8A:69:DD:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:67:33:cc:be:c8:6c:c6:b5:63:e6:2f:9c:a9:3c:b1:e2:ce: d5:9d:69:ab:1d:b7:7e:46:07:65:cc:6a:de:5a:c8:46:71:82: 07:20:91:46:69:ae:5e:34:99:c1:a1:1b:37:ff:8f:97:dc:21: 8d:7e:25:b8:c3:89:da:67:02:7c:b3:ac:c5:d1:c4:fb:a2:e1: 26:db:5d:9c:78:4c:aa:e1:95:24:82:3c:5a:11:4b:81:b4:23: 6d:7d:6b:bc:f8:be:39:aa:8e:61:8d:9e:1f:e9:d6:89:25:9e: 56:75:02:d1:b5:04:a4:ee:67:60:53:96:f0:1e:ac:a5:e9:28: 35:f1:17:ff:0d:8f:81:f6:cf:f4:97:81:0d:87:a7:ba:9a:da: 7c:48:dc:35:e8:05:6f:97:49:d3:03:86:f1:90:44:46:f5:53: 91:8f:d4:21:1a:23:02:27:53:57:be:63:6b:f9:cf:b1:c5:27: 46:d5:e4:44:f0:58:15:be:98:fc:17:cf:18:66:2f:59:9b:46: 01:15:6a:ca:93:34:0b:f2:9e:eb:2b:4a:d7:fb:42:af:f8:82: 2d:a3:8a:5d:f4:8b:d9:f0:0a:95:17:7f:35:d5:28:66:50:f7: 01:1e:f8:84:7e:dc:ae:28:7a:b6:7e:12:80:b2:a4:f6:a5:49: f6:dc:15:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHmttMp9GnLLfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ODhiMGI5NTMtOWY2YS00NTRlLThhZGItYzEzYTk2NzViMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHt61PucZlapVjLsA4XO9CvHRnP0qLJdwXqe 2BJYhXUfvBkH741vVTV9gDU7WqPe7Ht+aVgRa+N1Q0+s250JE5PPse6spAzYdOs0 iwA+/3a8ibv2uITTQTQABrtm7an8NFKtLTWsRVLcUOinshBdCEmKbGtWx9G2/gZJ ayourmAgx05V41b+NJ/FkbJYuHR+LWxrBGEnbNNhjcL7I0+Ql+oDhZSRWqGrSuUo DPBsB0eMist3RQ9EgO3S4rC6R8f7O2XFmI6odf24le1uY4wsBOHxIebMmcZQ6AzX elilKwTv9YlvUvepDqWOrscsJFKdabNdarWDkCgKVLIehhbQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwgb44cwCj9yTRBADYLItaKad1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDQwNzk1NTMtMTBkNS0z MjU4LWJmZTYtNjgzZDM2Y2Y2MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdnM8y+yGzGtWPmL5ypPLHiztWdaasdt35GB2XMat5ayEZxggcgkUZp rl40mcGhGzf/j5fcIY1+JbjDidpnAnyzrMXRxPui4SbbXZx4TKrhlSSCPFoRS4G0 I219a7z4vjmqjmGNnh/p1oklnlZ1AtG1BKTuZ2BTlvAerKXpKDXxF/8Nj4H2z/SX gQ2Hp7qa2nxI3DXoBW+XSdMDhvGQREb1U5GP1CEaIwInU1e+Y2v5z7HFJ0bV5ETw WBW+mPwXzxhmL1mbRgEVasqTNAvynusrStf7Qq/4gi2jil30i9nwCpUXfzXVKGZQ 9wEe+IR+3K4oerZ+EoCypPalSfbcFfg= -----END CERTIFICATE-----Generated at Fri Aug 8 21:00:24 2025 by rpki-client