$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa File: 5125e331-f265-3594-a49c-f30257eea820.roa (raw, json) Hash identifier: QPUUqIjQHGgnmbjHybgwrsftiR8DYMUHpeSXNoAhWAk= Subject key identifier: 23:E4:B5:64:CA:5D:00:94:0A:8B:E2:A4:21:7D:42:E3:49:C4:82:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CD0F19372D7CF8538342 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.21.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cd:0f:19:37:2d:7c:f8:53:83:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a574fb03-3e23-428f-8e74-62bb2f78a19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:3d:2e:1f:c5:1a:0b:65:49:cf:38:92:c2: 41:df:f1:3e:39:07:a1:e3:2c:76:0e:2d:7e:bd:74: 67:08:ef:85:42:49:8f:b4:61:fe:ca:a8:eb:74:54: 8c:b7:6a:68:d7:9f:4d:10:df:58:02:a5:df:a0:d8: d9:db:60:47:3c:fc:f5:9d:bf:66:57:43:95:93:d8: f9:53:aa:5b:fe:aa:96:f0:12:5b:61:89:18:57:b6: 69:b6:b7:ac:4b:c5:e6:17:09:ec:03:7c:70:a2:01: a4:b9:81:ad:9b:21:2c:12:5b:64:88:d0:ec:31:69: 9a:b7:a8:0e:26:eb:e4:59:84:b0:68:2c:16:ca:94: a6:29:8e:03:a1:5a:8d:0e:0d:38:cc:f4:ae:89:4a: 06:53:ab:4e:9e:c6:b3:0d:d6:1b:b3:9a:f8:25:ec: 3b:ef:85:fe:0c:66:46:6a:59:e1:9d:a4:08:b4:58: 2b:ae:70:ba:28:2f:dd:d1:06:61:dc:86:d7:9d:05: d1:9b:f5:58:ae:e8:81:d5:87:56:ed:d1:cc:f3:b3: 43:7f:4e:5a:85:3a:56:f9:99:a6:6f:ae:14:ce:df: 72:f9:1d:11:43:a4:eb:20:b8:a9:00:90:5b:aa:18: 81:9c:c8:40:35:ad:bc:c0:83:68:c1:20:9f:56:ad: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E4:B5:64:CA:5D:00:94:0A:8B:E2:A4:21:7D:42:E3:49:C4:82:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fa:1b:1f:a9:2b:c9:bd:7b:83:2d:df:5e:02:a0:a2:7b:2d: a3:e3:12:5a:b9:66:07:77:84:b9:dd:1b:ba:1b:49:c1:fb:96: ae:a2:bb:ba:a9:01:46:86:23:bd:ad:0f:a1:c4:5a:fc:a2:37: ab:95:0f:bd:b4:49:68:8f:14:6f:85:46:a5:d2:1a:e1:5e:47: 50:69:32:fa:df:d6:10:09:07:d8:2a:e2:83:41:44:1f:d7:55: c6:35:3d:8c:c2:6c:2d:9d:19:74:c7:3a:bd:b3:01:27:4b:2c: af:c1:7e:75:df:9d:20:4a:25:22:f1:b9:46:31:78:c0:6d:42: d7:18:47:aa:cb:ad:ce:ae:e2:8f:6c:9c:f7:ce:2f:44:2b:a8: 35:6e:89:df:30:70:f0:6a:21:8c:26:92:3b:2b:81:7b:ca:ee: 31:2e:58:ed:e2:c4:07:06:db:3e:16:69:a6:a0:66:01:29:b4: 52:c3:f1:a8:ee:0b:44:c9:dd:67:e5:a8:a1:96:11:36:7c:55: 24:89:24:50:f8:7f:48:71:6e:72:a3:67:3f:42:09:90:a4:e6: 7f:03:dd:9e:2c:8c:58:02:25:51:2d:92:58:22:e2:d0:74:40: f0:f4:4d:83:ad:e7:fc:45:1b:07:a8:eb:c8:d4:72:0a:36:60: 4b:c9:97:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM0PGTctfPhTg0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTU3NGZiMDMtM2UyMy00MjhmLThlNzQtNjJiYjJmNzhhMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrU9Lh/FGgtlSc84ksJB3/E+OQeh4yx2Di1+ vXRnCO+FQkmPtGH+yqjrdFSMt2po159NEN9YAqXfoNjZ22BHPPz1nb9mV0OVk9j5 U6pb/qqW8BJbYYkYV7ZptresS8XmFwnsA3xwogGkuYGtmyEsEltkiNDsMWmat6gO JuvkWYSwaCwWypSmKY4DoVqNDg04zPSuiUoGU6tOnsazDdYbs5r4Jew774X+DGZG alnhnaQItFgrrnC6KC/d0QZh3IbXnQXRm/VYruiB1YdW7dHM87NDf05ahTpW+Zmm b64Uzt9y+R0RQ6TrILipAJBbqhiBnMhANa28wINowSCfVq1GLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPktWTKXQCUCovipCF9QuNJxIJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTEyNWUzMzEtZjI2NS0z NTk0LWE0OWMtZjMwMjU3ZWVhODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT6Gx+pK8m9e4Mt314CoKJ7LaPjElq5Zgd3hLndG7obScH7lq6iu7qp AUaGI72tD6HEWvyiN6uVD720SWiPFG+FRqXSGuFeR1BpMvrf1hAJB9gq4oNBRB/X VcY1PYzCbC2dGXTHOr2zASdLLK/BfnXfnSBKJSLxuUYxeMBtQtcYR6rLrc6u4o9s nPfOL0QrqDVuid8wcPBqIYwmkjsrgXvK7jEuWO3ixAcG2z4WaaagZgEptFLD8aju C0TJ3WflqKGWETZ8VSSJJFD4f0hxbnKjZz9CCZCk5n8D3Z4sjFgCJVEtklgi4tB0 QPD0TYOt5/xFGweo68jUcgo2YEvJlzc= -----END CERTIFICATE-----Generated at Wed Aug 6 13:12:31 2025 by rpki-client