$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa File: 5144e87e-9a6d-396f-afff-14dff19a9e16.roa (raw, json) Hash identifier: P7gpD76Rob8BL4gR4e93zOXoHG9ByVCSiQfIKkjsVYo= Subject key identifier: E7:02:B1:C4:CA:EA:DF:E6:4F:16:A9:DE:5A:1E:C5:F7:A2:85:F4:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8B644DCA92AA18AA76E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.22.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8b:64:4d:ca:92:aa:18:aa:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=a0f689e7-334b-4d79-b29e-d447419707d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:fd:83:17:98:26:8f:b5:a8:33:be:3d:ff: d3:dc:1d:9b:2e:95:ef:0c:7a:f8:1a:0d:e0:ae:23: 0d:58:ae:ba:cc:19:2f:d1:ad:9c:2a:e4:02:4c:ef: 0a:0d:47:16:ba:de:12:3c:c7:54:44:15:a2:af:32: fd:e4:5e:6d:f7:cf:a2:92:de:d1:ad:02:19:a4:16: af:74:fc:aa:b6:9a:3f:59:43:a0:9f:f7:2e:d0:46: cf:fb:2c:aa:cd:54:15:fd:28:f3:e4:a0:be:d0:34: f5:f3:53:fa:de:6a:e8:22:45:ea:98:e8:2e:fd:84: c6:3f:23:12:0f:98:33:27:e9:13:98:44:b8:0d:a1: 68:c6:fe:e3:e1:fe:29:e3:f6:5b:0d:10:92:2c:a0: b3:53:c3:b2:6d:b3:e6:aa:2d:ef:7e:83:24:da:5f: 08:e4:9f:b1:ee:d5:98:b8:5f:05:17:f2:71:c7:26: 1a:71:d6:85:a6:71:36:49:90:3a:81:ec:d8:aa:1a: 94:d2:cc:31:6e:ad:79:bb:12:7b:a5:d3:88:1c:47: 33:b8:a1:76:8a:1e:67:1c:b9:5c:dc:a6:9d:48:17: 66:ee:ed:9c:ed:c5:f8:b8:38:6e:1c:e1:bc:11:11: 73:02:ce:ef:9d:a8:5a:32:0f:fa:e8:46:8f:e3:6f: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:B1:C4:CA:EA:DF:E6:4F:16:A9:DE:5A:1E:C5:F7:A2:85:F4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f4:50:cc:f4:d2:e7:37:a8:c1:24:b0:40:b3:7d:b8:c3:7b: 85:18:ef:63:49:30:26:70:89:0a:4b:19:b5:33:f5:21:5d:c4: 93:96:29:2e:65:40:89:67:fa:0d:bd:68:dc:f4:3f:e9:d1:12: bd:36:7b:19:d8:09:65:ed:09:60:b4:f2:77:40:39:f5:3f:ec: fb:cb:f5:c5:33:99:23:4e:f7:a3:75:bf:2a:c2:f7:73:97:4d: 63:08:e6:9a:bc:52:7c:08:c0:cd:ef:1f:6c:97:88:a8:c6:f6: 6a:ca:fb:68:52:2b:c0:5a:6f:ed:7f:92:4d:a2:a6:fc:70:b8: 52:fe:c5:eb:ea:8c:81:98:36:05:64:20:8d:4d:ef:12:b4:8f: 5d:86:1d:25:36:6d:09:39:15:a2:c5:40:18:b5:88:d5:e0:85: aa:8b:b8:c0:ca:b4:2e:6e:9f:46:80:a0:f6:bc:0e:80:f8:19: c8:2a:04:35:70:00:98:76:b6:af:23:df:ea:2e:37:c5:e1:90: 0a:71:63:2b:35:f0:dc:72:c5:02:58:9a:5b:7c:d9:bc:0d:51: f1:23:1c:cf:79:5b:ef:ed:41:db:fa:27:c4:40:c1:b4:e7:c1: ba:eb:9a:8a:8f:04:d5:27:b4:c3:e8:09:a2:14:41:c4:6d:1a: fe:f8:bd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qotkTcqSqhiqduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk YTBmNjg5ZTctMzM0Yi00ZDc5LWIyOWUtZDQ0NzQxOTcwN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2f9gxeYJo+1qDO+Pf/T3B2bLpXvDHr4Gg3g riMNWK66zBkv0a2cKuQCTO8KDUcWut4SPMdURBWirzL95F5t98+ikt7RrQIZpBav dPyqtpo/WUOgn/cu0EbP+yyqzVQV/Sjz5KC+0DT181P63mroIkXqmOgu/YTGPyMS D5gzJ+kTmES4DaFoxv7j4f4p4/ZbDRCSLKCzU8OybbPmqi3vfoMk2l8I5J+x7tWY uF8FF/JxxyYacdaFpnE2SZA6gezYqhqU0swxbq15uxJ7pdOIHEczuKF2ih5nHLlc 3KadSBdm7u2c7cX4uDhuHOG8ERFzAs7vnahaMg/66EaP42+3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcCscTK6t/mTxap3loexfeihfSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE0NGU4N2UtOWE2ZC0z OTZmLWFmZmYtMTRkZmYxOWE5ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj0UMz00uc3qMEksECzfbjDe4UY72NJMCZwiQpLGbUz9SFdxJOWKS5l QIln+g29aNz0P+nREr02exnYCWXtCWC08ndAOfU/7PvL9cUzmSNO96N1vyrC93OX TWMI5pq8UnwIwM3vH2yXiKjG9mrK+2hSK8Bab+1/kk2ipvxwuFL+xevqjIGYNgVk II1N7xK0j12GHSU2bQk5FaLFQBi1iNXghaqLuMDKtC5un0aAoPa8DoD4GcgqBDVw AJh2tq8j3+ouN8XhkApxYys18NxyxQJYmlt82bwNUfEjHM95W+/tQdv6J8RAwbTn wbrrmoqPBNUntMPoCaIUQcRtGv74vaM= -----END CERTIFICATE-----Generated at Sun Jun 15 13:18:30 2025 by rpki-client