$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa File: 54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa (raw, json) Hash identifier: O5TSHkqyq3glWCVV09IXRp8i0okMjoX0KhxvxXaAv8k= Subject key identifier: B2:41:BC:E1:2F:E1:D5:2F:62:3A:9A:C7:49:2A:21:4F:FD:4D:E3:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA934D9F2637CA68129580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.21.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:93:4d:9f:26:37:ca:68:12:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=8097eeb0-65b8-4506-a0e2-cee2240b5707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:04:a3:02:ab:56:99:f7:60:45:21:a4:a6:f9: e3:95:5e:36:a1:ed:4f:1e:7d:b7:33:fe:27:45:76: 09:c7:97:29:e0:46:89:40:92:f4:ef:14:24:4d:06: e4:94:63:d5:8d:7c:5d:35:46:c0:2b:a1:ff:9a:78: dc:36:7d:90:cd:83:f7:d1:11:e5:b7:23:72:c3:18: b0:ad:c1:f5:d4:10:f9:e2:9a:85:f8:55:31:4e:90: 0b:62:ac:f4:07:7c:f1:28:45:da:12:d4:67:d9:74: 79:ee:94:da:df:4e:24:15:b8:57:a9:67:79:6a:9c: 82:54:d2:93:40:72:76:d9:7d:38:f5:c5:c8:66:24: 1d:04:71:7f:23:b3:a8:2d:d5:e3:d7:7b:c0:89:ee: f4:d5:02:99:7c:f3:be:54:22:df:e2:8b:45:84:a1: 64:12:50:c7:4b:09:0e:5b:c7:f2:3d:48:34:4c:5d: c9:33:89:53:12:ac:97:d7:a9:d2:2c:93:34:ab:cc: 51:49:02:6d:ba:b9:0c:6e:fa:3b:e4:cc:b2:85:67: 06:32:b3:ef:89:e1:e7:a1:f4:ab:30:21:94:04:19: b2:76:5a:3a:5a:09:d8:45:e8:78:36:e5:60:e2:89: 5e:3c:95:88:b0:27:4d:07:74:0d:74:01:1c:99:8b: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:41:BC:E1:2F:E1:D5:2F:62:3A:9A:C7:49:2A:21:4F:FD:4D:E3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:69:27:aa:f1:73:b4:da:cf:52:c6:51:6a:00:b7:85:03:a6: 38:25:7e:e5:0c:2d:78:b6:0b:1e:97:c6:be:20:0f:3b:e7:67: ec:54:01:6c:7a:34:49:b2:32:44:9c:07:db:31:98:2b:56:b0: 79:61:52:4e:33:1c:fa:f0:e7:00:90:aa:73:95:8e:0d:e9:8f: 08:9f:d5:05:7c:50:c5:c6:13:65:1f:a0:07:55:37:8f:17:f5: c3:2b:1b:52:7f:ba:22:c5:34:b3:1b:bd:32:bd:3c:bd:c9:21: 31:ab:ac:f0:95:91:6e:11:be:e3:23:d2:04:a1:e1:34:6c:ee: 7c:93:25:be:c1:47:7e:ca:08:6d:b1:05:56:9e:86:6d:5c:d9: 94:2a:df:0b:fb:bc:d6:0f:2c:36:a1:eb:15:58:e5:26:04:f3: e9:f4:bd:29:a6:34:00:49:c3:26:43:d7:e0:a7:0a:00:bd:77: b6:85:fd:96:02:20:fb:d2:2a:bb:f8:53:84:a7:ed:c7:a1:68: d8:dc:ae:8e:9c:bf:33:ab:b1:81:74:6c:8c:3f:bc:1b:4e:e1: d4:bd:e9:bc:2d:eb:ad:5d:13:dd:d2:11:b3:3b:f0:66:f8:7b: 44:dc:2a:60:19:e5:01:ec:8d:f1:49:67:f6:c8:f9:96:44:22: d5:7e:03:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpNNnyY3ymgSlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ODA5N2VlYjAtNjViOC00NTA2LWEwZTItY2VlMjI0MGI1NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ASjAqtWmfdgRSGkpvnjlV42oe1PHn23M/4n RXYJx5cp4EaJQJL07xQkTQbklGPVjXxdNUbAK6H/mnjcNn2QzYP30RHltyNywxiw rcH11BD54pqF+FUxTpALYqz0B3zxKEXaEtRn2XR57pTa304kFbhXqWd5apyCVNKT QHJ22X049cXIZiQdBHF/I7OoLdXj13vAie701QKZfPO+VCLf4otFhKFkElDHSwkO W8fyPUg0TF3JM4lTEqyX16nSLJM0q8xRSQJturkMbvo75MyyhWcGMrPvieHnofSr MCGUBBmydlo6WgnYReh4NuVg4olePJWIsCdNB3QNdAEcmYvIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJBvOEv4dUvYjqax0kqIU/9TeNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRhODNkNDItMWNjMS0z ZTA3LTkxZjUtZmE2MjBjMTMyMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEppJ6rxc7Taz1LGUWoAt4UDpjglfuUMLXi2Cx6Xxr4gDzvnZ+xUAWx6 NEmyMkScB9sxmCtWsHlhUk4zHPrw5wCQqnOVjg3pjwif1QV8UMXGE2UfoAdVN48X 9cMrG1J/uiLFNLMbvTK9PL3JITGrrPCVkW4RvuMj0gSh4TRs7nyTJb7BR37KCG2x BVaehm1c2ZQq3wv7vNYPLDah6xVY5SYE8+n0vSmmNABJwyZD1+CnCgC9d7aF/ZYC IPvSKrv4U4Sn7cehaNjcro6cvzOrsYF0bIw/vBtO4dS96bwt661dE93SEbM78Gb4 e0TcKmAZ5QHsjfFJZ/bI+ZZEItV+A/A= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:26 2025 by rpki-client