$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56c5c8e9-e16b-3d02-9c0e-0abc1721e8c1.roa File: 56c5c8e9-e16b-3d02-9c0e-0abc1721e8c1.roa (raw, json) Hash identifier: PbFKQdrbmk8x75QdJhgsVug3zTUOix3z6u6sIEfDRhM= Subject key identifier: F8:7F:06:A5:93:4C:A6:E3:FD:CD:8F:E6:F8:72:3C:29:F1:4C:DA:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A1B5FEB403C31503378E61438 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56c5c8e9-e16b-3d02-9c0e-0abc1721e8c1.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.19.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:eb:40:3c:31:50:33:78:e6:14:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=615b3e50-e57c-44ee-95fa-8c3774ba819d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:a2:ca:9e:d4:47:02:43:3d:be:61:2b:67: 3a:cd:51:ab:23:33:2b:2b:1c:f2:6e:3f:0e:59:56: 69:b2:56:8c:c2:dd:71:ac:07:5d:93:7e:86:42:b0: 96:77:d7:1e:ba:af:9e:f0:77:41:a8:50:dd:a1:80: 7f:48:38:e8:d3:8c:a3:c3:f3:86:f8:52:fc:96:38: 6a:45:31:2f:84:60:d0:1b:ce:5e:e7:18:a8:14:86: c5:ff:cd:f8:b0:0a:a9:67:39:86:15:34:97:e3:6c: b9:ac:6d:42:49:c0:ed:dc:cc:48:d1:62:03:b1:4a: df:0b:19:74:64:a9:79:3e:b4:93:02:24:de:0a:76: ef:d1:43:f2:1a:25:d6:0a:ba:f5:ee:81:6c:e0:6d: af:74:5b:d8:24:2d:b3:af:b3:49:63:73:ab:7a:fa: 31:7a:68:85:14:6b:49:18:d3:aa:51:f6:8e:14:81: 2f:df:5a:35:6c:44:21:d3:3c:cc:43:c4:53:3f:6e: 9f:34:9b:11:4c:a3:d5:e5:82:82:85:df:be:05:2d: 58:31:7e:8b:1d:34:57:ae:0e:31:c4:05:f6:e8:7e: 8e:c0:8d:1d:2f:72:ba:f0:00:83:65:e5:18:6c:0b: 0c:73:69:c4:cb:48:3c:33:09:93:db:23:6a:5d:42: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7F:06:A5:93:4C:A6:E3:FD:CD:8F:E6:F8:72:3C:29:F1:4C:DA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56c5c8e9-e16b-3d02-9c0e-0abc1721e8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ec:e6:cf:a4:36:a9:c9:09:76:fa:55:b5:ac:1c:16:41:a9: 13:66:ce:f9:6a:2e:20:d4:f8:61:ed:8c:ef:2c:df:9f:48:b7: 90:d7:e1:0b:66:d2:7d:3b:17:37:e6:17:39:1f:22:11:bb:56: 2e:af:d7:cb:45:29:87:cf:cc:d2:bb:c5:c1:82:54:66:5d:9e: 90:49:c6:a9:27:e1:fb:95:8b:8b:88:5d:0c:ea:67:12:e2:4e: 9c:c2:55:d3:ff:09:a9:ce:fc:b1:93:1d:40:f9:f9:9d:6b:d6: 75:82:1d:35:48:ef:18:13:f3:f7:6b:aa:eb:c3:23:ef:87:a1: 9d:94:92:73:85:f8:8e:90:18:95:8a:78:8d:75:f0:a2:c8:db: 12:5d:e3:7f:85:b4:a4:95:32:ce:2c:8c:90:b3:83:ea:d4:33: 8f:e2:84:4b:ee:64:dc:0a:40:09:4d:71:ba:32:7a:2a:ac:ea: 9d:0d:63:5e:b8:e2:5e:00:27:b2:37:8c:5a:37:02:98:78:a2: 81:98:ca:bf:fb:18:f4:9d:b3:55:7d:b3:5b:09:ca:28:24:53: ea:ad:85:f8:e1:dd:84:f8:f5:b0:c9:b0:a3:33:0a:97:d3:34: c8:f0:06:e5:f5:c6:41:f3:75:7c:18:57:cb:79:f4:96:a6:28: 94:92:d0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX+tAPDFQM3jmFDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NjE1YjNlNTAtZTU3Yy00NGVlLTk1ZmEtOGMzNzc0YmE4MTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ6iyp7URwJDPb5hK2c6zVGrIzMrKxzybj8O WVZpslaMwt1xrAddk36GQrCWd9ceuq+e8HdBqFDdoYB/SDjo04yjw/OG+FL8ljhq RTEvhGDQG85e5xioFIbF/834sAqpZzmGFTSX42y5rG1CScDt3MxI0WIDsUrfCxl0 ZKl5PrSTAiTeCnbv0UPyGiXWCrr17oFs4G2vdFvYJC2zr7NJY3OrevoxemiFFGtJ GNOqUfaOFIEv31o1bEQh0zzMQ8RTP26fNJsRTKPV5YKChd++BS1YMX6LHTRXrg4x xAX26H6OwI0dL3K68ACDZeUYbAsMc2nEy0g8MwmT2yNqXULiJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh/BqWTTKbj/c2P5vhyPCnxTNrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTZjNWM4ZTktZTE2Yi0z ZDAyLTljMGUtMGFiYzE3MjFlOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFns5s+kNqnJCXb6VbWsHBZBqRNmzvlqLiDU+GHtjO8s359It5DX4Qtm 0n07FzfmFzkfIhG7Vi6v18tFKYfPzNK7xcGCVGZdnpBJxqkn4fuVi4uIXQzqZxLi TpzCVdP/CanO/LGTHUD5+Z1r1nWCHTVI7xgT8/drquvDI++HoZ2UknOF+I6QGJWK eI118KLI2xJd43+FtKSVMs4sjJCzg+rUM4/ihEvuZNwKQAlNcboyeiqs6p0NY164 4l4AJ7I3jFo3Aph4ooGYyr/7GPSds1V9s1sJyigkU+qthfjh3YT49bDJsKMzCpfT NMjwBuX1xkHzdXwYV8t59JamKJSS0A8= -----END CERTIFICATE-----Generated at Sun Jun 15 18:47:51 2025 by rpki-client