$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa File: 99b607dc-2978-3b44-84fa-7abdd10b450a.roa (raw, json) Hash identifier: I5WrOFZm/VN87uwERHh6qN6hCPC+2WDjlphWa3rHBxU= Subject key identifier: 5D:13:31:D4:38:1F:A2:69:96:A3:E7:C7:07:FF:21:6F:D2:C9:E4:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA935EF192547C0E9B3C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.21.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:93:5e:f1:92:54:7c:0e:9b:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=5f21fc90-a89e-42eb-a29d-3a7302a5c393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:09:44:17:88:72:09:8c:b9:98:f7:16:86: 07:58:4e:65:d8:00:16:84:35:d7:a5:64:5b:09:40: 83:3b:89:0a:cb:df:29:f8:c5:ea:4f:f8:93:b9:df: cd:0f:8e:13:cd:5b:41:c0:ee:2c:b1:90:f8:d9:19: 65:60:bc:99:21:c6:5f:c6:ad:26:d5:46:a0:22:e4: 50:ef:7a:c3:d5:c0:d1:02:c2:d0:68:70:2b:de:56: 4b:6c:92:62:36:2a:ec:48:ea:3f:69:70:dd:de:a9: 22:34:8a:14:d1:c1:5f:33:33:9d:2a:51:a2:f4:f1: 67:b1:66:91:7e:3a:03:25:79:ed:76:2b:62:f9:ff: 1c:df:9b:39:aa:ea:e2:03:72:22:bb:8a:03:94:a7: e8:f2:cf:a0:59:b5:da:53:52:4f:a8:37:61:fc:b9: 84:0b:4b:48:d9:d8:29:5c:ba:59:71:45:4f:ad:e5: a4:04:95:20:9a:dc:cb:91:cc:45:11:d9:66:d4:c3: e8:5d:5f:89:f8:6d:d1:1e:b0:63:c7:b7:da:dc:ec: ec:e1:d8:ca:66:c4:c1:8b:fc:de:34:fd:b6:fb:cb: 40:63:19:94:f2:e4:48:c5:75:46:29:1e:c4:26:42: 9e:06:bc:7f:05:9e:c0:df:88:f5:f1:a0:2e:42:d8: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:13:31:D4:38:1F:A2:69:96:A3:E7:C7:07:FF:21:6F:D2:C9:E4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:53:fe:32:ca:92:cf:ae:90:53:df:32:c6:ac:5b:be:43:ad: 1c:eb:d2:02:bd:b9:83:c1:a3:c9:75:4f:4c:6d:77:0e:89:ab: ef:00:93:bf:95:91:3f:04:f2:85:f8:f5:6e:32:f9:e3:eb:d0: 02:a4:f0:b2:36:19:9d:4a:2f:40:68:1b:9f:2f:0f:c1:e4:45: a8:d7:7c:ae:31:1e:14:11:15:75:d7:29:04:a2:3c:ce:84:61: f0:b0:70:4b:42:b3:02:42:68:bb:e1:af:31:1f:ed:7f:3a:3c: c4:66:c8:83:97:5e:d9:4d:91:86:6c:29:c7:78:c6:5c:d2:b1: 59:43:43:f2:b1:0b:ea:87:ce:ee:e0:1f:d8:51:be:6a:66:44: 08:f4:a0:2e:6a:35:2b:66:0c:2c:df:b4:64:56:6a:b6:ed:a9: d9:95:da:4b:d3:e4:80:90:7f:f1:74:fb:64:c3:5f:9c:4e:32: 49:b9:04:64:dc:08:f4:73:81:69:5d:a0:31:6a:5c:b6:2e:9d: 27:6d:da:c4:cb:73:58:9f:b3:aa:2b:ff:e6:d5:32:e4:e7:f6: cc:78:c5:91:99:5f:31:c3:0e:ef:5c:16:94:3b:56:c4:00:98: 13:09:54:8a:91:70:e8:c3:b9:e0:7e:5b:64:ce:ef:58:67:0e: 2d:50:6b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpNe8ZJUfA6bPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NWYyMWZjOTAtYTg5ZS00MmViLWEyOWQtM2E3MzAyYTVjMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2sJRBeIcgmMuZj3FoYHWE5l2AAWhDXXpWRb CUCDO4kKy98p+MXqT/iTud/ND44TzVtBwO4ssZD42RllYLyZIcZfxq0m1UagIuRQ 73rD1cDRAsLQaHAr3lZLbJJiNirsSOo/aXDd3qkiNIoU0cFfMzOdKlGi9PFnsWaR fjoDJXntditi+f8c35s5quriA3Iiu4oDlKfo8s+gWbXaU1JPqDdh/LmEC0tI2dgp XLpZcUVPreWkBJUgmtzLkcxFEdlm1MPoXV+J+G3RHrBjx7fa3Ozs4djKZsTBi/ze NP22+8tAYxmU8uRIxXVGKR7EJkKeBrx/BZ7A34j18aAuQtj4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0TMdQ4H6JplqPnxwf/IW/SyeTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliNjA3ZGMtMjk3OC0z YjQ0LTg0ZmEtN2FiZGQxMGI0NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlT/jLKks+ukFPfMsasW75DrRzr0gK9uYPBo8l1T0xtdw6Jq+8Ak7+V kT8E8oX49W4y+ePr0AKk8LI2GZ1KL0BoG58vD8HkRajXfK4xHhQRFXXXKQSiPM6E YfCwcEtCswJCaLvhrzEf7X86PMRmyIOXXtlNkYZsKcd4xlzSsVlDQ/KxC+qHzu7g H9hRvmpmRAj0oC5qNStmDCzftGRWarbtqdmV2kvT5ICQf/F0+2TDX5xOMkm5BGTc CPRzgWldoDFqXLYunSdt2sTLc1ifs6or/+bVMuTn9sx4xZGZXzHDDu9cFpQ7VsQA mBMJVIqRcOjDueB+W2TO71hnDi1QayY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:05:15 2025 by rpki-client