$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa File: a1a78e31-2fd1-340f-9abd-830bb997d842.roa (raw, json) Hash identifier: BlcngMDn1aqZk7fgxRsaSl0bmd4yAr5uG2HFeIrdGxg= Subject key identifier: 42:72:74:60:2D:1D:D9:03:73:7E:92:7F:38:1D:7A:2D:88:1C:2F:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA933058C999EFC35E6280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.19.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:93:30:58:c9:99:ef:c3:5e:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=64d8cffc-23c8-45f0-9068-3cfbccca267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:f8:a9:2c:e2:0d:d7:fc:67:f4:05:7b:a1: d2:4b:32:65:fb:78:8f:e0:7f:85:39:15:2e:01:9b: 70:fe:6b:52:ee:8b:f8:22:4b:8d:0f:d8:1d:c0:c5: 31:f0:1f:41:b6:82:cd:c8:13:6f:50:e1:02:fb:33: 89:f3:a6:71:32:aa:6b:27:b8:21:f8:96:cd:dc:9c: d6:d7:3b:c7:6a:ef:9e:97:e2:26:75:2d:40:2f:06: 9a:99:37:0f:27:7c:c4:54:d5:a8:b4:4e:8d:b3:ef: c8:84:c6:72:45:8e:f5:a1:e0:12:f0:4b:d9:6f:ad: 9d:44:46:0d:0b:5d:ba:18:da:f9:6b:69:c9:98:21: 86:7a:5f:a7:37:c1:16:ea:0d:af:1b:4a:48:bb:83: 4b:ab:db:59:4c:09:6c:7f:7a:bc:af:36:7d:18:38: fc:4d:dc:d6:33:cb:13:19:94:6a:40:e8:a7:14:dc: 50:f9:c8:de:9f:ce:53:35:57:ed:aa:7e:85:bc:25: e5:b1:2c:bf:6a:5d:b4:3d:42:09:dc:9e:20:04:c6: 51:f8:0b:41:2e:f0:e2:71:af:1e:12:bd:b9:a1:bb: ef:88:4d:92:ac:5f:95:ff:aa:c6:ab:4d:d4:92:ed: b6:ff:bc:24:52:ea:47:9e:3e:77:19:41:48:02:14: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:72:74:60:2D:1D:D9:03:73:7E:92:7F:38:1D:7A:2D:88:1C:2F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:83:bf:02:9c:b4:d9:57:00:c0:02:e0:57:fc:db:93:f2:b5: 74:c5:e9:4c:29:6d:c0:14:31:be:32:e6:7d:95:40:e1:f2:38: 9f:f8:9c:6b:3e:13:be:c6:c7:12:fb:07:7f:19:32:a6:8b:79: 0e:07:08:cc:fc:fe:48:16:49:ba:aa:30:be:26:e6:f1:f6:f3: 31:33:a2:b4:1f:05:39:f2:06:d8:db:ab:54:9d:9b:d3:97:1f: 68:92:26:1c:ef:0c:25:57:3d:f8:87:3a:a9:da:cc:ba:05:7a: 74:2c:e2:19:81:4a:48:7a:dd:ff:ad:a1:d6:47:dd:83:17:d6: f0:e7:0e:d6:6f:4b:01:91:46:40:46:2e:1e:26:f1:77:90:9c: 3e:cd:70:8d:c5:22:ff:e5:e1:83:e6:18:d3:0c:49:e4:0f:55: e7:8c:37:ab:9d:e7:f2:2e:50:1f:70:2c:0b:8a:cd:fd:70:c7: 3b:04:24:a9:50:f4:33:90:7d:1f:cc:ef:88:f8:7e:05:bb:69: 57:32:78:4d:71:40:14:da:86:69:a3:1a:f1:e7:06:14:f9:62: 7c:11:e7:0a:a3:06:a4:21:4b:76:0d:32:5c:41:ca:7e:93:3c: 84:31:6d:c7:3c:aa:53:25:7c:6d:82:64:f7:bf:d6:20:62:59: 19:bf:e3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpMwWMmZ78NeYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NjRkOGNmZmMtMjNjOC00NWYwLTkwNjgtM2NmYmNjY2EyNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzz4qSziDdf8Z/QFe6HSSzJl+3iP4H+FORUu AZtw/mtS7ov4IkuND9gdwMUx8B9BtoLNyBNvUOEC+zOJ86ZxMqprJ7gh+JbN3JzW 1zvHau+el+ImdS1ALwaamTcPJ3zEVNWotE6Ns+/IhMZyRY71oeAS8EvZb62dREYN C126GNr5a2nJmCGGel+nN8EW6g2vG0pIu4NLq9tZTAlsf3q8rzZ9GDj8TdzWM8sT GZRqQOinFNxQ+cjen85TNVftqn6FvCXlsSy/al20PUIJ3J4gBMZR+AtBLvDica8e Er25obvviE2SrF+V/6rGq03Uku22/7wkUupHnj53GUFIAhSPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJydGAtHdkDc36Sfzgdei2IHC/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFhNzhlMzEtMmZkMS0z NDBmLTlhYmQtODMwYmI5OTdkODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyDvwKctNlXAMAC4Ff825PytXTF6UwpbcAUMb4y5n2VQOHyOJ/4nGs+ E77GxxL7B38ZMqaLeQ4HCMz8/kgWSbqqML4m5vH28zEzorQfBTnyBtjbq1Sdm9OX H2iSJhzvDCVXPfiHOqnazLoFenQs4hmBSkh63f+todZH3YMX1vDnDtZvSwGRRkBG Lh4m8XeQnD7NcI3FIv/l4YPmGNMMSeQPVeeMN6ud5/IuUB9wLAuKzf1wxzsEJKlQ 9DOQfR/M74j4fgW7aVcyeE1xQBTahmmjGvHnBhT5YnwR5wqjBqQhS3YNMlxByn6T PIQxbcc8qlMlfG2CZPe/1iBiWRm/410= -----END CERTIFICATE-----Generated at Sun Jun 15 13:03:53 2025 by rpki-client