$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: 3iVJB9HUv4XMxoRR8QQJmvBAXUt7UKdKb4epaUltv1A= Subject key identifier: 7E:4D:2A:42:C9:24:2A:36:9D:5F:4A:FD:28:07:D4:54:52:24:37:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3EA4B687B2D74079B480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3e:a4:b6:87:b2:d7:40:79:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f811f2e4-3353-4107-89c1-416a8c8d8ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:84:0c:40:26:10:ac:c4:84:6f:67:6c:c3:50: 8e:83:46:ee:bd:76:5c:f4:2d:7f:42:2d:81:03:b6: 0d:aa:cc:1c:0b:9e:e5:20:7d:f9:e2:3a:b0:a1:fe: 64:b3:be:98:63:b8:b8:67:29:03:63:df:40:0c:6f: 73:45:a0:bd:ca:99:39:37:d3:f1:47:fc:71:76:e5: c7:97:e1:07:91:41:95:1c:98:bc:bf:ed:8d:34:49: 92:b4:0f:d0:ba:04:66:f9:12:01:eb:ce:7b:36:ab: bf:0f:c3:af:d6:fc:5b:70:0a:71:8c:e4:81:bd:b6: e6:d1:c8:3c:85:a8:8d:51:d2:5d:92:c2:67:e7:0b: 4b:fa:3b:a0:8e:dc:b0:bc:8f:f3:15:f9:b3:d3:4c: 8a:c1:33:43:d4:7f:db:ab:39:f1:3a:ac:33:f6:fa: ae:c4:21:57:11:a6:cc:5d:20:fd:99:e5:6d:f8:b1: 82:c9:71:86:41:66:4c:b1:a7:0b:37:c7:33:65:62: de:f6:b6:0d:36:09:0c:53:a4:ea:c5:aa:37:4d:c1: 00:b0:b3:06:50:fe:ff:84:56:25:ff:96:a3:2f:85: 59:85:58:a0:79:e3:ea:17:a9:56:8e:82:8e:ea:c6: 66:ae:2c:f6:2e:45:71:68:f1:6e:81:3e:8f:64:2f: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:2A:42:C9:24:2A:36:9D:5F:4A:FD:28:07:D4:54:52:24:37:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f4:ff:db:b9:59:25:d6:ee:44:e2:de:91:53:5e:4e:b2:db: aa:95:e6:60:29:58:9b:65:36:55:73:7e:02:76:2e:3d:85:d1: 39:37:9b:67:b3:96:f7:d8:62:6e:72:e9:9b:90:34:d9:7b:5c: a9:96:e7:3e:f0:f9:4d:99:2f:d7:5a:ca:c8:d2:ba:bf:22:36: 99:6c:e4:4b:3c:32:09:d2:85:56:30:c1:3b:0c:1a:8f:7e:65: 24:8c:40:22:7a:10:ae:e7:9e:c5:31:f5:25:32:0d:8e:a3:b3: 60:d7:f8:8a:9d:2f:5f:25:74:6d:82:29:84:60:65:e1:6b:02: fa:74:47:98:66:ed:31:6a:25:0b:c8:ff:a1:ac:2b:ab:0f:45: 70:d1:e5:8b:05:fe:4a:30:8a:c0:d6:1f:cf:cc:e1:0a:4b:ab: d5:1b:b8:69:f5:a6:86:70:24:93:9b:0b:00:03:7f:c3:26:27: 6c:0a:88:ec:2b:40:6d:2e:ac:23:11:92:79:95:d6:03:d3:cf: 7c:40:a3:e4:56:f5:86:56:03:c2:97:15:96:63:26:8e:29:fb: 8a:12:e4:3f:d8:95:52:68:85:ae:c3:2a:bd:6e:d4:e2:4a:0a: ef:02:e0:f3:4f:be:b5:89:ab:a5:25:77:1c:36:4d:bf:69:17: 0d:68:d7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj6ktoey10B5tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjgxMWYyZTQtMzM1My00MTA3LTg5YzEtNDE2YThjOGQ4YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74QMQCYQrMSEb2dsw1COg0buvXZc9C1/Qi2B A7YNqswcC57lIH354jqwof5ks76YY7i4ZykDY99ADG9zRaC9ypk5N9PxR/xxduXH l+EHkUGVHJi8v+2NNEmStA/QugRm+RIB6857Nqu/D8Ov1vxbcApxjOSBvbbm0cg8 haiNUdJdksJn5wtL+jugjtywvI/zFfmz00yKwTND1H/bqznxOqwz9vquxCFXEabM XSD9meVt+LGCyXGGQWZMsacLN8czZWLe9rYNNgkMU6Tqxao3TcEAsLMGUP7/hFYl /5ajL4VZhVigeePqF6lWjoKO6sZmriz2LkVxaPFugT6PZC/TfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5NKkLJJCo2nV9K/SgH1FRSJDdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn0/9u5WSXW7kTi3pFTXk6y26qV5mApWJtlNlVzfgJ2Lj2F0Tk3m2ez lvfYYm5y6ZuQNNl7XKmW5z7w+U2ZL9daysjSur8iNpls5Es8MgnShVYwwTsMGo9+ ZSSMQCJ6EK7nnsUx9SUyDY6js2DX+IqdL18ldG2CKYRgZeFrAvp0R5hm7TFqJQvI /6GsK6sPRXDR5YsF/kowisDWH8/M4QpLq9UbuGn1poZwJJObCwADf8MmJ2wKiOwr QG0urCMRknmV1gPTz3xAo+RW9YZWA8KXFZZjJo4p+4oS5D/YlVJoha7DKr1u1OJK Cu8C4PNPvrWJq6Uldxw2Tb9pFw1o190= -----END CERTIFICATE-----Generated at Sun Jun 15 13:09:19 2025 by rpki-client