$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa File: d7c658f8-55f3-37c9-b25e-b9627488fc03.roa (raw, json) Hash identifier: 9+0cGJdgSSb74x64qxrG9PpxpqjoNpkKdANhiDdeSgA= Subject key identifier: 7F:45:FA:F4:BA:EE:21:34:E7:15:24:FE:1B:DF:30:24:AD:4F:F9:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A11F277C21D7F943C2368 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.16.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:f2:77:c2:1d:7f:94:3c:23:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b2d0741e-3e7d-40ef-bddd-aca21b05f694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:36:c4:cc:6a:b6:16:a5:47:99:27:b9:03: 0f:db:76:62:e2:21:49:81:b2:e8:1c:fb:5d:1d:a5: 93:83:6e:9d:61:9f:de:d7:86:a1:a3:90:f9:f7:c7: 55:99:1d:ca:4f:07:3b:7c:b0:60:e3:9d:a3:14:b7: bf:e8:6a:22:06:34:79:78:6f:0c:a4:9b:44:ec:cc: 31:6b:0e:dc:1c:25:d2:e4:d8:25:a0:8b:70:b8:86: f3:bc:58:70:19:7a:1b:a9:8e:9f:0c:88:93:05:c8: 28:86:2a:37:b2:e3:7b:8a:b8:3b:a9:5d:a6:a1:bf: dc:a8:76:7f:70:0b:70:4c:19:6e:54:73:78:5f:2d: 8a:eb:7a:96:c3:cf:dd:44:84:0b:1c:23:34:ac:5f: 16:a0:61:69:c2:11:b6:bc:8b:8f:91:d5:41:67:14: fc:4b:10:ae:cc:aa:9c:4e:d1:95:09:ef:98:c5:80: 2c:e8:4f:8b:ff:67:b3:a1:ec:89:26:81:70:f1:75: 63:25:0e:43:64:fd:2e:4f:8f:a6:b7:13:11:3a:10: b3:5e:82:8a:5a:ae:6c:ec:1c:c7:39:b7:aa:fe:b9: c8:f0:19:a3:36:73:b4:c2:c4:49:8e:4f:a9:1e:e6: c9:c0:5c:16:58:41:76:6a:94:a6:ab:2e:19:d5:cd: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:45:FA:F4:BA:EE:21:34:E7:15:24:FE:1B:DF:30:24:AD:4F:F9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:24:01:58:12:73:ad:af:c5:f1:b7:cb:aa:55:69:84:9e:62: 7c:b8:99:2d:00:61:24:1a:23:a0:d4:5f:b4:0b:40:19:26:e6: b9:38:e1:fe:98:53:b4:6d:20:e2:61:67:a3:b7:81:a7:c4:10: d6:2b:ec:2f:a9:09:57:fb:b3:2f:35:77:7a:72:9b:cd:64:17: 1a:51:14:ef:10:bc:48:21:89:6f:13:e6:dd:5a:e9:dd:57:2c: 61:9b:b7:b3:5b:57:50:81:16:d3:29:e5:5c:38:c3:43:41:d2: 24:c5:4b:a8:ad:83:3b:b9:ac:2c:f0:db:b1:2d:74:7f:0e:b8: da:8f:2e:8d:d4:81:9c:d6:d4:bc:31:c0:8b:f5:dd:47:b7:30: a5:77:92:d2:9c:74:59:12:bd:b8:41:79:eb:1f:cc:e6:75:5a: 03:d3:69:f5:aa:75:35:b4:1c:d0:06:8e:3f:5e:7e:b5:24:e4: 60:e9:cc:67:45:d6:d7:fb:81:8c:66:fc:55:4f:98:e8:4d:ad: 90:c2:22:fe:a7:78:dc:f8:84:c9:4a:3a:d8:28:64:d7:da:16: 92:35:a6:b2:f7:75:00:08:a6:4c:18:e0:8c:0a:cd:af:9b:d3: ab:52:b9:77:25:74:81:46:03:0d:f3:c5:c6:06:b0:e9:fe:5e: eb:ee:2c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhHyd8Idf5Q8I2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjJkMDc0MWUtM2U3ZC00MGVmLWJkZGQtYWNhMjFiMDVmNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFQ2xMxqthalR5knuQMP23Zi4iFJgbLoHPtd HaWTg26dYZ/e14aho5D598dVmR3KTwc7fLBg452jFLe/6GoiBjR5eG8MpJtE7Mwx aw7cHCXS5NgloItwuIbzvFhwGXobqY6fDIiTBcgohio3suN7irg7qV2mob/cqHZ/ cAtwTBluVHN4Xy2K63qWw8/dRIQLHCM0rF8WoGFpwhG2vIuPkdVBZxT8SxCuzKqc TtGVCe+YxYAs6E+L/2ezoeyJJoFw8XVjJQ5DZP0uT4+mtxMROhCzXoKKWq5s7BzH Obeq/rnI8BmjNnO0wsRJjk+pHubJwFwWWEF2apSmqy4Z1c1ZpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9F+vS67iE05xUk/hvfMCStT/kKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdjNjU4ZjgtNTVmMy0z N2M5LWIyNWUtYjk2Mjc0ODhmYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwkAVgSc62vxfG3y6pVaYSeYny4mS0AYSQaI6DUX7QLQBkm5rk44f6Y U7RtIOJhZ6O3gafEENYr7C+pCVf7sy81d3pym81kFxpRFO8QvEghiW8T5t1a6d1X LGGbt7NbV1CBFtMp5Vw4w0NB0iTFS6itgzu5rCzw27EtdH8OuNqPLo3UgZzW1Lwx wIv13Ue3MKV3ktKcdFkSvbhBeesfzOZ1WgPTafWqdTW0HNAGjj9efrUk5GDpzGdF 1tf7gYxm/FVPmOhNrZDCIv6neNz4hMlKOtgoZNfaFpI1prL3dQAIpkwY4IwKza+b 06tSuXcldIFGAw3zxcYGsOn+XuvuLHc= -----END CERTIFICATE-----Generated at Sun Jun 15 13:15:06 2025 by rpki-client