$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e58ccb9e-e46b-36bf-b0b7-83b5be9042d5.roa File: e58ccb9e-e46b-36bf-b0b7-83b5be9042d5.roa (raw, json) Hash identifier: I/WH9BRA0rSipQfNfsUM8WQlhvdXvrPOTso0W+QXOe8= Subject key identifier: 4D:5D:EC:C8:32:DA:AD:AF:66:0F:DD:5E:E2:C6:7A:6F:04:1D:E3:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E9664018366F6511A3EFC60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e58ccb9e-e46b-36bf-b0b7-83b5be9042d5.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.18.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:64:01:83:66:f6:51:1a:3e:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=dc51b718-b063-4a74-8938-813e03f0e839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:57:ea:88:48:8f:d5:ad:a4:5c:2d:70:e1: ef:99:34:da:07:07:87:47:a1:ff:5e:f9:8e:f3:d5: 86:f1:73:e5:e7:d5:f4:a0:6e:30:a0:72:10:ef:e9: ed:42:a8:4a:76:2f:4b:aa:2d:27:09:cd:5b:bf:2b: a0:4c:f7:ab:08:e1:c6:e7:42:16:ed:06:57:0c:cd: 0a:48:f2:a6:60:a2:5d:d3:0c:2e:42:86:06:f7:a8: 63:8b:2b:d2:1a:4c:f6:58:d9:b3:48:41:44:04:28: b1:c6:78:d9:5c:84:e1:50:4c:5b:0d:77:74:2f:7c: 3c:c8:ad:9a:20:08:b5:08:0c:99:2e:58:15:db:07: b3:b6:81:a2:fd:06:45:26:14:eb:1f:78:33:6e:7a: 4e:b1:87:7e:29:e2:7a:f6:75:2b:7b:aa:53:e6:cb: 7b:54:8e:c7:e3:8c:31:43:98:58:1c:59:89:72:7c: bb:97:04:f3:59:23:87:7b:14:b9:40:f5:76:34:11: 99:12:3b:62:42:8d:3a:fb:6c:c3:4b:0c:d7:95:7c: 6b:8b:fe:20:f5:15:72:f6:af:75:24:60:49:b1:69: 2f:96:ca:01:e5:8a:0b:83:31:3e:fe:97:0e:16:39: 6b:5e:6d:3e:4f:a7:fa:e8:59:93:0d:76:93:a4:75: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5D:EC:C8:32:DA:AD:AF:66:0F:DD:5E:E2:C6:7A:6F:04:1D:E3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e58ccb9e-e46b-36bf-b0b7-83b5be9042d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f7:df:d9:7e:1a:c2:98:57:fe:83:75:27:4e:28:a0:28:c1: 5c:f8:d2:99:88:cf:28:b0:39:98:da:83:a1:55:a0:ad:d2:f6: 70:91:06:1e:68:be:4d:9c:81:0b:84:7f:e6:80:a7:ff:ce:b0: b4:f1:cb:b4:89:e1:c1:6b:37:60:3a:2d:d0:5e:31:d6:bf:3f: 53:04:ab:4d:b9:b9:4f:46:92:38:58:35:44:b7:44:95:7a:b4: cf:f7:c9:46:72:b8:19:68:b4:5d:4a:fb:1c:7b:2c:e3:de:2f: 3c:30:64:24:eb:b5:bb:c2:4b:39:2f:a7:72:e5:ab:16:5b:c9: ac:96:47:69:75:c6:ff:9f:5e:f3:90:d7:18:70:39:4d:00:64: f8:a9:81:5d:94:57:ef:b7:e1:23:17:9f:52:92:65:c4:00:90: 93:d3:9b:e4:5d:f3:f7:e7:58:7d:61:c5:c3:e9:fe:53:88:ba: c0:d4:80:fd:c5:54:0c:84:be:e6:11:d8:1b:c6:74:e5:8f:6f: 5c:c7:b6:41:f9:b3:40:0e:c7:ce:b9:b5:4d:4f:6b:ae:3b:b0: c6:e7:35:b7:94:6f:f4:89:be:e0:a8:a3:06:3c:58:e5:3a:96: 20:70:09:ec:c6:90:9d:4b:26:62:bd:4d:85:12:90:e7:f4:d0: 22:57:d4:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmQBg2b2URo+/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZGM1MWI3MTgtYjA2My00YTc0LTg5MzgtODEzZTAzZjBlODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2tX6ohIj9WtpFwtcOHvmTTaBweHR6H/XvmO 89WG8XPl59X0oG4woHIQ7+ntQqhKdi9Lqi0nCc1bvyugTPerCOHG50IW7QZXDM0K SPKmYKJd0wwuQoYG96hjiyvSGkz2WNmzSEFEBCixxnjZXIThUExbDXd0L3w8yK2a IAi1CAyZLlgV2weztoGi/QZFJhTrH3gzbnpOsYd+KeJ69nUre6pT5st7VI7H44wx Q5hYHFmJcny7lwTzWSOHexS5QPV2NBGZEjtiQo06+2zDSwzXlXxri/4g9RVy9q91 JGBJsWkvlsoB5YoLgzE+/pcOFjlrXm0+T6f66FmTDXaTpHXBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1d7Mgy2q2vZg/dXuLGem8EHePYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTU4Y2NiOWUtZTQ2Yi0z NmJmLWIwYjctODNiNWJlOTA0MmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL339l+GsKYV/6DdSdOKKAowVz40pmIzyiwOZjag6FVoK3S9nCRBh5o vk2cgQuEf+aAp//OsLTxy7SJ4cFrN2A6LdBeMda/P1MEq025uU9GkjhYNUS3RJV6 tM/3yUZyuBlotF1K+xx7LOPeLzwwZCTrtbvCSzkvp3LlqxZbyayWR2l1xv+fXvOQ 1xhwOU0AZPipgV2UV++34SMXn1KSZcQAkJPTm+Rd8/fnWH1hxcPp/lOIusDUgP3F VAyEvuYR2BvGdOWPb1zHtkH5s0AOx865tU1Pa647sMbnNbeUb/SJvuCoowY8WOU6 liBwCezGkJ1LJmK9TYUSkOf00CJX1OY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:01:38 2025 by rpki-client