$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa File: f2134156-80a5-3a22-8250-44093645e181.roa (raw, json) Hash identifier: 1/NafAcM+dm/UtRGYyW/BDUaDFqDsTT2+g85H0iPM3E= Subject key identifier: 86:84:4E:FE:82:57:81:0B:5A:B4:C5:95:BB:A8:39:D1:DA:2C:E4:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA93E561055FD9E2C4AF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.16.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:93:e5:61:05:5f:d9:e2:c4:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=1c5bfd3c-90dc-4380-a3ea-6c398d3d461e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:e9:c7:e3:50:c3:0d:e5:6f:e1:f3:48:39: 2b:e5:02:5a:55:93:6f:47:e6:bb:a4:2c:d4:59:e2: 9a:eb:28:2d:00:fe:f9:38:ff:64:e3:e1:56:a6:5e: 48:1e:ae:85:05:67:e0:13:84:10:1a:6d:23:03:62: cb:dc:d5:65:80:8a:d8:a9:e1:e4:19:9f:5d:d1:fc: 10:aa:82:44:d7:c3:ef:a2:fe:e8:bf:98:e4:f4:36: 81:f8:f6:07:6c:d3:3a:ad:6c:9a:1d:9a:70:ad:93: 20:44:e7:7d:6a:73:53:f8:26:96:37:63:40:4d:54: 0c:5f:8f:8b:66:9b:de:02:14:6d:c5:19:59:29:ba: fa:28:98:fa:3c:34:e2:ac:d7:54:52:bb:df:c6:9c: 92:07:7d:f2:dd:b4:34:60:0d:4e:57:3d:3c:c6:d1: df:e1:ba:65:06:69:0f:3f:5f:1c:08:ac:12:03:b4: cc:d7:36:c6:b0:e9:08:71:41:c3:d8:da:19:de:cf: dd:26:7c:14:00:d4:34:19:91:4a:8c:70:55:de:13: 54:49:6c:18:24:b8:75:6e:dd:dd:64:50:a9:e7:1d: f4:65:72:df:75:8e:ec:4f:71:dd:46:25:cd:f7:5b: 0c:53:f8:99:b2:4d:74:10:eb:53:04:14:42:ba:f2: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:84:4E:FE:82:57:81:0B:5A:B4:C5:95:BB:A8:39:D1:DA:2C:E4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ee:0e:52:05:12:9e:18:41:36:5f:3f:72:8a:e8:7b:d4:03: 84:77:b0:f3:58:2a:e2:1a:f4:cf:97:63:7d:e1:20:15:c2:ed: d9:c2:43:2e:df:d5:be:6e:d4:40:6d:ed:2e:9f:04:62:e1:15: 12:05:e7:a6:d8:3a:82:87:33:0d:ec:e6:8a:af:65:c0:e5:b3: 66:c4:59:86:d0:d5:ba:a2:7a:3b:2f:12:59:85:c8:fa:ee:4c: d8:b2:53:26:36:82:8e:f6:bc:9a:cd:08:32:83:1d:fa:d1:ad: 4a:fd:eb:3f:89:c4:c5:65:4d:4f:5b:d7:86:b0:5a:81:22:99: ac:cf:a2:b9:b2:b9:16:db:88:0e:b7:60:fc:31:08:68:8a:d5: 96:64:0d:e5:69:ee:28:46:1b:c2:65:04:2a:78:df:ca:12:aa: 70:8c:b5:aa:b0:60:6c:f5:1b:a5:13:13:80:d3:e8:86:f1:dd: 48:7c:53:18:6f:ac:a5:51:fc:12:da:76:ef:de:0d:7d:95:7e: e8:fe:f8:33:08:51:27:ce:4b:46:84:22:55:d1:a6:97:0d:ac: 2e:f5:0c:a5:f3:b6:b0:a6:fa:e9:ef:f4:d3:24:9c:0d:58:fc: 5f:cf:0a:64:5b:b8:02:9c:ba:a7:d3:e9:08:06:ca:91:ee:52: 45:42:88:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpPlYQVf2eLEr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MWM1YmZkM2MtOTBkYy00MzgwLWEzZWEtNmMzOThkM2Q0NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjbpx+NQww3lb+HzSDkr5QJaVZNvR+a7pCzU WeKa6ygtAP75OP9k4+FWpl5IHq6FBWfgE4QQGm0jA2LL3NVlgIrYqeHkGZ9d0fwQ qoJE18Pvov7ov5jk9DaB+PYHbNM6rWyaHZpwrZMgROd9anNT+CaWN2NATVQMX4+L ZpveAhRtxRlZKbr6KJj6PDTirNdUUrvfxpySB33y3bQ0YA1OVz08xtHf4bplBmkP P18cCKwSA7TM1zbGsOkIcUHD2NoZ3s/dJnwUANQ0GZFKjHBV3hNUSWwYJLh1bt3d ZFCp5x30ZXLfdY7sT3HdRiXN91sMU/iZsk10EOtTBBRCuvLLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaETv6CV4ELWrTFlbuoOdHaLOQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIxMzQxNTYtODBhNS0z YTIyLTgyNTAtNDQwOTM2NDVlMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfuDlIFEp4YQTZfP3KK6HvUA4R3sPNYKuIa9M+XY33hIBXC7dnCQy7f 1b5u1EBt7S6fBGLhFRIF56bYOoKHMw3s5oqvZcDls2bEWYbQ1bqiejsvElmFyPru TNiyUyY2go72vJrNCDKDHfrRrUr96z+JxMVlTU9b14awWoEimazPormyuRbbiA63 YPwxCGiK1ZZkDeVp7ihGG8JlBCp438oSqnCMtaqwYGz1G6UTE4DT6Ibx3Uh8Uxhv rKVR/BLadu/eDX2Vfuj++DMIUSfOS0aEIlXRppcNrC71DKXztrCm+unv9NMknA1Y /F/PCmRbuAKcuqfT6QgGypHuUkVCiFs= -----END CERTIFICATE-----Generated at Tue Jun 17 19:41:44 2025 by rpki-client