$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa File: fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa (raw, json) Hash identifier: gQq805BIwjHyi3l8eexrjBeV7VQG80xPyNVeHvW7uus= Subject key identifier: 07:33:CA:B9:C2:FA:5E:12:6E:2D:A9:AF:E3:96:42:E9:17:BB:C2:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A093A965367E89A10E4257540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.19.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:96:53:67:e8:9a:10:e4:25:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=dfc2baf7-6ae6-471e-9ccf-05cea064e2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:da:a5:71:92:c5:f4:39:a2:a6:2f:55:b6: f3:89:fe:77:c6:57:2c:77:10:74:cc:bc:03:da:21: 34:72:45:af:d6:d5:6a:75:2c:ed:f4:07:47:f3:74: fe:d2:f1:bf:55:00:3c:c2:9e:cb:6c:0d:83:42:0e: 82:f9:8b:c2:1b:26:90:9f:52:c4:c7:7b:a2:83:c9: ba:c3:a5:89:2f:aa:ae:94:20:0f:d1:d3:96:7a:23: ea:49:dc:89:3c:3e:b0:c8:62:b1:d0:38:be:0c:fe: 82:c5:65:87:11:8a:d6:a9:28:c7:68:8f:ba:90:02: fa:5d:99:bc:54:36:da:be:9c:d4:7f:7c:94:19:0a: 32:1f:42:c8:ab:89:f1:37:47:c0:de:ec:d6:32:21: 24:b6:b9:4c:50:95:5d:a0:f3:fb:27:d0:55:59:11: 96:46:0b:db:09:81:2e:78:c6:bb:54:eb:44:20:be: 5a:08:1a:dd:21:e6:4a:08:e0:a2:4a:23:83:1b:bd: ac:5b:29:ee:99:cd:c7:82:24:1a:34:98:7a:7f:4f: 60:0c:22:6c:41:27:8a:78:cd:42:34:7b:5e:9a:0d: 11:d6:df:a3:c7:9f:4f:17:4f:b3:67:dd:69:d1:10: e0:38:d1:43:79:19:f7:03:6d:a7:89:ca:c4:b0:70: 56:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:33:CA:B9:C2:FA:5E:12:6E:2D:A9:AF:E3:96:42:E9:17:BB:C2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0c:78:5f:96:fd:b3:eb:cd:c2:ac:61:29:ff:90:85:70:4c: 1c:01:03:d6:fe:ab:d8:fe:10:99:d7:ef:0d:30:c0:a5:a7:ac: 43:f2:5b:66:99:cc:13:10:8e:dd:09:44:6d:55:0a:9a:9e:3a: 2f:4f:a5:06:87:4b:04:e4:09:65:50:e2:dd:cb:6d:e7:1d:a9: 24:81:ef:ed:0f:c7:39:fb:fb:12:2f:07:31:15:e6:84:47:f0: c9:c0:18:9d:1b:5a:c2:0a:c9:70:7a:36:19:0e:b5:ae:8c:8c: ff:d7:23:ea:95:c7:0a:7f:3c:96:49:93:68:90:81:f6:2d:4e: a5:b0:ab:8d:07:2b:b5:be:a3:61:3f:14:a6:3b:8a:eb:fa:c4: ef:e8:f5:b9:c5:a1:58:06:6f:71:2f:ea:cf:9f:4a:d0:e2:cc: ca:2f:63:f5:52:7b:c2:ce:8e:70:0e:6f:4a:74:6b:ba:f0:5a: 9d:30:47:88:c3:90:a8:6a:a2:f1:09:89:18:17:a6:0e:b3:19: 6b:67:57:91:32:1a:b2:6b:66:ad:a0:6e:1a:68:9e:18:cb:34: a4:86:de:9c:5f:e2:23:88:d8:11:5b:5e:93:c6:fe:00:17:0a: 38:0b:7a:2c:cc:18:f5:9d:1b:99:83:9d:ac:6a:81:d0:31:22: 00:bd:80:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOpZTZ+iaEOQldUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZGZjMmJhZjctNmFlNi00NzFlLTljY2YtMDVjZWEwNjRlMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOzapXGSxfQ5oqYvVbbzif53xlcsdxB0zLwD 2iE0ckWv1tVqdSzt9AdH83T+0vG/VQA8wp7LbA2DQg6C+YvCGyaQn1LEx3uig8m6 w6WJL6qulCAP0dOWeiPqSdyJPD6wyGKx0Di+DP6CxWWHEYrWqSjHaI+6kAL6XZm8 VDbavpzUf3yUGQoyH0LIq4nxN0fA3uzWMiEktrlMUJVdoPP7J9BVWRGWRgvbCYEu eMa7VOtEIL5aCBrdIeZKCOCiSiODG72sWynumc3HgiQaNJh6f09gDCJsQSeKeM1C NHtemg0R1t+jx59PF0+zZ91p0RDgONFDeRn3A22nicrEsHBWlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAczyrnC+l4Sbi2pr+OWQukXu8LaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRkZmNmOWMtMTZjZi0z ODg1LWIwZGUtYTgyOWRhZGIxZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4MeF+W/bPrzcKsYSn/kIVwTBwBA9b+q9j+EJnX7w0wwKWnrEPyW2aZ zBMQjt0JRG1VCpqeOi9PpQaHSwTkCWVQ4t3LbecdqSSB7+0Pxzn7+xIvBzEV5oRH 8MnAGJ0bWsIKyXB6NhkOta6MjP/XI+qVxwp/PJZJk2iQgfYtTqWwq40HK7W+o2E/ FKY7iuv6xO/o9bnFoVgGb3Ev6s+fStDizMovY/VSe8LOjnAOb0p0a7rwWp0wR4jD kKhqovEJiRgXpg6zGWtnV5EyGrJrZq2gbhponhjLNKSG3pxf4iOI2BFbXpPG/gAX CjgLeizMGPWdG5mDnaxqgdAxIgC9gCo= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:26 2025 by rpki-client