$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa File: 0b6db478-8531-3fa9-ad15-f50272ba9617.roa (raw, json) Hash identifier: H/UbYnEiXXWXmwqhSVLx8XiyOlrubMs2gDlcaP6/RyQ= Subject key identifier: 6B:B4:A2:CF:3A:94:12:1F:FB:BE:8C:F7:CD:39:EE:38:D6:B3:6B:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D594F7675889EDE4DA306300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.20.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f7:67:58:89:ed:e4:da:30:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=b8166252-cca6-4aad-b586-4c3047db332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:04:98:c9:7a:f0:70:9c:70:3d:b1:34:f6:b6: af:45:c2:70:5e:5f:4b:a5:3a:4f:5e:bf:a1:a5:47: 65:d0:f4:1c:97:18:c0:51:5d:ce:9a:d0:be:f7:27: c0:61:ab:27:34:6c:91:f7:aa:c8:71:ce:af:1d:13: 16:6d:64:2a:c0:6c:92:87:aa:40:71:67:23:46:2d: 75:ef:d5:ae:6d:c9:b9:fe:90:60:cc:92:00:67:52: 74:eb:06:9a:95:d7:62:d3:34:63:8e:65:81:e5:c7: ee:f8:ef:f9:d2:ee:41:5e:0a:a8:48:66:1f:69:16: a0:f3:0d:aa:2a:0c:71:14:4b:ab:0b:c0:78:b0:c1: 5b:31:40:ec:c4:ab:d3:0f:9f:57:46:9b:9f:27:c6: f5:89:3f:b5:98:fd:9a:1b:bc:d2:e9:7c:d1:f7:9f: e3:bd:db:25:85:b3:ed:51:20:c2:a6:da:1a:82:7a: 91:18:09:f6:a7:9f:95:f4:3c:10:97:0b:6f:b1:6e: 85:2f:00:ef:b0:29:50:5d:f7:df:17:69:e1:95:09: 40:31:a5:9e:bb:26:b5:2e:5a:19:61:41:e6:7f:c8: 1a:15:2f:f0:63:32:05:1f:6d:9f:c6:83:6d:20:1c: 70:74:fe:18:6b:ac:a5:0b:a3:d7:30:76:ae:60:0f: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B4:A2:CF:3A:94:12:1F:FB:BE:8C:F7:CD:39:EE:38:D6:B3:6B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b9:49:db:de:9e:81:c4:28:70:ff:96:90:6c:96:24:28:3b: e5:44:7b:f6:56:33:1f:50:d9:de:46:8c:08:98:24:6b:7f:4e: 8f:87:14:62:f7:30:47:23:cb:ff:2b:95:a3:84:a7:34:54:99: d8:82:a9:d0:37:1a:3e:97:91:b6:fd:7f:46:6e:f5:75:ab:14: ad:70:fc:85:7d:4a:e9:3d:85:74:f4:29:1b:c3:a4:d8:58:03: 85:ae:f2:61:e3:6c:ac:24:46:2d:d4:fd:92:67:c4:4d:0e:88: d3:04:ec:e4:d9:f0:88:22:be:a0:97:ba:c3:0a:d4:09:b3:64: 7c:04:37:e1:e7:ef:a5:cd:20:60:7c:a5:36:27:5f:a4:9a:13: 20:c5:ec:d4:52:09:80:9b:13:28:fa:a8:8f:c7:0b:1a:5b:82: ea:c7:3a:5d:db:f6:63:25:38:8c:f1:91:84:67:3d:97:26:fd: 0f:02:35:a4:e0:0e:60:4d:b9:8c:76:e7:39:5b:53:e3:78:39: ac:d3:c5:39:d6:db:60:70:72:b6:89:2e:3d:07:46:b1:80:fd: 55:38:26:55:d2:d9:22:11:00:ab:83:df:e9:0e:37:50:da:aa: ac:e3:cd:89:3a:7f:0b:28:fa:bd:37:6b:7d:b1:8e:bb:92:f1: 42:15:43:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPdnWInt5NowYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YjgxNjYyNTItY2NhNi00YWFkLWI1ODYtNGMzMDQ3ZGIzMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogSYyXrwcJxwPbE09ravRcJwXl9LpTpPXr+h pUdl0PQclxjAUV3OmtC+9yfAYasnNGyR96rIcc6vHRMWbWQqwGySh6pAcWcjRi11 79Wubcm5/pBgzJIAZ1J06waalddi0zRjjmWB5cfu+O/50u5BXgqoSGYfaRag8w2q KgxxFEurC8B4sMFbMUDsxKvTD59XRpufJ8b1iT+1mP2aG7zS6XzR95/jvdslhbPt USDCptoagnqRGAn2p5+V9DwQlwtvsW6FLwDvsClQXfffF2nhlQlAMaWeuya1LloZ YUHmf8gaFS/wYzIFH22fxoNtIBxwdP4Ya6ylC6PXMHauYA+8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu0os86lBIf+76M98057jjWs2t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2ZGI0NzgtODUzMS0z ZmE5LWFkMTUtZjUwMjcyYmE5NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB25SdvenoHEKHD/lpBsliQoO+VEe/ZWMx9Q2d5GjAiYJGt/To+HFGL3 MEcjy/8rlaOEpzRUmdiCqdA3Gj6Xkbb9f0Zu9XWrFK1w/IV9Suk9hXT0KRvDpNhY A4Wu8mHjbKwkRi3U/ZJnxE0OiNME7OTZ8IgivqCXusMK1AmzZHwEN+Hn76XNIGB8 pTYnX6SaEyDF7NRSCYCbEyj6qI/HCxpbgurHOl3b9mMlOIzxkYRnPZcm/Q8CNaTg DmBNuYx25zlbU+N4OazTxTnW22BwcraJLj0HRrGA/VU4JlXS2SIRAKuD3+kON1Da qqzjzYk6fwso+r03a32xjruS8UIVQ7s= -----END CERTIFICATE-----Generated at Wed Jul 9 13:52:07 2025 by rpki-client