$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa File: 2a4a1f38-23a1-3489-ac54-76169819c152.roa (raw, json) Hash identifier: 6qqM0VAPuSFhjYqk0tW9XdRB7LovFE5YPeRdfR5YIYo= Subject key identifier: A3:FE:B0:F1:7C:81:0B:5A:96:2B:AF:A7:42:24:0A:05:DF:AE:4E:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707AE5F8A6ECA9A49DD200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.23.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7a:e5:f8:a6:ec:a9:a4:9d:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=e7e50a30-be33-4cd0-a2ff-20f0cb6cd3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:f5:c0:12:a7:ae:68:a6:53:f0:db:47:55: 87:7c:0a:39:33:b5:f8:17:1d:46:ff:b2:89:eb:cf: 36:07:a4:17:9a:db:6d:8c:d2:01:18:2c:ef:62:e0: fd:4a:a0:38:65:4b:7f:42:bb:a0:93:6f:72:68:0e: c0:24:87:01:6d:6b:32:36:07:7a:3b:07:c0:0b:1b: b5:96:4c:4a:36:82:7a:16:1c:85:0c:31:d3:a6:3c: 04:ec:b0:3e:c3:bb:12:56:a9:6b:56:7d:b2:67:bf: 7d:6c:83:a4:d4:45:1c:b5:60:e6:9f:02:65:57:55: 46:22:4b:81:0c:46:15:f5:a2:7b:8b:15:00:0b:c3: c9:23:31:5a:06:54:44:c2:df:5e:08:1f:e1:a0:d7: a6:f0:24:8d:fa:23:e8:12:b4:29:d8:44:03:62:d7: b6:15:5f:d9:bb:21:0b:ba:c8:88:ce:be:46:0b:ef: d5:ca:75:b0:66:90:6f:fd:59:61:47:33:d5:fe:d1: ec:6f:95:49:7d:51:c6:91:d0:3e:d7:99:a0:78:dc: 78:c0:de:bf:1e:22:cb:71:4f:d2:7f:1f:93:e7:0b: ae:f6:a1:c0:d9:d5:e9:f2:0e:44:24:b0:11:4c:31: 4c:cf:f9:b6:41:9f:1a:08:01:0e:4f:f6:3c:0b:11: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FE:B0:F1:7C:81:0B:5A:96:2B:AF:A7:42:24:0A:05:DF:AE:4E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f2:5b:8a:2e:09:f7:dd:2d:49:b8:15:69:d4:77:35:55:d3: a1:ed:92:51:aa:35:e1:85:3a:bd:01:18:f0:ea:75:6d:2f:d0: 71:14:ad:7d:74:9a:28:40:3d:4e:15:da:e8:54:0f:c6:d2:b9: 53:38:dc:46:43:0e:b3:c1:ae:e2:f7:f4:b9:3d:59:cb:68:a4: c5:43:13:9c:6a:d1:57:a0:eb:7f:c8:1d:61:f1:44:2f:6f:8d: a2:cc:09:f8:2e:ab:41:11:ed:eb:3a:ba:ce:9b:46:89:10:96: c4:10:30:34:e1:dc:84:7d:60:7d:5d:21:33:84:2b:d3:a4:c7: d4:76:93:1d:e0:13:aa:7e:07:41:ab:f0:b1:71:32:a8:ab:4c: 25:33:ba:34:43:7a:3b:09:ec:af:fa:7a:86:0e:a6:c7:8a:18: 31:de:bb:c4:cb:09:19:b1:d9:4b:78:b8:3b:f0:30:bc:14:fc: 28:ec:8e:ce:0e:6f:75:23:47:5e:a1:0d:14:a5:37:09:14:02: 8a:3d:5b:1c:4a:7b:7a:64:ad:53:ad:ec:0c:a7:94:b5:2e:a6: 41:bd:77:b5:87:d0:4c:9f:fe:5a:60:d1:94:79:2c:ee:eb:f3: 9f:fb:0b:e7:a5:21:ff:b3:c7:70:4d:b6:ee:cc:0e:d6:5f:60: c0:6f:e5:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHrl+KbsqaSd0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTdlNTBhMzAtYmUzMy00Y2QwLWEyZmYtMjBmMGNiNmNkM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijn1wBKnrmimU/DbR1WHfAo5M7X4Fx1G/7KJ 6882B6QXmtttjNIBGCzvYuD9SqA4ZUt/Qrugk29yaA7AJIcBbWsyNgd6OwfACxu1 lkxKNoJ6FhyFDDHTpjwE7LA+w7sSVqlrVn2yZ799bIOk1EUctWDmnwJlV1VGIkuB DEYV9aJ7ixUAC8PJIzFaBlREwt9eCB/hoNem8CSN+iPoErQp2EQDYte2FV/ZuyEL usiIzr5GC+/VynWwZpBv/VlhRzPV/tHsb5VJfVHGkdA+15mgeNx4wN6/HiLLcU/S fx+T5wuu9qHA2dXp8g5EJLARTDFMz/m2QZ8aCAEOT/Y8CxHI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP+sPF8gQtaliuvp0IkCgXfrk6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0YTFmMzgtMjNhMS0z NDg5LWFjNTQtNzYxNjk4MTljMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/yW4ouCffdLUm4FWnUdzVV06HtklGqNeGFOr0BGPDqdW0v0HEUrX10 mihAPU4V2uhUD8bSuVM43EZDDrPBruL39Lk9WctopMVDE5xq0Veg63/IHWHxRC9v jaLMCfguq0ER7es6us6bRokQlsQQMDTh3IR9YH1dITOEK9Okx9R2kx3gE6p+B0Gr 8LFxMqirTCUzujRDejsJ7K/6eoYOpseKGDHeu8TLCRmx2Ut4uDvwMLwU/Cjsjs4O b3UjR16hDRSlNwkUAoo9WxxKe3pkrVOt7AynlLUupkG9d7WH0Eyf/lpg0ZR5LO7r 85/7C+elIf+zx3BNtu7MDtZfYMBv5Xo= -----END CERTIFICATE-----Generated at Wed Jul 9 13:57:19 2025 by rpki-client