$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa File: 504bb3f9-0f56-318f-a66f-f3a42d95139c.roa (raw, json) Hash identifier: FPRCF1/tOyUwuJ6Ncc7/FQbKXAM4k+vg8def2X9x2BQ= Subject key identifier: 43:E1:90:DA:66:3A:55:55:D9:19:3F:8D:E3:59:4B:50:FC:C6:F5:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605EF1813F1EAAD5725EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.19.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:f1:81:3f:1e:aa:d5:72:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=261a25d9-a908-480a-8c36-07dd763c6dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d1:7b:2e:6e:2d:9f:02:bc:87:5d:f1:8e:0e: ef:2d:05:c9:d1:89:e8:f8:3e:34:cc:73:c3:07:d1: c0:e6:41:73:c8:f6:b1:ad:05:f5:be:e7:c2:02:74: 6f:c2:bb:52:f3:54:f4:09:ab:4a:1c:f6:25:86:1c: f4:75:56:06:e6:27:87:ff:2f:9a:1e:82:71:6e:cd: 32:d2:65:8e:0e:f3:68:36:b5:fd:94:2b:e5:48:83: 64:9a:ac:04:c4:3e:6f:50:9e:b6:c9:0c:40:af:2d: c9:1a:40:b0:91:d3:2e:10:9e:66:5f:a0:48:90:a1: d4:6d:3b:2d:e3:7b:3b:3d:83:52:21:ef:31:5f:0b: ef:d4:9c:a7:92:3f:ed:a2:00:41:d7:2e:f8:3e:58: 59:cf:0e:03:a4:85:00:fd:1e:69:77:c8:a9:1b:a3: cc:80:66:d8:75:46:fa:e3:fa:32:6d:d2:58:76:bd: 3b:d4:5c:24:b3:fb:0b:81:4c:25:89:fd:f2:09:d6: a6:dd:dc:98:7b:f3:e1:d4:a4:a7:2b:82:30:ed:20: 43:d6:18:d7:70:ec:bf:f0:89:b1:40:0c:63:35:53: eb:de:c3:2e:eb:67:47:f2:7f:74:a8:da:aa:5b:39: ae:91:00:58:31:c1:6a:2d:3f:d1:9e:8b:ef:a5:cd: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E1:90:DA:66:3A:55:55:D9:19:3F:8D:E3:59:4B:50:FC:C6:F5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fb:7a:42:bd:aa:ab:c1:90:d5:db:c2:d8:bc:b8:ee:bf:7b: a1:55:4d:19:bb:ca:37:b3:5a:fd:f9:f7:ca:17:45:25:46:91: fc:b1:66:8e:60:e1:2c:35:c2:6c:c8:21:c5:f0:7c:3f:62:2d: fc:1e:c5:0a:8a:9d:4e:26:bd:1e:de:cc:61:ae:9f:c1:0d:dc: 13:36:e1:ba:da:f0:76:7d:70:c3:8b:40:2d:14:36:1e:f9:29: fa:d7:19:a3:31:c7:ff:da:05:72:c6:ef:42:e7:d1:90:e1:10: 32:16:98:b9:31:d9:ec:f6:53:8c:b0:39:05:36:74:ab:4b:a3: 1f:ff:66:3a:c8:e9:aa:57:ed:de:d8:a2:d3:84:a7:03:22:62: 64:2a:ea:12:eb:48:09:fd:85:39:23:0c:be:01:f3:a0:b4:1b: 19:d4:93:cd:7c:8e:1f:23:17:fe:b5:c9:1d:5d:f7:af:25:bf: 9d:c9:98:47:75:15:22:ab:d9:ec:47:a8:25:5e:17:97:5d:55: 85:d9:cd:a6:b1:93:ff:09:45:86:7d:38:7f:bd:4c:9a:0e:50: 43:81:23:ec:82:62:11:82:89:eb:79:5e:9b:8d:15:69:94:8b: d5:e6:6a:2a:5e:f3:b3:6e:6f:02:c1:7d:29:5a:b8:32:d7:45: fa:bc:b5:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF7xgT8eqtVyXqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MjYxYTI1ZDktYTkwOC00ODBhLThjMzYtMDdkZDc2M2M2ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtF7Lm4tnwK8h13xjg7vLQXJ0Yno+D40zHPD B9HA5kFzyPaxrQX1vufCAnRvwrtS81T0CatKHPYlhhz0dVYG5ieH/y+aHoJxbs0y 0mWODvNoNrX9lCvlSINkmqwExD5vUJ62yQxAry3JGkCwkdMuEJ5mX6BIkKHUbTst 43s7PYNSIe8xXwvv1Jynkj/togBB1y74PlhZzw4DpIUA/R5pd8ipG6PMgGbYdUb6 4/oybdJYdr071Fwks/sLgUwlif3yCdam3dyYe/Ph1KSnK4Iw7SBD1hjXcOy/8Imx QAxjNVPr3sMu62dH8n90qNqqWzmukQBYMcFqLT/Rnovvpc07SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPhkNpmOlVV2Rk/jeNZS1D8xvWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA0YmIzZjktMGY1Ni0z MThmLWE2NmYtZjNhNDJkOTUxMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF77ekK9qqvBkNXbwti8uO6/e6FVTRm7yjezWv3598oXRSVGkfyxZo5g 4Sw1wmzIIcXwfD9iLfwexQqKnU4mvR7ezGGun8EN3BM24bra8HZ9cMOLQC0UNh75 KfrXGaMxx//aBXLG70Ln0ZDhEDIWmLkx2ez2U4ywOQU2dKtLox//ZjrI6apX7d7Y otOEpwMiYmQq6hLrSAn9hTkjDL4B86C0GxnUk818jh8jF/61yR1d968lv53JmEd1 FSKr2exHqCVeF5ddVYXZzaaxk/8JRYZ9OH+9TJoOUEOBI+yCYhGCiet5XpuNFWmU i9Xmaipe87NubwLBfSlauDLXRfq8tTc= -----END CERTIFICATE-----Generated at Wed Jul 9 12:49:50 2025 by rpki-client