$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: tTorZz0TJ0wYqs9+eec9sLJxCxMV9y3sjtzZfAv9CvQ= Subject key identifier: A1:D3:DC:42:0C:BB:DF:AD:E6:AB:7D:8C:4C:54:15:43:C6:DE:E7:FF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605E14E5FAB7B03669C500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:14:e5:fa:b7:b0:36:69:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=e54dfd09-6382-4207-a42b-e79490f42b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:98:c8:27:bb:a8:05:39:a4:00:18:c2:1e: f4:bf:f2:3b:9d:5c:dc:f8:95:16:d0:ab:df:bf:87: 1d:7b:26:49:23:0c:64:ef:31:d1:c0:94:c4:21:37: 4a:5a:06:ee:82:fa:1a:01:aa:0d:44:0a:32:8a:35: 6a:2b:76:f8:63:5b:5b:08:ce:a4:80:60:f0:19:66: 88:56:57:ff:5e:ad:8d:a6:e3:a3:64:b7:12:36:b5: 76:10:01:8c:b8:3f:c1:a1:33:72:f5:22:76:eb:59: 8e:1e:90:9a:84:64:ba:57:53:07:b0:06:67:0b:f5: 71:a1:56:73:75:63:f0:eb:c0:b3:ae:0a:5d:d4:20: 85:da:c8:48:15:01:5a:15:06:0b:33:b9:c3:e4:76: 9b:b8:11:6f:1b:e2:a1:25:fd:8b:6c:6d:79:83:cc: b0:ef:c5:7e:02:5f:3f:42:f1:0e:c2:93:20:d8:1f: 29:60:bf:d7:ed:ee:02:6d:1c:30:4f:59:de:47:8d: 6a:01:b0:1c:c5:3f:39:6c:30:b4:6d:7a:4f:96:ac: 19:1a:36:54:fd:e5:5d:64:a1:b7:fb:b8:70:3b:7c: 23:e2:0c:4b:51:b3:d6:54:16:d1:39:28:c6:7e:ca: 40:52:f3:4b:d1:39:d7:c9:ec:11:22:6f:a3:38:ec: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:DC:42:0C:BB:DF:AD:E6:AB:7D:8C:4C:54:15:43:C6:DE:E7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:51:27:c8:d3:ae:45:d3:ea:c4:e2:a3:6e:2c:3e:8e:6a:c9: 57:59:76:85:71:6c:f9:a7:28:44:ca:6d:0d:81:50:49:d5:b2: 17:fe:44:2e:62:76:4f:79:54:28:36:95:b5:25:1f:16:71:23: 92:16:98:3d:c7:94:90:40:d5:e8:2b:56:00:89:9a:dd:f0:ec: fb:b2:5d:0b:8f:66:e0:2c:78:5e:62:0d:20:6a:e3:1e:a9:63: 1b:c7:12:8b:3e:b0:cb:6d:b7:cd:23:00:2b:6a:03:40:de:9b: e3:a1:b3:88:67:8d:9d:62:62:eb:5f:65:4c:32:9a:0c:41:b6: 3f:05:92:21:d1:69:de:9d:95:dc:40:3f:2d:c9:0b:ce:bf:8f: 97:5c:9e:cc:81:27:9f:5b:c7:d8:4b:82:9d:52:21:7c:f2:d5: ca:c4:d6:59:62:61:9c:71:fc:6a:30:23:ad:ed:e7:b1:f6:82: 02:3b:07:60:91:b0:df:5b:87:81:6a:ac:c5:41:98:0f:a2:58: da:ce:37:5b:9f:5e:62:b2:73:f2:21:db:b1:52:7e:b6:87:88: 54:13:7f:72:2d:c5:60:a4:48:d4:bc:2d:35:02:3f:9d:76:d6: 38:db:6c:75:e3:18:cb:f0:55:92:01:1c:1e:c9:c2:53:ec:81: ef:fb:56:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF4U5fq3sDZpxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTU0ZGZkMDktNjM4Mi00MjA3LWE0MmItZTc5NDkwZjQyYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt2YyCe7qAU5pAAYwh70v/I7nVzc+JUW0Kvf v4cdeyZJIwxk7zHRwJTEITdKWgbugvoaAaoNRAoyijVqK3b4Y1tbCM6kgGDwGWaI Vlf/Xq2NpuOjZLcSNrV2EAGMuD/BoTNy9SJ261mOHpCahGS6V1MHsAZnC/VxoVZz dWPw68Czrgpd1CCF2shIFQFaFQYLM7nD5HabuBFvG+KhJf2LbG15g8yw78V+Al8/ QvEOwpMg2B8pYL/X7e4CbRwwT1neR41qAbAcxT85bDC0bXpPlqwZGjZU/eVdZKG3 +7hwO3wj4gxLUbPWVBbROSjGfspAUvNL0TnXyewRIm+jOOzoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHT3EIMu9+t5qt9jExUFUPG3uf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRRJ8jTrkXT6sTio24sPo5qyVdZdoVxbPmnKETKbQ2BUEnVshf+RC5i dk95VCg2lbUlHxZxI5IWmD3HlJBA1egrVgCJmt3w7PuyXQuPZuAseF5iDSBq4x6p YxvHEos+sMttt80jACtqA0Dem+Ohs4hnjZ1iYutfZUwymgxBtj8FkiHRad6dldxA Py3JC86/j5dcnsyBJ59bx9hLgp1SIXzy1crE1lliYZxx/GowI63t57H2ggI7B2CR sN9bh4FqrMVBmA+iWNrON1ufXmKyc/Ih27FSfraHiFQTf3ItxWCkSNS8LTUCP512 1jjbbHXjGMvwVZIBHB7JwlPsge/7VmQ= -----END CERTIFICATE-----Generated at Wed Jul 9 12:46:54 2025 by rpki-client