$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e66b6b29-49e9-3731-8ad2-6f18524fd008.roa File: e66b6b29-49e9-3731-8ad2-6f18524fd008.roa (raw, json) Hash identifier: 1h4xq7Mw7S/DWxRm8wzGr9V4W+SnJG7OIA/B8tGKkRg= Subject key identifier: 5B:0A:72:A4:F7:D4:0E:75:D5:AA:D6:9A:4B:9B:34:86:2A:9D:47:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A698B1334D28EC657342C3600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e66b6b29-49e9-3731-8ad2-6f18524fd008.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.18.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:13:34:d2:8e:c6:57:34:2c:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=8ceb2c2e-71bc-474b-b20a-50081e070341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:a6:29:7f:fd:9f:73:9b:4f:ac:64:ab:6a: 91:33:3f:7d:69:e8:29:07:5a:40:61:39:63:dd:53: 07:fe:a8:4d:57:87:a9:94:18:98:d7:d2:6c:f2:19: 05:f9:6d:c9:da:79:62:8c:ee:fb:d5:e9:dd:68:1d: 00:8f:40:06:58:eb:d1:e1:27:b1:9b:90:fa:8f:ed: 72:71:15:d7:8b:0a:68:d3:76:f2:63:da:2d:0a:a2: a3:dd:32:d1:01:15:9a:6a:a3:f4:9f:e2:d9:8f:dd: cf:6d:d7:bb:45:1f:30:89:72:ec:5a:7a:f2:4f:a5: 3b:99:9c:3d:16:0c:59:fa:2f:99:09:3e:db:23:c2: 75:28:fa:15:b3:31:a7:f6:27:e9:3a:57:78:39:e7: 7e:76:ac:c5:7d:46:f3:08:fc:c5:a9:2f:d7:87:95: 74:2e:07:f2:2f:96:c6:b2:20:a7:94:c8:99:a3:e7: ad:07:3d:ca:df:24:ea:b4:8c:4c:3c:66:1b:91:4d: d4:f7:88:b5:bc:79:22:56:a8:ee:08:73:47:d1:7e: f1:f0:92:f3:51:43:92:bb:1e:3e:9d:a3:eb:e8:e9: 88:3c:eb:d2:7c:09:7b:d3:bb:ed:d6:91:0e:2e:a9: 1e:17:b1:00:a9:2d:d0:3d:e2:b9:88:69:77:c8:1f: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0A:72:A4:F7:D4:0E:75:D5:AA:D6:9A:4B:9B:34:86:2A:9D:47:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e66b6b29-49e9-3731-8ad2-6f18524fd008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f4:c4:b9:03:88:89:aa:fc:88:4c:58:6b:88:fe:8a:d9:cd: bc:32:c0:0d:0f:ee:80:ef:27:91:0a:7a:be:c0:01:6a:06:88: 55:fc:a8:79:d1:95:9f:5e:a8:83:c4:a5:a8:1c:67:00:45:f4: f4:ec:d4:13:20:fe:0b:96:3b:fc:e7:95:fd:73:b7:d7:cb:6e: 08:f4:03:91:8d:de:02:cb:24:ee:ac:ee:bd:91:6b:a2:0b:52: 75:2e:c5:4e:a1:e0:1d:25:24:e0:e1:92:e0:1b:42:30:f9:bf: f6:fc:c3:f4:c2:34:b5:fe:90:cc:68:9d:ed:1f:d2:4d:3f:5c: 99:5e:4f:b9:e2:78:94:1f:34:aa:ee:b1:0f:65:9f:db:90:4d: f5:82:af:9a:44:fd:b3:25:07:f0:2a:a1:ae:84:1e:08:68:86: 16:65:8e:0c:d5:f2:88:a9:68:b0:89:c4:cc:86:76:68:15:6d: 65:7c:ed:22:f0:01:43:a5:ef:e7:37:ec:ff:0f:6b:8c:a2:6b: 1c:cf:36:43:db:6a:ea:85:33:8f:80:dd:e5:30:3b:20:dd:ee: 72:ee:32:09:bc:6b:2e:93:29:1a:27:89:4d:c6:16:4c:ea:30: 63:72:58:af:73:9d:6e:a9:e5:86:ff:85:fb:68:ea:39:e6:92: 2f:80:60:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixM00o7GVzQsNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk OGNlYjJjMmUtNzFiYy00NzRiLWIyMGEtNTAwODFlMDcwMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFOmKX/9n3ObT6xkq2qRMz99aegpB1pAYTlj 3VMH/qhNV4eplBiY19Js8hkF+W3J2nlijO771endaB0Aj0AGWOvR4Sexm5D6j+1y cRXXiwpo03byY9otCqKj3TLRARWaaqP0n+LZj93Pbde7RR8wiXLsWnryT6U7mZw9 FgxZ+i+ZCT7bI8J1KPoVszGn9ifpOld4Oed+dqzFfUbzCPzFqS/Xh5V0LgfyL5bG siCnlMiZo+etBz3K3yTqtIxMPGYbkU3U94i1vHkiVqjuCHNH0X7x8JLzUUOSux4+ naPr6OmIPOvSfAl707vt1pEOLqkeF7EAqS3QPeK5iGl3yB/Y4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsKcqT31A511arWmkubNIYqnUeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY2YjZiMjktNDllOS0z NzMxLThhZDItNmYxODUyNGZkMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn0xLkDiImq/IhMWGuI/orZzbwywA0P7oDvJ5EKer7AAWoGiFX8qHnR lZ9eqIPEpagcZwBF9PTs1BMg/guWO/znlf1zt9fLbgj0A5GN3gLLJO6s7r2Ra6IL UnUuxU6h4B0lJODhkuAbQjD5v/b8w/TCNLX+kMxone0f0k0/XJleT7nieJQfNKru sQ9ln9uQTfWCr5pE/bMlB/Aqoa6EHghohhZljgzV8oipaLCJxMyGdmgVbWV87SLw AUOl7+c37P8Pa4yiaxzPNkPbauqFM4+A3eUwOyDd7nLuMgm8ay6TKRoniU3GFkzq MGNyWK9znW6p5Yb/hfto6jnmki+AYCA= -----END CERTIFICATE-----Generated at Wed Jul 9 13:40:22 2025 by rpki-client