$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa File: ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa (raw, json) Hash identifier: yGL/UqYos8rAt7copflcPf4QGfAZUs+8yxWe99coJBk= Subject key identifier: ED:53:78:27:FD:59:B8:7C:10:69:A1:05:16:4A:5D:C1:07:2B:9A:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605FD7592B598609732390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.22.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5f:d7:59:2b:59:86:09:73:23:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=59bac5ef-63c5-4039-bbc8-39d69f71923a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:ed:5f:77:86:69:40:60:a0:da:5f:d4:33: b6:d0:fc:c7:cd:f1:fa:76:01:09:83:5c:19:de:cd: 76:db:fd:a5:75:22:11:b8:64:65:2d:01:31:99:2d: 46:11:8b:23:45:06:fc:e7:29:ad:d4:9b:01:47:ff: 44:a5:53:b2:7e:9d:85:33:f7:bd:94:1b:ca:ed:a6: bd:73:a0:1d:30:2b:f7:8e:58:da:c8:12:3c:c1:d2: 7c:4d:88:fe:85:2b:ac:ac:62:78:e9:e2:fb:85:c7: 8d:f9:71:d0:f5:10:3f:33:de:41:95:d8:bb:3c:75: cb:60:ff:2c:a9:80:c9:dc:e8:06:59:1c:ca:ba:d6: 27:fa:93:cf:54:3e:47:b0:89:f4:37:b2:d1:ba:30: 47:20:c3:1b:6b:f7:d7:d3:57:b4:93:18:ab:88:fb: 79:42:92:5d:50:6c:e2:f1:e1:3c:d5:18:e6:d7:63: 52:a1:63:ee:e1:fc:db:30:ed:b1:9b:dc:e4:25:ae: 08:fb:a9:5b:d0:c4:4c:ff:38:38:51:56:07:98:df: a7:f1:f6:98:1e:1b:c4:94:aa:e2:fe:e9:6f:71:ea: ee:a4:13:fe:36:23:10:a6:8e:a2:6f:15:e1:a2:d4: 49:c4:c8:e3:30:f7:04:8f:9c:bf:c7:df:72:bf:6f: d0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:53:78:27:FD:59:B8:7C:10:69:A1:05:16:4A:5D:C1:07:2B:9A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b9:b5:c4:c6:22:cf:b7:b6:e1:1b:f0:f0:c4:9a:23:ac:1d: b7:ec:03:96:ff:14:71:df:98:f0:43:f6:87:5f:6b:e4:b6:cc: cb:1e:55:70:1f:95:38:c9:d7:a1:95:68:63:1c:67:a5:64:dd: 13:1f:c9:13:62:76:31:28:2f:c0:e4:67:f8:17:86:f8:f6:cf: 4f:ae:9e:21:a5:ed:1a:e5:d7:d9:54:56:48:6b:b8:5d:08:e9: 48:d1:f5:0b:b5:87:64:36:27:cf:29:ee:55:bb:a4:fa:c4:53: e7:ab:dc:11:d5:c4:02:01:c2:38:f4:8e:56:56:45:f0:30:20: 66:f2:2e:e4:ef:74:99:78:a5:85:05:b0:6a:ce:ce:82:47:2d: b7:3b:d0:09:c6:00:dc:b8:b1:62:41:ee:e1:20:c2:44:31:38: 7a:26:a9:a9:e5:40:3f:5a:31:c6:34:f7:c3:80:37:d8:20:6b: b6:a5:df:b8:35:21:96:25:a9:bf:17:58:37:1d:f3:fb:b0:fe: fe:7b:20:b4:e2:31:7b:7b:22:bf:f6:d4:74:a5:4c:2a:8e:75: 63:77:f1:53:43:88:4c:ac:ad:5c:54:66:ab:06:8b:e2:3c:42: 30:40:1a:ee:d3:83:2f:9c:8f:ac:72:2d:c7:2d:1d:10:0b:bd: f2:46:4d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF/XWStZhglzI5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NTliYWM1ZWYtNjNjNS00MDM5LWJiYzgtMzlkNjlmNzE5MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDtX3eGaUBgoNpf1DO20PzHzfH6dgEJg1wZ 3s122/2ldSIRuGRlLQExmS1GEYsjRQb85ymt1JsBR/9EpVOyfp2FM/e9lBvK7aa9 c6AdMCv3jljayBI8wdJ8TYj+hSusrGJ46eL7hceN+XHQ9RA/M95Bldi7PHXLYP8s qYDJ3OgGWRzKutYn+pPPVD5HsIn0N7LRujBHIMMba/fX01e0kxiriPt5QpJdUGzi 8eE81Rjm12NSoWPu4fzbMO2xm9zkJa4I+6lb0MRM/zg4UVYHmN+n8faYHhvElKri /ulvcerupBP+NiMQpo6ibxXhotRJxMjjMPcEj5y/x99yv2/QpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1TeCf9Wbh8EGmhBRZKXcEHK5owMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWM2NWVkZmEtYjU0YS0z N2JjLTg1NTctMjcxYTA2ZWQ5Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG5tcTGIs+3tuEb8PDEmiOsHbfsA5b/FHHfmPBD9odfa+S2zMseVXAf lTjJ16GVaGMcZ6Vk3RMfyRNidjEoL8DkZ/gXhvj2z0+uniGl7Rrl19lUVkhruF0I 6UjR9Qu1h2Q2J88p7lW7pPrEU+er3BHVxAIBwjj0jlZWRfAwIGbyLuTvdJl4pYUF sGrOzoJHLbc70AnGANy4sWJB7uEgwkQxOHomqanlQD9aMcY098OAN9gga7al37g1 IZYlqb8XWDcd8/uw/v57ILTiMXt7Ir/21HSlTCqOdWN38VNDiEysrVxUZqsGi+I8 QjBAGu7Tgy+cj6xyLcctHRALvfJGTSE= -----END CERTIFICATE-----Generated at Wed Jul 9 13:14:55 2025 by rpki-client