$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f26b341-b3c0-37ac-bd5f-385797b89f42.roa File: 0f26b341-b3c0-37ac-bd5f-385797b89f42.roa (raw, json) Hash identifier: YgeOfjupc2QkZcx6iQnPWWBLhqoLFUGJASzG0dgQzsM= Subject key identifier: 00:C7:2A:5F:A0:A7:DA:3C:28:DC:51:AF:EC:D3:CC:CC:BC:CE:6D:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605D0803C343A4FC6D3900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f26b341-b3c0-37ac-bd5f-385797b89f42.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.22.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5d:08:03:c3:43:a4:fc:6d:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=f6363cf3-459c-4c50-b65b-aae2e797709f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:6f:ee:c8:d0:8b:cd:30:fd:9c:2d:73:00: 29:fe:74:30:10:7e:9e:92:a8:a7:b6:6e:72:3d:21: 3b:81:15:24:c9:41:59:55:27:44:77:e0:94:67:7f: 01:ff:17:07:2d:1b:b2:bd:cd:34:f4:cf:f0:6c:92: 3e:5b:bd:a5:37:7d:09:cb:1c:3f:e5:dd:ab:11:ec: f2:ca:25:fa:81:9e:76:6c:38:5a:74:43:46:c5:df: 56:40:00:33:8f:6c:ba:5a:6f:4e:73:08:8a:91:08: 50:b2:94:cb:77:3c:16:f9:0e:11:6f:45:58:15:e2: db:28:78:ba:b2:9e:01:49:54:41:c1:31:f5:d5:f2: 34:77:ec:c2:d4:ff:5b:12:d6:5f:46:79:5c:ed:df: 75:8a:de:fe:fb:29:fb:87:6e:f3:00:3c:5b:5b:e5: ce:14:d5:fa:04:dd:ff:e5:1c:33:5f:e5:9f:48:1f: d9:95:ab:9f:52:94:cd:71:31:24:fd:bf:98:1f:17: 5e:24:8f:9e:bb:97:03:21:27:58:40:7d:4c:56:06: 0c:23:65:ab:3b:ba:c5:e7:be:75:71:b8:6a:04:07: 52:64:97:0b:05:84:54:3c:5d:26:5d:60:eb:d1:2b: 63:7b:80:17:b3:d6:dc:1a:0f:eb:5c:7f:9e:8d:f3: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:2A:5F:A0:A7:DA:3C:28:DC:51:AF:EC:D3:CC:CC:BC:CE:6D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f26b341-b3c0-37ac-bd5f-385797b89f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d5:ef:d9:2e:2b:d1:65:32:69:75:18:55:a3:23:29:50:a5: 31:ab:cb:e1:0d:c6:6b:6f:6e:73:f1:0f:4d:78:9f:59:e0:4f: 38:84:41:41:b3:1b:9f:84:28:dd:ef:10:6e:0d:86:41:17:d6: d6:de:44:d3:b5:41:a4:b8:ad:48:5f:6f:58:d7:63:d9:42:e2: c3:3b:9a:b9:48:f9:a7:6d:69:d5:71:05:f6:81:08:d0:b0:64: 1b:bf:17:ea:07:1d:4b:5c:1e:87:bc:5d:82:50:1d:26:ff:85: d6:89:ca:01:4b:05:72:cc:9c:84:d4:ad:47:0d:f1:64:5c:98: 59:45:35:ba:a1:f2:0a:b3:de:00:cd:f0:ca:93:05:03:19:ac: 4c:ea:b9:e1:2a:00:fa:9a:10:d2:2b:e4:92:77:b6:48:e5:4b: e2:ed:b5:46:10:6f:57:22:0e:15:08:30:82:87:06:da:df:a5: 42:c4:6f:28:7e:d3:21:b4:1e:05:47:e9:ac:e2:72:1e:85:db: 29:d9:10:cd:5e:2f:3f:52:f1:72:1d:8b:28:9a:7d:e0:af:ef: f4:c6:26:de:45:e1:86:24:66:bf:8a:f2:66:88:cf:42:13:d0: b6:a9:cf:f2:96:56:aa:02:90:bf:31:9c:e8:68:b5:78:4a:5b: 5d:53:0d:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF0IA8NDpPxtOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjYzNjNjZjMtNDU5Yy00YzUwLWI2NWItYWFlMmU3OTc3MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRhv7sjQi80w/ZwtcwAp/nQwEH6ekqintm5y PSE7gRUkyUFZVSdEd+CUZ38B/xcHLRuyvc009M/wbJI+W72lN30Jyxw/5d2rEezy yiX6gZ52bDhadENGxd9WQAAzj2y6Wm9OcwiKkQhQspTLdzwW+Q4Rb0VYFeLbKHi6 sp4BSVRBwTH11fI0d+zC1P9bEtZfRnlc7d91it7++yn7h27zADxbW+XOFNX6BN3/ 5RwzX+WfSB/ZlaufUpTNcTEk/b+YHxdeJI+eu5cDISdYQH1MVgYMI2WrO7rF5751 cbhqBAdSZJcLBYRUPF0mXWDr0Stje4AXs9bcGg/rXH+ejfPGvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADHKl+gp9o8KNxRr+zTzMy8zm0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGYyNmIzNDEtYjNjMC0z N2FjLWJkNWYtMzg1Nzk3Yjg5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjV79kuK9FlMml1GFWjIylQpTGry+ENxmtvbnPxD014n1ngTziEQUGz G5+EKN3vEG4NhkEX1tbeRNO1QaS4rUhfb1jXY9lC4sM7mrlI+adtadVxBfaBCNCw ZBu/F+oHHUtcHoe8XYJQHSb/hdaJygFLBXLMnITUrUcN8WRcmFlFNbqh8gqz3gDN 8MqTBQMZrEzqueEqAPqaENIr5JJ3tkjlS+LttUYQb1ciDhUIMIKHBtrfpULEbyh+ 0yG0HgVH6azich6F2ynZEM1eLz9S8XIdiyiafeCv7/TGJt5F4YYkZr+K8maIz0IT 0Lapz/KWVqoCkL8xnOhotXhKW11TDS0= -----END CERTIFICATE-----Generated at Wed Jul 2 05:17:01 2025 by rpki-client