$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106ea7c4-7ad2-37a9-947f-806b1f686367.roa File: 106ea7c4-7ad2-37a9-947f-806b1f686367.roa (raw, json) Hash identifier: 1Bgatd8mjHmeEa1fuGwqqfM/f4EMYDiCl0NmkNvbH7o= Subject key identifier: 38:E4:98:D9:69:3B:4B:FC:5C:6A:35:84:A3:10:D3:73:3A:E1:F2:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707A71F00B43884198F6A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106ea7c4-7ad2-37a9-947f-806b1f686367.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.22.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7a:71:f0:0b:43:88:41:98:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=0d8eb3c2-79d5-4eb1-b80c-7317d1a884e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:5d:21:39:15:88:6c:e5:00:73:62:b9:ee: b3:72:a4:1b:d8:cb:9f:ae:ca:84:8e:85:6f:13:07: cc:b5:7f:49:96:9d:79:e0:09:c3:16:65:ab:16:cb: 08:52:6a:7e:b0:8d:cf:ff:34:0b:02:60:d4:86:5f: dd:ad:f1:35:48:23:4e:9a:05:d2:cd:e3:6a:38:64: 4b:c3:d6:e1:14:45:fe:77:94:06:80:cd:83:82:cf: 72:ef:3b:71:8b:35:e6:62:d1:b6:e5:5a:57:4b:58: 4d:83:0f:ec:79:14:b3:db:4d:44:aa:30:df:54:89: ba:7f:f7:89:2d:c9:ae:8f:10:3c:3d:04:c3:34:84: fc:7d:94:33:42:ce:43:ad:3b:f8:ff:61:03:36:28: 86:52:52:77:b2:4b:e3:3d:b6:24:05:00:a2:d0:e4: 0d:b5:23:31:86:7d:18:26:0b:25:63:5d:e5:7a:cd: 22:81:35:96:91:42:5a:ea:df:5e:c5:1a:67:0d:02: 35:30:f8:b8:d4:6b:53:77:b7:06:18:d9:49:09:54: 34:3a:ef:52:38:19:b3:8b:aa:86:ae:df:03:03:3e: c6:73:6f:ea:f3:48:d1:9a:fa:c4:ef:ec:04:8b:26: a7:87:e5:f5:ff:e1:1b:17:c5:bf:5c:85:55:db:e8: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E4:98:D9:69:3B:4B:FC:5C:6A:35:84:A3:10:D3:73:3A:E1:F2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106ea7c4-7ad2-37a9-947f-806b1f686367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:46:f0:08:b7:a1:e6:08:23:a8:ae:42:e5:dd:88:5c:99:bd: f8:64:db:f5:12:c8:82:ec:81:f2:04:54:bb:5b:59:fc:92:b7: 36:3e:6c:89:ef:76:19:e4:c4:f3:39:7d:38:5e:29:63:c8:cd: 3b:b6:03:3d:c9:2c:c8:da:10:85:f8:28:e9:36:ae:b6:2f:0f: 7f:c0:a6:a1:df:f1:57:ca:8d:29:67:0a:b9:59:a2:46:bc:f0: 39:2a:21:59:30:eb:61:86:af:ef:6c:6d:36:e9:29:a6:f1:29: a9:da:74:60:86:02:9f:4e:78:bb:c9:25:73:28:82:ef:29:bc: 94:26:a9:cd:8f:c2:2f:fd:47:15:19:10:d7:c1:27:41:32:7d: 45:f1:71:31:8c:9d:2c:b2:25:3e:52:c1:86:ab:eb:09:8c:52: e1:eb:66:f0:58:b2:49:18:b6:99:60:27:c2:6e:fb:26:11:72: 74:de:27:8a:ea:22:f2:45:5a:5d:03:23:72:b4:82:75:51:73: 10:27:de:f1:3c:2a:2c:1a:d8:e3:b6:02:b0:b6:b2:97:11:4b: af:d2:94:3f:12:b9:df:06:33:22:c1:c3:60:af:dd:48:72:c6: e2:25:56:64:0c:4f:e2:aa:ff:87:57:c7:1a:24:91:46:ec:14: e6:74:a4:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHpx8AtDiEGY9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MGQ4ZWIzYzItNzlkNS00ZWIxLWI4MGMtNzMxN2QxYTg4NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3hdITkViGzlAHNiue6zcqQb2MufrsqEjoVv EwfMtX9Jlp154AnDFmWrFssIUmp+sI3P/zQLAmDUhl/drfE1SCNOmgXSzeNqOGRL w9bhFEX+d5QGgM2Dgs9y7ztxizXmYtG25VpXS1hNgw/seRSz201EqjDfVIm6f/eJ LcmujxA8PQTDNIT8fZQzQs5DrTv4/2EDNiiGUlJ3skvjPbYkBQCi0OQNtSMxhn0Y JgslY13les0igTWWkUJa6t9exRpnDQI1MPi41GtTd7cGGNlJCVQ0Ou9SOBmzi6qG rt8DAz7Gc2/q80jRmvrE7+wEiyanh+X1/+EbF8W/XIVV2+i3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjkmNlpO0v8XGo1hKMQ03M64fLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA2ZWE3YzQtN2FkMi0z N2E5LTk0N2YtODA2YjFmNjg2MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENG8Ai3oeYII6iuQuXdiFyZvfhk2/USyILsgfIEVLtbWfyStzY+bInv dhnkxPM5fTheKWPIzTu2Az3JLMjaEIX4KOk2rrYvD3/ApqHf8VfKjSlnCrlZoka8 8DkqIVkw62GGr+9sbTbpKabxKanadGCGAp9OeLvJJXMogu8pvJQmqc2Pwi/9RxUZ ENfBJ0EyfUXxcTGMnSyyJT5SwYar6wmMUuHrZvBYskkYtplgJ8Ju+yYRcnTeJ4rq IvJFWl0DI3K0gnVRcxAn3vE8Kiwa2OO2ArC2spcRS6/SlD8Sud8GMyLBw2Cv3Uhy xuIlVmQMT+Kq/4dXxxokkUbsFOZ0pGM= -----END CERTIFICATE-----Generated at Tue Jul 1 00:58:29 2025 by rpki-client