$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa File: 37e2a1fd-6045-3704-9912-f89b40158f53.roa (raw, json) Hash identifier: LzFMuPPkUdKcLcmbsPdZyNCeRkKWrBjGBcOQ0QQXv7E= Subject key identifier: BA:DC:F0:E8:B5:17:C9:A3:27:C5:DD:B4:78:A9:6A:C9:B1:C3:AA:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707A10E59FAFCCE790EF10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.20.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7a:10:e5:9f:af:cc:e7:90:ef:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=9f7b1c2a-aa0c-4ea8-9f0a-c0f7e86019c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:5e:bf:63:e1:67:e0:ae:64:7f:57:fd:33: 36:74:1f:cd:d2:88:2e:a3:21:43:f3:4a:a7:d8:5f: 16:fc:10:f7:75:56:9d:2e:62:f8:52:a0:c9:7c:f8: 8b:08:aa:1a:21:97:d8:2d:97:1d:94:fc:b4:82:99: 3c:d7:19:0d:c9:52:48:b0:a9:d7:12:08:6e:fe:12: ef:b4:45:6f:ea:ee:46:8f:44:54:69:d8:43:10:8c: af:05:61:f7:ee:a1:ec:94:3b:48:6e:f6:fd:b9:46: 14:b2:f3:ad:da:52:0f:f6:2e:fd:4e:2c:b0:13:e8: 99:9b:ae:a9:66:b9:8e:5e:87:6b:77:ba:bc:97:2a: 0b:4a:9f:0b:a9:92:ea:e1:09:e9:4d:ef:58:09:8d: 1c:4f:07:fa:d5:31:47:b2:8d:98:90:2d:6f:c3:34: 15:0e:54:20:0a:c4:28:e4:f2:19:5b:37:cf:00:88: cb:7c:27:08:fd:d2:05:85:45:21:e6:fa:aa:d2:bc: 39:f2:0f:d9:5e:a7:dc:f3:6d:4c:84:88:92:65:1b: 35:b5:02:05:b4:89:96:84:af:ea:45:78:09:fb:e1: 13:f4:9d:45:d6:76:be:3b:45:96:9a:f0:0f:2a:88: 78:15:c2:da:25:73:c7:46:fe:73:0c:d5:f7:57:44: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DC:F0:E8:B5:17:C9:A3:27:C5:DD:B4:78:A9:6A:C9:B1:C3:AA:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:fc:96:94:03:8d:7f:c2:d7:f6:e4:7e:44:b0:15:96:2a:4d: 7a:78:cb:cf:b2:75:78:ea:67:fe:37:b9:ca:ee:90:7b:40:7e: d8:86:d0:e4:b4:19:9e:ab:e9:2d:11:6a:b1:1f:7e:e4:ab:00: 13:f9:eb:fe:75:aa:01:94:0f:84:df:f5:14:c3:0c:f3:bb:11: 1d:07:7f:b0:39:14:60:b4:87:ce:25:13:4b:89:46:42:2a:44: f6:e1:7d:63:bc:8a:0f:bf:92:7c:06:ed:84:9c:84:a8:72:18: 4f:4b:ed:ea:9b:21:ba:f7:08:dd:dc:d4:11:55:06:49:bd:c7: 38:81:0f:94:cb:2b:34:03:66:33:f3:bf:cb:75:0c:7b:0e:20: 75:f2:44:e1:dc:4a:a2:1a:2b:b6:a6:a2:c1:2c:a8:e2:31:cc: 18:50:cd:f7:3a:8e:c1:cc:8b:b8:65:aa:24:a3:a4:92:8b:93: 60:b8:99:e4:b1:ae:5a:08:46:09:e3:62:c2:b5:1d:3d:6c:7c: 3a:2d:84:be:0a:81:b5:3b:13:30:7d:9f:bb:7a:02:fe:72:be: 1d:cf:da:06:57:3e:bb:61:03:81:5b:be:29:3b:2c:72:c6:ae: 55:8f:04:7e:a0:db:1a:4a:cc:e8:45:32:80:d1:9e:05:df:d9: f1:39:d1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHoQ5Z+vzOeQ7xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWY3YjFjMmEtYWEwYy00ZWE4LTlmMGEtYzBmN2U4NjAxOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRJev2PhZ+CuZH9X/TM2dB/N0oguoyFD80qn 2F8W/BD3dVadLmL4UqDJfPiLCKoaIZfYLZcdlPy0gpk81xkNyVJIsKnXEghu/hLv tEVv6u5Gj0RUadhDEIyvBWH37qHslDtIbvb9uUYUsvOt2lIP9i79TiywE+iZm66p ZrmOXodrd7q8lyoLSp8LqZLq4QnpTe9YCY0cTwf61TFHso2YkC1vwzQVDlQgCsQo 5PIZWzfPAIjLfCcI/dIFhUUh5vqq0rw58g/ZXqfc821MhIiSZRs1tQIFtImWhK/q RXgJ++ET9J1F1na+O0WWmvAPKoh4FcLaJXPHRv5zDNX3V0TCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrc8Oi1F8mjJ8XdtHipasmxw6oKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdlMmExZmQtNjA0NS0z NzA0LTk5MTItZjg5YjQwMTU4ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL8lpQDjX/C1/bkfkSwFZYqTXp4y8+ydXjqZ/43ucrukHtAftiG0OS0 GZ6r6S0RarEffuSrABP56/51qgGUD4Tf9RTDDPO7ER0Hf7A5FGC0h84lE0uJRkIq RPbhfWO8ig+/knwG7YSchKhyGE9L7eqbIbr3CN3c1BFVBkm9xziBD5TLKzQDZjPz v8t1DHsOIHXyROHcSqIaK7amosEsqOIxzBhQzfc6jsHMi7hlqiSjpJKLk2C4meSx rloIRgnjYsK1HT1sfDothL4KgbU7EzB9n7t6Av5yvh3P2gZXPrthA4Fbvik7LHLG rlWPBH6g2xpKzOhFMoDRngXf2fE50Sw= -----END CERTIFICATE-----Generated at Tue Jul 1 18:29:00 2025 by rpki-client