$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa File: 38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa (raw, json) Hash identifier: 42ev2U9zmDpLPjmzLPQwku4n/s+RJjiwKoXzcNYwHd8= Subject key identifier: C0:0A:97:57:B5:26:E7:B1:C0:DA:B0:B5:39:B1:9E:A7:41:97:75:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707A4E2DC8B37F68368C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7a:4e:2d:c8:b3:7f:68:36:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=0b68f22f-79c8-41de-a466-6e830a2ac01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:11:b2:78:2e:aa:1f:7b:6d:ec:e0:ea:4f: b2:1e:f1:55:4d:c7:e6:cd:a7:93:1d:1e:05:7b:f5: 36:b3:d4:16:1f:dd:e6:f0:9e:7f:e5:91:49:66:fe: 22:ac:fe:a6:f1:28:77:79:77:85:0b:af:b0:65:16: 2e:30:ce:df:74:54:53:d9:4e:16:53:b9:0b:2e:9d: 05:cf:81:39:8f:6a:11:ff:c6:d8:1c:b5:82:31:47: 56:75:c7:99:cf:88:c7:73:50:91:c2:7a:e4:24:0b: 97:28:11:7f:75:c8:18:d6:e9:a7:c6:13:94:21:b3: bc:ae:9b:46:7e:af:14:2e:75:99:50:aa:ff:61:e2: 14:a6:0e:f6:c9:cb:21:42:03:ee:be:31:0f:4d:86: dc:e4:5a:33:15:68:97:48:c2:66:2b:df:62:9e:ba: 84:fa:c3:46:48:2d:96:5a:24:09:93:b0:1a:48:7c: 19:1f:13:71:ec:16:d3:50:fe:71:e4:3c:31:56:00: ee:3d:f7:04:91:31:c1:97:19:60:33:27:f4:dd:b5: 3d:7f:6f:f4:46:e8:62:d0:b1:45:87:33:6c:3b:7b: f2:a6:ea:fc:a6:f1:fd:25:ff:07:27:4f:9c:aa:66: b9:7f:2f:77:53:67:90:bf:c0:40:77:ee:44:71:13: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0A:97:57:B5:26:E7:B1:C0:DA:B0:B5:39:B1:9E:A7:41:97:75:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f9:be:9c:9b:75:3c:7a:b4:9b:9f:b0:50:fb:db:01:ac:f2: 8f:a7:52:ff:38:8e:22:90:cd:e1:c1:05:96:e7:0e:87:36:b6: 28:b8:11:c8:d9:bd:e9:aa:64:fa:e1:64:94:86:1e:15:f4:41: 87:2d:a1:96:33:64:26:34:ff:b1:24:86:6d:9f:01:10:a3:dc: f3:c0:12:4f:ed:bd:22:11:89:d4:b1:a4:eb:6a:0c:fa:a8:d0: 2c:c1:46:8c:22:b9:66:a3:fc:37:6e:c9:9a:85:15:21:e2:84: 6e:7e:25:83:58:c6:25:0f:f8:4e:ff:46:67:9b:7d:93:bb:68: 92:6c:6c:35:8e:c3:9f:fd:95:7f:d2:09:6d:f0:9a:25:6f:ef: ce:80:dc:f1:8c:a0:ed:bf:ea:10:3c:f1:1a:6f:6a:6c:a8:5f: 66:c1:09:81:c2:aa:d0:16:b6:8a:32:48:36:3c:32:fb:7d:4f: 4e:ad:15:8b:69:a2:61:41:cf:39:97:b2:4c:5d:0a:6f:99:f5: 1a:36:f0:98:a6:75:8f:86:08:f2:3f:d7:ff:3d:18:f0:8c:21: b1:0a:05:ad:56:b4:5f:6a:41:80:de:c0:fd:75:b0:1e:fa:a8: 04:ca:db:40:10:b2:c7:47:0d:91:12:2f:21:38:bd:a0:d3:25: 8d:fd:74:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHpOLcizf2g2jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MGI2OGYyMmYtNzljOC00MWRlLWE0NjYtNmU4MzBhMmFjMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/YRsnguqh97bezg6k+yHvFVTcfmzaeTHR4F e/U2s9QWH93m8J5/5ZFJZv4irP6m8Sh3eXeFC6+wZRYuMM7fdFRT2U4WU7kLLp0F z4E5j2oR/8bYHLWCMUdWdceZz4jHc1CRwnrkJAuXKBF/dcgY1umnxhOUIbO8rptG fq8ULnWZUKr/YeIUpg72ycshQgPuvjEPTYbc5FozFWiXSMJmK99inrqE+sNGSC2W WiQJk7AaSHwZHxNx7BbTUP5x5DwxVgDuPfcEkTHBlxlgMyf03bU9f2/0Ruhi0LFF hzNsO3vypur8pvH9Jf8HJ0+cqma5fy93U2eQv8BAd+5EcRNsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAKl1e1JuexwNqwtTmxnqdBl3VhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhmZTgzZTgtMmJhMC0z ZDkyLWJlZTMtMjliYjIwN2E5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH5vpybdTx6tJufsFD72wGs8o+nUv84jiKQzeHBBZbnDoc2tii4EcjZ vemqZPrhZJSGHhX0QYctoZYzZCY0/7Ekhm2fARCj3PPAEk/tvSIRidSxpOtqDPqo 0CzBRowiuWaj/DduyZqFFSHihG5+JYNYxiUP+E7/RmebfZO7aJJsbDWOw5/9lX/S CW3wmiVv786A3PGMoO2/6hA88RpvamyoX2bBCYHCqtAWtooySDY8Mvt9T06tFYtp omFBzzmXskxdCm+Z9Ro28JimdY+GCPI/1/89GPCMIbEKBa1WtF9qQYDewP11sB76 qATK20AQssdHDZESLyE4vaDTJY39dCA= -----END CERTIFICATE-----Generated at Sun Jun 29 09:26:33 2025 by rpki-client