$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa File: 44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa (raw, json) Hash identifier: LGvFth0SNgpPavosAOS5gZUycjPflUH4jHw5XwrSsrA= Subject key identifier: E6:A5:00:01:4B:51:AC:C3:13:5A:6D:2A:33:4D:00:77:3E:2F:95:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765D90CAE20853CAD20BE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 98.20.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d9:0c:ae:20:85:3c:ad:20:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=9a8d36aa-0a0c-4dcc-a221-bf758bfb1af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:dd:7e:9a:05:09:94:a5:97:e8:48:39:68: 88:72:24:6d:d3:47:e1:9a:52:99:a8:5e:59:ef:ca: 1a:ac:19:91:c1:02:00:a7:d6:4f:64:c1:05:98:50: 33:ef:02:f7:6d:58:9b:e3:96:a8:6e:a7:bd:18:bf: fd:5a:81:25:c4:81:00:af:a2:7a:66:64:d9:66:2f: ae:23:5a:60:1d:b4:4f:df:bf:c3:33:0a:8f:b9:6f: 93:60:c2:e9:95:c5:7f:b3:ac:5d:48:76:ba:32:96: 1f:72:6f:cf:42:cd:02:48:8f:f7:92:87:b5:ec:d3: 18:13:ba:73:97:82:0f:07:06:ee:de:05:be:13:9e: 97:91:ed:9d:7f:65:15:c7:e8:08:bd:d0:d5:64:dd: 63:85:8e:53:13:02:aa:5f:69:27:91:ae:47:62:74: 87:0b:9f:0c:7e:05:a7:3d:e9:3e:e1:9b:de:c6:cd: ed:10:68:6c:50:c3:76:a4:48:25:11:39:fe:76:2e: 13:62:bc:2a:24:89:50:2b:cb:ed:bb:61:b7:ae:0c: 20:1d:f0:55:80:05:d5:15:d8:de:e1:7e:03:a3:87: 91:66:1a:a4:94:a9:ef:fa:21:7d:23:6a:3d:8a:51: 0d:f9:1b:b3:5a:9b:ac:01:78:43:a3:a1:cc:60:a2: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A5:00:01:4B:51:AC:C3:13:5A:6D:2A:33:4D:00:77:3E:2F:95:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1c:62:bf:d0:75:e9:33:27:e5:f4:a4:40:5a:ab:8d:92:f9: 1f:81:9d:9e:fd:df:f5:f9:6b:01:84:85:18:49:1d:02:aa:2d: 0c:0d:34:fd:40:b1:b7:3f:96:0a:48:48:a4:2b:60:b8:97:8a: f6:0b:9c:20:9c:00:3e:0c:af:77:4c:44:f9:b8:96:5d:d6:86: d8:80:7d:9a:6b:c0:77:9c:e6:d7:0d:cb:12:fb:54:f4:7e:54: 01:ea:6c:2e:ca:9f:94:98:f1:c2:32:aa:aa:7a:b8:7d:4e:78: 4c:80:dd:ea:f9:d4:8f:9f:ee:56:88:30:ef:26:4d:49:27:73: 88:c1:bc:1d:33:a3:4c:2c:5c:80:47:ec:1d:cc:5e:ec:d1:14: fb:1c:bc:a6:65:35:47:cf:7c:8c:c2:69:04:0d:8f:82:14:60: b0:04:42:98:f4:a6:1c:07:bc:74:ca:cc:6a:65:3d:bc:9e:dc: ba:6a:8c:dc:ce:9b:4e:12:47:cf:f0:d4:e8:83:aa:a0:5e:17: 57:a4:78:82:a8:e7:5b:3d:b5:d2:01:bc:d8:90:14:52:16:8a: fb:d1:c1:6e:a6:e1:61:3c:fa:2f:52:8f:e1:db:62:62:8f:35: 9d:27:d0:3f:fe:4e:d9:a4:3c:9c:19:8e:d8:3e:bb:5d:9d:c2: d2:a8:17:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdkMriCFPK0gvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk OWE4ZDM2YWEtMGEwYy00ZGNjLWEyMjEtYmY3NThiZmIxYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDdfpoFCZSll+hIOWiIciRt00fhmlKZqF5Z 78oarBmRwQIAp9ZPZMEFmFAz7wL3bVib45aobqe9GL/9WoElxIEAr6J6ZmTZZi+u I1pgHbRP37/DMwqPuW+TYMLplcV/s6xdSHa6MpYfcm/PQs0CSI/3koe17NMYE7pz l4IPBwbu3gW+E56Xke2df2UVx+gIvdDVZN1jhY5TEwKqX2knka5HYnSHC58MfgWn Pek+4Zvexs3tEGhsUMN2pEglETn+di4TYrwqJIlQK8vtu2G3rgwgHfBVgAXVFdje 4X4Do4eRZhqklKnv+iF9I2o9ilEN+RuzWpusAXhDo6HMYKJIawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOalAAFLUazDE1ptKjNNAHc+L5U8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRkZGYxYWUtNTRhNC0z Mjg5LWEzZDEtNDk3ZTUwY2M2Y2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgcYr/QdekzJ+X0pEBaq42S+R+BnZ793/X5awGEhRhJHQKqLQwNNP1A sbc/lgpISKQrYLiXivYLnCCcAD4Mr3dMRPm4ll3WhtiAfZprwHec5tcNyxL7VPR+ VAHqbC7Kn5SY8cIyqqp6uH1OeEyA3er51I+f7laIMO8mTUknc4jBvB0zo0wsXIBH 7B3MXuzRFPscvKZlNUfPfIzCaQQNj4IUYLAEQpj0phwHvHTKzGplPbye3LpqjNzO m04SR8/w1OiDqqBeF1ekeIKo51s9tdIBvNiQFFIWivvRwW6m4WE8+i9Sj+HbYmKP NZ0n0D/+TtmkPJwZjtg+u12dwtKoFxM= -----END CERTIFICATE-----Generated at Mon Jun 30 23:46:10 2025 by rpki-client