$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa File: 4c5f2c02-022b-371a-8966-9ae694c3b539.roa (raw, json) Hash identifier: J0IT/Qt7wTDAvj4eT2J10vpC7o4dLlS17e8Xk4beq0g= Subject key identifier: EE:73:3C:94:E5:72:59:54:59:65:11:C5:56:FF:34:CA:50:E0:FD:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497079EEC8093910EC3AB400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.20.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:79:ee:c8:09:39:10:ec:3a:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=20433c0f-4b68-4808-bbf8-c4998f1d73e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:16:2c:bd:72:c8:c1:e7:44:c1:75:0f:10: 2f:24:f4:70:65:d8:bd:ee:73:40:65:cb:51:92:c1: 8e:80:46:0f:70:36:ae:33:7f:34:83:c3:70:a3:49: 84:e9:1b:bc:3e:e0:f1:6b:c6:50:42:77:ad:af:62: c5:82:bc:3e:ca:18:bf:15:00:b6:68:d0:64:7b:f1: d1:2d:7d:ee:8c:da:d1:58:25:75:ab:ee:81:ba:0e: 0f:81:94:28:75:5d:79:c4:5f:59:69:4f:62:a9:00: fa:c3:69:07:28:17:62:22:0f:c7:a2:b1:0c:7d:44: f9:47:d1:c4:57:3f:dd:35:1e:0d:23:7e:00:9e:88: eb:90:7c:c3:23:09:bd:70:64:d0:6e:6e:af:fb:13: bd:10:d0:9d:c4:fc:8a:84:36:f5:f1:26:9e:02:f3: 0e:65:bb:6c:c9:d2:01:19:7a:f1:2b:20:77:62:6d: 71:cf:c9:3f:79:36:75:10:0e:08:2c:02:81:44:65: ed:7b:f9:6f:0e:be:84:d6:86:1c:dc:25:26:11:cd: a0:11:2e:89:6e:63:10:53:fb:70:75:b5:f6:2d:f4: 36:42:84:99:1a:ec:b1:eb:23:68:ff:1c:04:2e:ec: df:c6:ec:2c:b8:be:09:8f:b2:c0:52:6c:6d:a0:39: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:3C:94:E5:72:59:54:59:65:11:C5:56:FF:34:CA:50:E0:FD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3c:61:67:f5:55:fd:97:67:b8:0c:91:68:9b:fc:61:90:17: 6b:72:e2:fa:74:2b:61:af:db:3c:fe:ad:3c:fb:6b:96:fd:b2: db:a3:30:73:cc:00:2f:73:be:82:93:02:46:e2:70:6f:ce:cf: 84:04:ac:64:47:d2:dd:7a:dc:d0:4b:67:2b:c7:e3:08:b7:dd: c9:ff:ed:06:02:59:e4:ab:96:ae:79:5a:6c:3a:0f:5b:47:b0: 95:b6:0f:93:21:17:7b:25:0a:fc:50:ec:2c:bd:9b:c5:3c:e3: 67:8f:2c:2c:4e:0a:4e:32:cb:e9:49:85:97:32:b7:45:4d:60: 9d:d8:30:5a:2f:03:a0:c4:cb:28:13:0f:85:15:f0:8a:92:bf: 16:1d:f3:50:f4:73:50:e9:a6:bd:0e:cd:4b:e1:2a:9b:3b:e7: a0:1c:f1:e8:0d:51:00:f8:e4:2a:d8:20:1b:23:dd:de:e5:50: 9f:9d:f2:77:40:69:f6:12:0f:00:7a:34:aa:32:05:42:7b:5b: b4:d0:c7:f0:12:2f:79:cb:a2:d3:08:00:ef:ff:84:ab:d5:7f: 6b:8c:4a:1b:6e:a9:56:f1:40:61:29:db:39:de:6d:a3:ad:b5: 07:78:8a:8e:70:2e:8c:45:f4:b6:ed:11:c4:11:38:0c:87:b3: 9d:bb:51:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHnuyAk5EOw6tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjA0MzNjMGYtNGI2OC00ODA4LWJiZjgtYzQ5OThmMWQ3M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHkWLL1yyMHnRMF1DxAvJPRwZdi97nNAZctR ksGOgEYPcDauM380g8Nwo0mE6Ru8PuDxa8ZQQnetr2LFgrw+yhi/FQC2aNBke/HR LX3ujNrRWCV1q+6Bug4PgZQodV15xF9ZaU9iqQD6w2kHKBdiIg/HorEMfUT5R9HE Vz/dNR4NI34AnojrkHzDIwm9cGTQbm6v+xO9ENCdxPyKhDb18SaeAvMOZbtsydIB GXrxKyB3Ym1xz8k/eTZ1EA4ILAKBRGXte/lvDr6E1oYc3CUmEc2gES6JbmMQU/tw dbX2LfQ2QoSZGuyx6yNo/xwELuzfxuwsuL4Jj7LAUmxtoDneQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5zPJTlcllUWWURxVb/NMpQ4P1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM1ZjJjMDItMDIyYi0z NzFhLTg5NjYtOWFlNjk0YzNiNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB88YWf1Vf2XZ7gMkWib/GGQF2ty4vp0K2Gv2zz+rTz7a5b9stujMHPM AC9zvoKTAkbicG/Oz4QErGRH0t163NBLZyvH4wi33cn/7QYCWeSrlq55Wmw6D1tH sJW2D5MhF3slCvxQ7Cy9m8U842ePLCxOCk4yy+lJhZcyt0VNYJ3YMFovA6DEyygT D4UV8IqSvxYd81D0c1Dppr0OzUvhKps756Ac8egNUQD45CrYIBsj3d7lUJ+d8ndA afYSDwB6NKoyBUJ7W7TQx/ASL3nLotMIAO//hKvVf2uMShtuqVbxQGEp2znebaOt tQd4io5wLoxF9LbtEcQROAyHs527Ubw= -----END CERTIFICATE-----Generated at Tue Jul 1 20:24:47 2025 by rpki-client