$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5055ae96-4315-352c-86a6-4d187a283660.roa File: 5055ae96-4315-352c-86a6-4d187a283660.roa (raw, json) Hash identifier: GT25qafwkxx1Xp/qZMNp/tmslyNREnLtNpNO5Z6uJa4= Subject key identifier: 70:A1:46:DA:48:29:5E:C6:43:7D:06:B7:3F:8B:40:52:1A:FF:76:63 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765DE69D6BCFD461F3CCB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5055ae96-4315-352c-86a6-4d187a283660.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 98.23.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:de:69:d6:bc:fd:46:1f:3c:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=5a4f7ec2-6954-476b-8aba-94966d728420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:4b:c8:d9:bf:26:39:18:ad:d6:73:23:7e: 7b:fd:3e:cb:ed:66:49:b5:99:8c:8f:31:2c:e6:44: 11:14:64:a0:ec:68:5e:45:96:72:21:de:76:04:11: 0d:ab:3f:4b:05:d5:6a:bf:93:51:0e:e9:21:27:05: fd:20:4f:01:aa:22:4d:17:a0:25:fe:8a:b8:9e:e5: 80:25:2e:e2:e5:f9:97:6e:59:46:1b:d2:0d:4f:59: ca:36:ec:5c:46:06:c6:cf:70:3b:bb:c1:2e:39:7c: 2f:28:8a:66:e6:3c:c6:5e:e6:fd:b2:31:65:f8:ec: f9:ab:4f:61:8e:be:a2:3f:1b:d4:b3:95:84:92:d5: a4:c1:62:16:85:ff:42:2d:9c:be:11:67:8f:46:29: fb:96:d5:a6:83:1f:a0:b9:4a:42:a4:f5:39:8b:89: c4:97:1d:27:4d:1d:f6:ec:6e:16:0c:02:37:86:d8: 16:5d:df:83:82:70:74:aa:63:ca:6b:62:f1:b9:12: b6:42:17:f0:9c:fa:e7:63:22:c2:e0:27:15:46:f4: 45:65:47:14:21:e4:ec:73:3f:33:06:23:eb:d6:18: d8:8e:18:d9:1c:7d:3e:f0:e0:72:53:c1:12:55:74: 51:10:93:4c:f3:fc:6a:53:13:aa:44:d9:35:38:d3: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:46:DA:48:29:5E:C6:43:7D:06:B7:3F:8B:40:52:1A:FF:76:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5055ae96-4315-352c-86a6-4d187a283660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:12:b3:76:d5:f5:c9:97:83:c4:52:e9:1a:55:50:23:6b:af: 3c:33:70:3b:59:9e:da:b9:54:36:11:33:a4:65:9a:ff:9f:ad: 23:bc:ab:32:9b:6f:66:ee:01:af:8b:3c:20:88:f4:91:cf:e3: bd:1d:8d:fd:18:4d:db:63:ad:0a:e5:5b:b7:ff:fe:42:de:74: cc:72:44:2e:ca:9b:55:29:f3:87:35:2b:dc:f9:67:6c:e7:9a: 8d:b8:74:b6:8e:a6:b0:dc:63:7d:8c:1b:99:45:d9:fa:ac:52: f4:19:bf:63:37:50:6c:36:22:ad:ae:97:03:02:dd:1d:d9:06: cc:c6:7e:01:f4:2e:48:14:22:cd:80:09:a2:13:4e:cb:78:33: 00:86:ee:69:ae:4c:23:7a:25:a6:42:4d:ad:9f:a1:8e:cd:35: 09:62:2e:24:1e:f2:f4:42:c6:f4:36:ae:f0:a7:84:68:1d:a3: 5f:4f:b6:b7:a0:d2:9b:fb:41:f2:fc:18:0c:c8:dc:e5:f7:47: 90:b1:90:5f:60:57:c1:ba:d7:16:40:ed:d7:47:76:89:4b:b6: bd:88:4a:60:51:9d:5a:26:6d:c0:b5:be:35:5b:e2:1b:f9:e3: 65:45:5f:d5:46:24:4e:94:f7:b0:ba:20:9e:8d:62:79:0b:33: 4d:6c:c4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZd5p1rz9Rh88ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NWE0ZjdlYzItNjk1NC00NzZiLThhYmEtOTQ5NjZkNzI4NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokRLyNm/JjkYrdZzI357/T7L7WZJtZmMjzEs 5kQRFGSg7GheRZZyId52BBENqz9LBdVqv5NRDukhJwX9IE8BqiJNF6Al/oq4nuWA JS7i5fmXbllGG9INT1nKNuxcRgbGz3A7u8EuOXwvKIpm5jzGXub9sjFl+Oz5q09h jr6iPxvUs5WEktWkwWIWhf9CLZy+EWePRin7ltWmgx+guUpCpPU5i4nElx0nTR32 7G4WDAI3htgWXd+DgnB0qmPKa2LxuRK2QhfwnPrnYyLC4CcVRvRFZUcUIeTscz8z BiPr1hjYjhjZHH0+8OByU8ESVXRREJNM8/xqUxOqRNk1ONPXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHChRtpIKV7GQ30Gtz+LQFIa/3ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA1NWFlOTYtNDMxNS0z NTJjLTg2YTYtNGQxODdhMjgzNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcSs3bV9cmXg8RS6RpVUCNrrzwzcDtZntq5VDYRM6Rlmv+frSO8qzKb b2buAa+LPCCI9JHP470djf0YTdtjrQrlW7f//kLedMxyRC7Km1Up84c1K9z5Z2zn mo24dLaOprDcY32MG5lF2fqsUvQZv2M3UGw2Iq2ulwMC3R3ZBszGfgH0LkgUIs2A CaITTst4MwCG7mmuTCN6JaZCTa2foY7NNQliLiQe8vRCxvQ2rvCnhGgdo19Ptreg 0pv7QfL8GAzI3OX3R5CxkF9gV8G61xZA7ddHdolLtr2ISmBRnVombcC1vjVb4hv5 42VFX9VGJE6U97C6IJ6NYnkLM01sxEc= -----END CERTIFICATE-----Generated at Tue Jul 1 07:43:26 2025 by rpki-client