$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa File: 650f609a-46ec-31db-af26-e52181428728.roa (raw, json) Hash identifier: S2zt0l7zLfN68rx3qkZlKUpDW0nLayOKLe/Amlnb4yo= Subject key identifier: D8:15:1A:6B:F5:4F:78:DF:F9:80:13:EE:67:3A:33:21:03:66:F2:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A35E593113D7B78E3146E6180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.22.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:93:11:3d:7b:78:e3:14:6e:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=082ecd32-4b6c-47f4-8257-44fa1492b27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e8:f1:5e:11:47:bf:de:c4:f3:e5:2a:30:93: b5:9e:c8:ba:06:3a:7b:89:06:31:82:ed:94:f6:2c: 35:09:2b:27:8b:8d:7b:b8:ce:70:4b:9a:56:ca:2c: 4e:cb:96:80:d3:46:87:a0:88:d3:b2:4b:df:4f:5f: 33:d2:80:d5:12:8c:f0:c5:80:f1:2b:94:32:6a:b9: 85:51:6b:fc:d8:08:1d:18:ad:ee:35:dd:22:6a:6e: db:74:f7:67:59:90:db:3f:1b:b7:fb:c2:4e:7e:08: 2e:cd:d1:17:a7:f9:bf:71:94:dc:f8:da:b0:47:e7: 61:e3:a1:3c:2c:fa:b6:97:b5:27:03:7c:01:5e:1f: 2f:f0:eb:ca:88:65:6c:a8:93:21:4d:5a:9c:e2:cf: de:e1:0e:a1:af:41:f6:87:f7:06:69:73:e2:86:5e: 6b:42:ed:e8:89:bf:67:a1:10:5d:f0:56:b8:61:cb: b0:79:d9:b0:bd:30:cb:bc:d4:97:6f:83:fa:a6:21: f2:10:9a:e5:dc:f1:a9:84:75:c5:1a:57:1f:ee:19: 1c:c3:9c:fd:87:d2:4f:15:e2:79:1d:67:a5:ff:6b: 7f:94:3c:69:2b:9a:1e:0b:46:60:36:ee:13:af:cc: 34:c7:b8:c2:06:31:bb:11:80:95:10:eb:cd:88:64: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:1A:6B:F5:4F:78:DF:F9:80:13:EE:67:3A:33:21:03:66:F2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cf:02:ca:71:4f:f7:01:04:fb:69:eb:bd:4b:cc:0b:38:21: c3:41:01:d9:50:96:c5:5c:af:19:4b:c6:38:ad:d3:e9:d9:48: 99:6b:8a:d2:22:73:95:c7:42:9a:8c:18:b6:94:ae:b3:f3:e4: e4:8b:df:17:14:29:30:18:38:30:0c:87:2a:0d:a9:30:50:c3: e4:d3:9e:be:d0:ce:af:84:40:1c:e7:38:4b:e7:e9:48:87:23: df:9c:02:44:5b:19:88:7e:d5:31:88:e5:95:2b:36:90:05:41: bb:06:ba:39:c8:b8:46:3f:bc:44:40:e0:bd:ff:ca:0a:c2:40: 29:3e:42:8b:90:8f:c6:79:69:26:7a:fb:69:68:75:06:c8:11: 8d:48:9e:f2:da:31:59:0a:fe:18:02:4c:89:e4:b4:8d:29:38: 8e:2e:07:82:6b:e5:ce:7c:fe:bd:05:35:7e:58:00:e6:c6:f8: 20:10:85:55:1d:51:5e:46:8e:d5:34:2a:54:8e:df:7b:5d:0a: 40:5b:ef:9a:df:d8:37:02:df:1c:dd:78:a2:3f:91:2b:dd:42: 34:92:35:36:e8:57:8c:25:50:7b:19:bb:ad:f7:c5:c2:58:d9: f0:69:72:54:05:e0:4d:66:09:cf:b1:b2:2d:e1:54:d5:d3:a8: 65:65:18:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15ZMRPXt44xRuYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk MDgyZWNkMzItNGI2Yy00N2Y0LTgyNTctNDRmYTE0OTJiMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgujxXhFHv97E8+UqMJO1nsi6Bjp7iQYxgu2U 9iw1CSsni417uM5wS5pWyixOy5aA00aHoIjTskvfT18z0oDVEozwxYDxK5QyarmF UWv82AgdGK3uNd0iam7bdPdnWZDbPxu3+8JOfgguzdEXp/m/cZTc+NqwR+dh46E8 LPq2l7UnA3wBXh8v8OvKiGVsqJMhTVqc4s/e4Q6hr0H2h/cGaXPihl5rQu3oib9n oRBd8Fa4YcuwedmwvTDLvNSXb4P6piHyEJrl3PGphHXFGlcf7hkcw5z9h9JPFeJ5 HWel/2t/lDxpK5oeC0ZgNu4Tr8w0x7jCBjG7EYCVEOvNiGQT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgVGmv1T3jf+YAT7mc6MyEDZvLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjUwZjYwOWEtNDZlYy0z MWRiLWFmMjYtZTUyMTgxNDI4NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLPAspxT/cBBPtp671LzAs4IcNBAdlQlsVcrxlLxjit0+nZSJlritIi c5XHQpqMGLaUrrPz5OSL3xcUKTAYODAMhyoNqTBQw+TTnr7Qzq+EQBznOEvn6UiH I9+cAkRbGYh+1TGI5ZUrNpAFQbsGujnIuEY/vERA4L3/ygrCQCk+QouQj8Z5aSZ6 +2lodQbIEY1InvLaMVkK/hgCTInktI0pOI4uB4Jr5c58/r0FNX5YAObG+CAQhVUd UV5GjtU0KlSO33tdCkBb75rf2DcC3xzdeKI/kSvdQjSSNTboV4wlUHsZu633xcJY 2fBpclQF4E1mCc+xsi3hVNXTqGVlGGk= -----END CERTIFICATE-----Generated at Mon Jun 30 21:07:37 2025 by rpki-client