$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa File: 782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa (raw, json) Hash identifier: v436waWcW7dTzFvy5FbAj0O2zgKJqZuntrraTBJme5g= Subject key identifier: 3A:B2:DE:2C:20:76:D0:C0:A4:43:27:D5:E8:88:CF:B0:8A:D4:46:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497079DF0E226EFD2E5F2F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.20.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:79:df:0e:22:6e:fd:2e:5f:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=9a8f6656-9ad8-4ac5-95d3-cacbeb0aca3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:09:f7:8d:d8:f6:d3:de:7d:ba:ab:39:75: 05:f6:32:24:74:90:d7:af:77:35:25:bb:d5:26:a7: d8:ad:65:f9:fa:b0:ac:da:f1:da:cd:ab:a8:7b:32: 71:ab:29:9c:d3:2e:9a:a1:0c:28:a8:e5:f5:04:1b: 51:fc:86:e6:dd:7a:81:a8:de:05:6b:de:32:16:ef: d7:dd:d5:08:5b:1a:38:71:f5:30:c6:8d:0a:8b:83: 31:ed:cd:33:39:7e:1d:bb:1a:5c:67:35:06:77:32: c1:51:24:31:15:5a:ee:8e:47:cb:07:4a:c7:08:5e: 58:e4:ac:13:58:1f:db:e6:56:5e:d9:87:5a:50:a2: 03:59:a4:85:79:4e:4f:b6:c3:ec:a4:d6:0b:a1:42: 08:78:9a:70:ef:14:ab:80:45:28:01:d1:1a:6f:d8: 95:9a:37:47:e5:08:94:87:d6:49:b3:c6:70:6a:0e: c9:c7:bd:ed:f3:72:03:f6:be:58:3a:9a:07:49:35: d9:fa:58:7f:24:b9:fe:70:ba:6f:32:28:d1:c8:ff: 09:d0:78:0e:ce:f7:2c:2e:05:a3:65:ab:b7:54:4f: ed:15:36:c9:30:fd:b0:19:ef:28:70:7a:f9:4c:9a: b1:39:34:09:33:3e:6f:81:02:f7:e8:91:fa:a1:09: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B2:DE:2C:20:76:D0:C0:A4:43:27:D5:E8:88:CF:B0:8A:D4:46:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/782f70bc-d95c-3a6a-b8aa-0f5357cbd499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f1:07:37:b2:3c:f7:f9:7d:d1:12:26:30:6d:b0:af:43:de: b7:5c:ee:ee:37:07:79:6c:10:4e:30:5b:03:77:8a:35:e6:f2: 6c:f3:4d:c6:3e:48:40:56:7f:61:77:3e:ea:be:d8:96:4f:32: 26:ca:31:cb:4d:a2:22:c7:08:82:92:fd:cf:4d:73:61:c6:d1: 72:8a:f7:ab:45:d4:20:a9:7e:2f:d7:5d:50:a2:f1:06:b4:bc: 5a:d8:14:c5:88:55:34:da:8a:5d:15:8e:8d:fe:88:0f:c2:b5: 83:e4:19:29:b7:7d:5a:87:de:2b:0a:75:97:f8:78:af:18:04: ca:8b:53:ee:fe:ae:ed:1f:29:08:1d:0a:cb:8d:c1:d7:f9:ab: 04:7f:ea:73:32:c4:0a:a6:bb:72:af:d1:f6:44:f5:4d:ec:2a: 7c:87:8f:04:6e:e5:f3:e5:14:9c:a0:dd:5e:42:0a:d1:81:50: 1f:1b:d6:4c:bb:88:e7:d8:7d:29:32:26:b4:97:fa:e7:c9:66: cc:9e:31:8b:6c:98:33:68:c6:70:cc:38:37:f3:37:70:c7:71: ee:44:7c:6e:43:af:8b:67:be:11:80:1e:29:9b:4d:66:42:ee: a7:81:21:cd:e9:55:21:ac:18:1e:2a:c1:a6:64:6f:66:a0:b3: ee:1b:16:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHnfDiJu/S5fLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWE4ZjY2NTYtOWFkOC00YWM1LTk1ZDMtY2FjYmViMGFjYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku8J943Y9tPefbqrOXUF9jIkdJDXr3c1JbvV JqfYrWX5+rCs2vHazauoezJxqymc0y6aoQwoqOX1BBtR/Ibm3XqBqN4Fa94yFu/X 3dUIWxo4cfUwxo0Ki4Mx7c0zOX4duxpcZzUGdzLBUSQxFVrujkfLB0rHCF5Y5KwT WB/b5lZe2YdaUKIDWaSFeU5PtsPspNYLoUIIeJpw7xSrgEUoAdEab9iVmjdH5QiU h9ZJs8Zwag7Jx73t83ID9r5YOpoHSTXZ+lh/JLn+cLpvMijRyP8J0HgOzvcsLgWj Zau3VE/tFTbJMP2wGe8ocHr5TJqxOTQJMz5vgQL36JH6oQnIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqy3iwgdtDApEMn1eiIz7CK1EaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgyZjcwYmMtZDk1Yy0z YTZhLWI4YWEtMGY1MzU3Y2JkNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzxBzeyPPf5fdESJjBtsK9D3rdc7u43B3lsEE4wWwN3ijXm8mzzTcY+ SEBWf2F3Puq+2JZPMibKMctNoiLHCIKS/c9Nc2HG0XKK96tF1CCpfi/XXVCi8Qa0 vFrYFMWIVTTail0Vjo3+iA/CtYPkGSm3fVqH3isKdZf4eK8YBMqLU+7+ru0fKQgd CsuNwdf5qwR/6nMyxAqmu3Kv0fZE9U3sKnyHjwRu5fPlFJyg3V5CCtGBUB8b1ky7 iOfYfSkyJrSX+ufJZsyeMYtsmDNoxnDMODfzN3DHce5EfG5Dr4tnvhGAHimbTWZC 7qeBIc3pVSGsGB4qwaZkb2ags+4bFmA= -----END CERTIFICATE-----Generated at Tue Jul 1 08:58:25 2025 by rpki-client