$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa File: 7afb494c-297d-355b-b8e6-fe2ed907780d.roa (raw, json) Hash identifier: b1qpWLrAvKmd7DzeazpM4z5xEho9gpCLUGfkyDmCqJY= Subject key identifier: 28:A1:C6:D1:D2:C0:07:39:A8:9A:70:81:78:9C:69:1C:DF:A1:C0:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497076C67B4C56ED07610F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.17.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:76:c6:7b:4c:56:ed:07:61:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=69eed8eb-7aa6-4bf6-8c03-06e06c23328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:70:67:9b:49:82:b5:d7:15:e9:85:4a:ea: 65:0d:de:e3:62:d6:68:bf:54:38:ca:88:be:76:e0: 77:ca:ee:6d:48:0b:af:99:c1:f3:37:94:9f:6c:88: 2b:96:1b:60:74:f3:a4:05:df:0d:9e:e2:5e:96:61: 40:e4:a0:1a:61:7f:4a:e3:e2:b2:33:e4:a5:3d:aa: 1e:5e:5d:cd:44:fe:91:d5:96:35:98:5c:be:e6:83: 56:83:75:a2:36:cd:d8:46:52:88:90:ba:28:06:ef: ec:a0:3e:e0:f8:43:20:9f:b6:04:d6:24:5e:e2:35: fd:79:cd:ad:80:fe:2c:38:3d:14:d8:86:d9:15:58: f4:eb:a3:72:5b:a0:96:bb:84:b2:f0:13:2d:09:60: c7:5b:bf:e6:51:11:28:ec:ef:2c:95:da:09:e3:2e: 48:4d:f2:a9:08:0a:69:e9:11:16:d7:00:0c:2f:a9: 03:22:d0:57:46:a9:f4:80:dc:00:bf:2a:35:5a:86: 97:5e:43:96:43:76:c7:19:57:45:43:a7:90:9e:53: 82:60:5a:46:96:68:e3:91:73:57:2a:59:c3:bd:92: 6e:a4:9b:44:7a:d0:94:13:d6:56:4b:76:c1:4f:b1: a6:97:76:12:86:e9:fa:42:dc:33:38:d9:5d:75:02: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A1:C6:D1:D2:C0:07:39:A8:9A:70:81:78:9C:69:1C:DF:A1:C0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:44:36:ac:ab:9e:1c:bd:a4:99:dc:f8:ee:60:bc:d0:82:c6: 46:75:fa:09:15:51:a5:b9:4c:5a:50:a3:a3:99:f5:b9:25:64: 79:5c:b4:3d:1e:ad:e9:53:cc:95:0e:d7:b5:62:99:d4:c7:0d: 27:3f:c5:07:61:7a:a7:67:4a:9f:46:b9:65:1b:b9:6c:76:1c: fe:cb:4e:7b:f6:14:4a:ae:71:9b:0e:9d:7b:0e:16:97:42:e7: ab:55:44:2b:68:04:13:82:29:bb:f1:f2:80:62:47:27:61:14: ad:d9:70:e6:79:49:b9:19:d8:2c:f4:4c:78:1f:27:ef:b9:be: 9e:de:e0:a2:a7:ac:b6:bf:80:c3:3a:a8:81:79:86:0b:9a:b6: ab:ef:89:8d:a3:be:cd:c0:cb:f2:a3:0b:85:ba:a5:db:49:16: be:a3:f5:55:97:e1:dc:d1:9a:09:f3:45:81:8f:bc:98:99:0d: b9:42:cb:50:0b:15:28:89:5d:1a:28:26:96:19:28:ea:f2:20: 6b:ac:41:65:35:f6:41:1e:0e:45:d3:a0:8b:87:cf:4a:76:92: 09:3a:0b:9f:fd:cd:05:cc:f5:50:0f:43:f8:00:43:bf:da:64: c9:45:e6:64:d9:4c:11:02:de:28:99:80:6b:23:b4:6a:da:17: c4:19:bf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHbGe0xW7QdhD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjllZWQ4ZWItN2FhNi00YmY2LThjMDMtMDZlMDZjMjMzMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx5wZ5tJgrXXFemFSuplDd7jYtZov1Q4yoi+ duB3yu5tSAuvmcHzN5SfbIgrlhtgdPOkBd8NnuJelmFA5KAaYX9K4+KyM+SlPaoe Xl3NRP6R1ZY1mFy+5oNWg3WiNs3YRlKIkLooBu/soD7g+EMgn7YE1iRe4jX9ec2t gP4sOD0U2IbZFVj066NyW6CWu4Sy8BMtCWDHW7/mUREo7O8sldoJ4y5ITfKpCApp 6REW1wAML6kDItBXRqn0gNwAvyo1WoaXXkOWQ3bHGVdFQ6eQnlOCYFpGlmjjkXNX KlnDvZJupJtEetCUE9ZWS3bBT7Gml3YShun6QtwzONlddQLKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCihxtHSwAc5qJpwgXicaRzfocAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2FmYjQ5NGMtMjk3ZC0z NTViLWI4ZTYtZmUyZWQ5MDc3ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZENqyrnhy9pJnc+O5gvNCCxkZ1+gkVUaW5TFpQo6OZ9bklZHlctD0e relTzJUO17VimdTHDSc/xQdheqdnSp9GuWUbuWx2HP7LTnv2FEqucZsOnXsOFpdC 56tVRCtoBBOCKbvx8oBiRydhFK3ZcOZ5SbkZ2Cz0THgfJ++5vp7e4KKnrLa/gMM6 qIF5hguatqvviY2jvs3Ay/KjC4W6pdtJFr6j9VWX4dzRmgnzRYGPvJiZDblCy1AL FSiJXRooJpYZKOryIGusQWU19kEeDkXToIuHz0p2kgk6C5/9zQXM9VAPQ/gAQ7/a ZMlF5mTZTBEC3iiZgGsjtGraF8QZv6M= -----END CERTIFICATE-----Generated at Sun Jun 29 08:48:44 2025 by rpki-client