$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa File: 831a6028-7886-3a30-8cc8-4d6dc7086da1.roa (raw, json) Hash identifier: vlXq/8+sUPsLUxSB5s541eizYbt/RudwiM3DLFF4v8g= Subject key identifier: F2:FE:DC:6A:57:4D:56:30:0C:4D:3B:AA:29:EC:B6:5A:F9:18:89:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA219F440F7535F02BF400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.18.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:21:9f:44:0f:75:35:f0:2b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=5f4d5e5c-c939-4242-ba69-82ec6fd23bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:03:86:c7:b6:79:8c:fa:bf:24:4f:dd:c0:d2: 25:fe:2a:14:3c:90:d7:b3:9f:f1:c3:ac:4a:98:94: 4b:ce:aa:a9:97:3b:80:5b:e1:c7:92:32:77:a5:90: 39:77:9e:ae:12:18:da:2f:d6:1b:73:76:55:08:fb: 1f:40:22:02:86:f1:73:c4:74:88:1e:fa:60:63:8c: 39:37:00:79:2a:8b:65:dd:5f:2f:50:c3:09:fb:a6: 8a:e6:1a:a3:17:4e:1b:c3:10:43:3d:93:e1:89:2f: db:69:3e:2a:54:d5:b4:29:fc:aa:46:a1:74:23:ed: 10:d5:9c:2d:df:30:45:19:17:cc:98:70:52:10:fd: 81:d6:ed:4c:59:48:23:49:15:9e:a7:de:34:54:5b: 39:ae:12:e7:fe:a4:01:6e:42:4d:cf:b0:e8:89:04: 40:00:e6:06:6a:20:fe:68:b9:85:fc:55:15:11:67: 54:f7:03:bf:a2:6c:47:06:b2:36:09:2b:cd:b2:7a: 47:c5:20:07:fd:48:7a:92:45:2e:f3:ca:32:17:be: 5f:6e:64:db:11:c8:b1:c3:f4:29:44:98:0b:f2:6a: c5:ef:15:c1:04:57:2d:80:ee:e6:3b:22:bd:bf:9d: d8:a4:4e:dd:f9:da:65:71:d2:06:00:22:36:f5:65: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FE:DC:6A:57:4D:56:30:0C:4D:3B:AA:29:EC:B6:5A:F9:18:89:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:de:4f:16:f8:03:89:49:90:27:35:3b:67:ee:f4:7f:59:c2: 99:22:50:75:d1:d6:df:00:88:1f:ca:1d:55:c1:a3:66:e0:c2: ae:d1:99:8e:8b:31:82:17:a2:32:90:97:d4:1c:7b:06:dc:ca: 33:89:f1:a8:03:b6:ba:b6:dd:da:b4:a2:fa:2a:95:ed:42:9d: 2a:6f:ae:bb:93:7e:7d:0d:f7:ae:f5:7f:a9:24:c7:32:4f:4c: b3:51:56:ec:b5:fc:69:aa:71:e1:48:af:6f:0a:04:2c:d2:66: 44:59:4d:7b:5e:dd:35:04:a6:11:00:62:44:5c:74:5c:67:19: 63:ed:1e:f4:5b:25:9b:14:a5:27:c2:49:ab:7d:55:94:7c:bf: ee:75:8b:8b:5d:e7:39:ce:62:79:70:89:03:3d:40:54:54:43: ce:67:31:d4:91:a6:0f:4c:77:ee:eb:53:b0:d4:f6:40:bc:b2: e7:dd:02:53:58:a6:55:4e:58:9b:18:fd:e2:f9:fd:bf:a0:41: 37:22:09:fd:2d:0a:c9:4d:7d:56:5c:ee:36:cb:5a:55:7c:b2: 54:e9:f0:32:b8:92:f2:ce:25:31:56:24:0e:ae:42:73:fa:60: f5:99:c5:53:10:6d:41:c9:aa:94:54:17:7f:00:22:d7:1c:41: a4:9b:f3:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiGfRA91NfAr9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk NWY0ZDVlNWMtYzkzOS00MjQyLWJhNjktODJlYzZmZDIzYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAOGx7Z5jPq/JE/dwNIl/ioUPJDXs5/xw6xK mJRLzqqplzuAW+HHkjJ3pZA5d56uEhjaL9Ybc3ZVCPsfQCIChvFzxHSIHvpgY4w5 NwB5Kotl3V8vUMMJ+6aK5hqjF04bwxBDPZPhiS/baT4qVNW0KfyqRqF0I+0Q1Zwt 3zBFGRfMmHBSEP2B1u1MWUgjSRWep940VFs5rhLn/qQBbkJNz7DoiQRAAOYGaiD+ aLmF/FUVEWdU9wO/omxHBrI2CSvNsnpHxSAH/Uh6kkUu88oyF75fbmTbEcixw/Qp RJgL8mrF7xXBBFctgO7mOyK9v53YpE7d+dplcdIGACI29WV2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL+3GpXTVYwDE07qinstlr5GIlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODMxYTYwMjgtNzg4Ni0z YTMwLThjYzgtNGQ2ZGM3MDg2ZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDeTxb4A4lJkCc1O2fu9H9ZwpkiUHXR1t8AiB/KHVXBo2bgwq7RmY6L MYIXojKQl9QcewbcyjOJ8agDtrq23dq0ovoqle1CnSpvrruTfn0N9671f6kkxzJP TLNRVuy1/GmqceFIr28KBCzSZkRZTXte3TUEphEAYkRcdFxnGWPtHvRbJZsUpSfC Sat9VZR8v+51i4td5znOYnlwiQM9QFRUQ85nMdSRpg9Md+7rU7DU9kC8sufdAlNY plVOWJsY/eL5/b+gQTciCf0tCslNfVZc7jbLWlV8slTp8DK4kvLOJTFWJA6uQnP6 YPWZxVMQbUHJqpRUF38AItccQaSb8x4= -----END CERTIFICATE-----Generated at Tue Jul 1 08:16:21 2025 by rpki-client