$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84796a10-3f90-31dc-9d31-be4befba4c1d.roa File: 84796a10-3f90-31dc-9d31-be4befba4c1d.roa (raw, json) Hash identifier: Za0w0t6jYbaP7SFjAwGZziP4z/3PzTVE/3DQxn21V+k= Subject key identifier: 13:58:C3:91:DC:BA:4A:74:E5:03:7C:DD:76:4D:51:42:1A:88:86:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8AC354AC592AE97CD000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84796a10-3f90-31dc-9d31-be4befba4c1d.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.20.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8a:c3:54:ac:59:2a:e9:7c:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=990a9a60-77b9-4a09-a6bf-a67213992856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:34:93:34:a9:63:13:6f:23:ee:06:a4:1d: 45:31:d7:37:d9:09:0e:02:12:63:10:e7:c3:d9:b5: f4:6f:21:1e:15:6d:ed:a1:23:ab:0e:fd:bc:0a:83: 3a:4b:75:82:01:89:d2:7c:2c:74:de:65:3f:97:2b: 42:17:f2:45:46:79:45:79:b4:2a:34:8f:ab:fd:14: e5:0b:ef:4d:8c:43:12:98:4c:81:c1:88:6e:57:e3: 14:e9:20:91:0a:99:1c:58:11:f2:b9:b6:1d:83:d2: f4:f5:ee:a5:62:b0:01:fd:27:91:9c:e0:82:49:47: b1:02:a8:22:e8:b9:e7:9f:16:9a:70:1a:42:ba:f6: 4c:77:cb:ef:7b:ca:fb:ca:c7:ce:20:e9:f3:3b:b1: d7:05:fb:67:59:4a:8b:0f:0a:17:ff:82:5d:5d:1a: 6c:05:fd:25:76:49:b0:77:65:b1:aa:f4:85:6e:77: 08:f8:1a:81:41:c9:ed:c8:e5:a8:a8:68:79:82:14: 64:8e:01:65:e2:ff:e2:60:90:46:86:89:b7:9b:c1: 48:37:d1:77:de:2c:82:40:f4:02:4e:39:55:8e:0d: 4b:62:6a:fd:99:7c:34:cc:88:48:41:01:eb:ae:5a: c6:99:ac:bc:8f:1c:de:00:b4:d9:a5:3d:7f:62:4d: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:C3:91:DC:BA:4A:74:E5:03:7C:DD:76:4D:51:42:1A:88:86:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84796a10-3f90-31dc-9d31-be4befba4c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ba:e2:a8:6c:4f:ae:99:33:7b:6a:47:3a:7d:f9:7f:90:25: d4:96:9b:95:da:cd:91:4f:2b:a7:5e:bd:e2:16:1c:d9:3f:15: da:e2:05:e8:c9:f3:a7:8d:37:2d:f3:f8:c3:8f:fe:bc:7c:95: e6:fb:e8:7c:1c:85:00:85:74:6e:2d:1a:04:ff:0e:eb:71:f0: 8d:7e:96:88:5e:c7:bb:dd:1d:26:ea:e4:66:d6:e0:db:5d:76: 68:7a:c9:40:62:06:a5:d8:73:ed:69:82:98:64:6f:63:25:e8: 0b:85:b0:38:c8:2b:09:25:10:1e:92:64:99:1d:a1:cf:ce:0d: 7a:f5:91:a4:44:f9:e4:1e:ad:bd:d3:5a:ad:b7:40:fb:2d:42: 2a:a5:f8:cc:34:35:b2:87:1b:a1:83:77:4c:77:d1:81:bd:52: 39:00:bf:00:04:eb:99:75:1d:16:40:46:e0:a0:a7:b8:28:86: 68:f7:5d:f3:1b:19:32:4d:d0:e9:9b:5c:70:48:2d:ed:7d:a1: 07:6f:9b:e7:d0:38:fd:03:ce:36:79:34:c4:e8:52:78:b6:45: 9e:12:90:d2:63:f1:fa:27:30:90:9b:10:61:dc:7f:97:12:e7: 82:42:18:9d:7d:a2:5d:e5:0a:f0:60:c2:07:d9:cc:5c:b3:69: 79:52:9a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qorDVKxZKul80AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OTkwYTlhNjAtNzdiOS00YTA5LWE2YmYtYTY3MjEzOTkyODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/M0kzSpYxNvI+4GpB1FMdc32QkOAhJjEOfD 2bX0byEeFW3toSOrDv28CoM6S3WCAYnSfCx03mU/lytCF/JFRnlFebQqNI+r/RTl C+9NjEMSmEyBwYhuV+MU6SCRCpkcWBHyubYdg9L09e6lYrAB/SeRnOCCSUexAqgi 6LnnnxaacBpCuvZMd8vve8r7ysfOIOnzO7HXBftnWUqLDwoX/4JdXRpsBf0ldkmw d2WxqvSFbncI+BqBQcntyOWoqGh5ghRkjgFl4v/iYJBGhom3m8FIN9F33iyCQPQC TjlVjg1LYmr9mXw0zIhIQQHrrlrGmay8jxzeALTZpT1/Yk31XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNYw5Hcukp05QN83XZNUUIaiIbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ3OTZhMTAtM2Y5MC0z MWRjLTlkMzEtYmU0YmVmYmE0YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu64qhsT66ZM3tqRzp9+X+QJdSWm5XazZFPK6deveIWHNk/FdriBejJ 86eNNy3z+MOP/rx8leb76HwchQCFdG4tGgT/Dutx8I1+lohex7vdHSbq5GbW4Ntd dmh6yUBiBqXYc+1pgphkb2Ml6AuFsDjIKwklEB6SZJkdoc/ODXr1kaRE+eQerb3T Wq23QPstQiql+Mw0NbKHG6GDd0x30YG9UjkAvwAE65l1HRZARuCgp7gohmj3XfMb GTJN0OmbXHBILe19oQdvm+fQOP0DzjZ5NMToUni2RZ4SkNJj8fonMJCbEGHcf5cS 54JCGJ19ol3lCvBgwgfZzFyzaXlSmmc= -----END CERTIFICATE-----Generated at Tue Jul 1 19:49:25 2025 by rpki-client