$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa File: 8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa (raw, json) Hash identifier: fjVUCJavETMkoVhcLBtyHJbznKqegF1ODWSAZOptbV8= Subject key identifier: 0B:DB:BE:2F:5A:69:2E:8A:45:D6:76:E7:97:AA:51:CE:17:21:90:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707A2F46D8A734C5A39800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.21.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7a:2f:46:d8:a7:34:c5:a3:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=fe19dcfa-0b09-4000-a0af-9d43b6567ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bb:8b:1e:87:29:d6:ce:e8:1c:7b:73:be:f9: 7e:21:dd:73:c4:d7:72:13:da:2b:06:f8:e4:43:48: d1:54:52:6c:94:c3:3b:92:14:74:a1:ab:d6:64:4f: 17:ef:80:15:08:71:c2:0f:5c:66:f8:ae:28:b1:41: f7:e1:f8:9d:d9:8f:27:bb:4f:f0:09:e3:31:ae:98: 16:f5:28:14:29:be:ec:93:35:82:c6:0e:d3:c0:a9: 8c:2f:32:9f:c5:41:76:58:ae:74:fc:06:2f:f0:f6: 51:06:cf:2c:66:eb:66:75:41:3a:d2:6d:dc:26:a9: 0a:69:31:31:be:85:b0:ba:d7:ac:ed:5a:02:c6:17: 18:4b:3b:52:b1:94:42:df:39:f0:ea:35:a1:37:0e: c9:e4:4f:a0:8c:ea:7e:c7:04:5c:d2:56:df:e4:4d: 95:f7:93:5b:61:30:0a:42:29:b5:d5:dd:5f:68:ab: de:4d:eb:19:1a:fe:12:27:9c:ba:1a:ef:3b:6b:b6: 8d:f0:8a:de:47:20:a4:08:fa:56:89:7e:59:f6:89: 84:de:15:cd:c2:d7:1d:9d:b9:a5:c7:33:93:54:8f: 1b:79:39:f2:70:72:60:5f:6a:91:7e:05:cc:6b:f5: fe:8b:8c:1b:7f:85:24:d9:a4:de:a2:f7:dc:61:bd: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DB:BE:2F:5A:69:2E:8A:45:D6:76:E7:97:AA:51:CE:17:21:90:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ad:8f:8d:29:7a:26:d5:63:6b:e7:40:bc:45:8d:8d:d1:5e: 95:7d:45:97:33:52:8d:c8:2b:ac:72:7d:bd:a7:f8:d2:c4:d3: f8:fb:6f:32:7c:7d:0d:0d:ab:99:c9:63:47:63:ce:1a:25:5e: d5:54:a3:4a:53:6b:2e:00:77:10:7f:7a:9e:4a:b3:e3:72:c3: 5e:93:d3:1b:0e:63:3d:17:85:e8:4a:da:06:b1:c8:e9:20:7e: f6:73:73:67:a9:a3:4b:19:fa:db:43:f4:5f:cd:1f:6b:17:83: 28:30:44:e9:23:56:ef:7c:51:ea:57:7e:2c:b9:f5:0a:3f:82: a4:83:41:50:e2:20:fa:e9:9f:0c:61:46:9b:38:98:33:d6:ea: 85:dc:1f:dc:27:39:25:1b:9f:dc:01:de:70:41:9a:e7:5a:62: f2:44:45:fc:eb:99:3c:2c:28:cb:2b:6d:27:ab:72:dc:c7:b7: 5c:6c:2e:ac:eb:1d:f9:99:80:b1:c2:aa:99:06:af:60:c0:89: 93:04:f5:05:84:10:8b:7a:c0:9e:5b:08:cd:22:b5:e5:94:17: dc:89:c6:ed:2c:46:43:64:a3:fc:63:e6:46:83:e1:02:46:bb: ef:eb:31:c0:94:02:44:94:52:df:b4:fb:0e:5d:1f:30:12:a2: e6:7b:8f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHovRtinNMWjmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmUxOWRjZmEtMGIwOS00MDAwLWEwYWYtOWQ0M2I2NTY3YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7uLHocp1s7oHHtzvvl+Id1zxNdyE9orBvjk Q0jRVFJslMM7khR0oavWZE8X74AVCHHCD1xm+K4osUH34fid2Y8nu0/wCeMxrpgW 9SgUKb7skzWCxg7TwKmMLzKfxUF2WK50/AYv8PZRBs8sZutmdUE60m3cJqkKaTEx voWwutes7VoCxhcYSztSsZRC3znw6jWhNw7J5E+gjOp+xwRc0lbf5E2V95NbYTAK Qim11d1faKveTesZGv4SJ5y6Gu87a7aN8IreRyCkCPpWiX5Z9omE3hXNwtcdnbml xzOTVI8beTnycHJgX2qRfgXMa/X+i4wbf4Uk2aTeovfcYb2ARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvbvi9aaS6KRdZ255eqUc4XIZBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZmNzMxNDYtN2YxNi0z ZTNhLWJiYjQtODNlOTE0ODZlZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmtj40peibVY2vnQLxFjY3RXpV9RZczUo3IK6xyfb2n+NLE0/j7bzJ8 fQ0Nq5nJY0djzholXtVUo0pTay4AdxB/ep5Ks+Nyw16T0xsOYz0XhehK2gaxyOkg fvZzc2epo0sZ+ttD9F/NH2sXgygwROkjVu98UepXfiy59Qo/gqSDQVDiIPrpnwxh Rps4mDPW6oXcH9wnOSUbn9wB3nBBmudaYvJERfzrmTwsKMsrbSerctzHt1xsLqzr HfmZgLHCqpkGr2DAiZME9QWEEIt6wJ5bCM0iteWUF9yJxu0sRkNko/xj5kaD4QJG u+/rMcCUAkSUUt+0+w5dHzASouZ7j3o= -----END CERTIFICATE-----Generated at Mon Jun 30 17:39:56 2025 by rpki-client