$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa File: a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa (raw, json) Hash identifier: cM5c+XoAANcHp7c3aBth+qWSHBSwCuDzBOL+z2gqLxI= Subject key identifier: 7A:AB:C3:89:D5:B4:2E:9A:D8:E8:88:BD:AE:11:A7:21:2E:4E:AF:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A35E592D403E19ECD47FCB000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.18.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:92:d4:03:e1:9e:cd:47:fc:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=808180ac-bb2b-4be1-9c43-648283e50911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:eb:fd:19:e4:0f:41:b4:bf:d3:ec:65:e8: d0:87:18:a8:d2:99:e9:6b:0c:2a:6a:71:c3:01:e2: 44:a2:c1:9d:40:9a:8b:30:ad:98:df:86:5b:3f:da: 22:22:ff:48:19:72:c0:c8:32:11:a8:1e:8a:23:6c: 58:64:53:32:41:61:56:26:a4:26:db:2a:e1:9a:41: 1a:a8:d7:cb:85:10:31:c7:6d:f9:4d:74:5b:c6:ae: ea:a1:d9:94:60:35:2e:19:90:b5:01:a5:8b:1a:86: cb:c9:32:b0:4d:fe:55:83:58:4f:ba:61:82:7c:58: 10:fe:b7:8e:3b:c4:0b:f2:5d:71:97:17:3e:4d:68: b4:52:7c:31:f0:b4:f7:36:07:9f:e1:23:0b:93:84: ce:9e:3f:98:82:eb:96:5e:b4:48:bc:0f:3f:a3:3b: 6f:9b:83:9c:8e:96:90:a2:cf:da:7a:e2:c6:75:8d: 34:be:dc:56:57:c9:9c:54:89:7c:2e:33:ac:a9:1a: 50:b6:24:61:59:26:9b:cd:dc:1b:8e:fc:cb:3c:45: 86:8a:08:3e:56:5d:d4:7d:c3:f6:75:58:e6:1a:87: 99:7f:da:58:e2:42:f9:54:d1:41:39:e5:92:cb:3a: 68:16:e5:4d:57:c4:cc:95:f2:26:18:0d:2e:a2:04: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AB:C3:89:D5:B4:2E:9A:D8:E8:88:BD:AE:11:A7:21:2E:4E:AF:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:fa:8c:3b:38:da:e1:f0:4a:25:54:6f:5e:f4:5c:f1:18:7e: 5d:a3:72:e2:7d:f0:16:36:28:d8:fd:73:16:76:86:35:6f:70: 04:24:fb:7a:f1:ed:83:2b:2d:ce:36:e5:6e:86:66:67:f3:06: 69:6c:14:c2:26:b2:c9:16:ec:12:cc:3b:c2:f8:a8:b8:71:2d: 52:0c:3b:9e:b4:44:66:c0:c6:de:a0:4b:d6:61:4f:5a:8d:63: 2f:f1:10:42:71:4c:04:51:f0:5c:ca:ec:34:fd:81:b8:c4:1f: 56:87:0e:af:62:f6:07:5d:4a:34:1e:18:f6:07:1d:62:22:06: 6b:49:b6:b9:e8:9d:e7:76:7f:3a:28:87:ac:43:48:6d:5e:36: bd:df:0a:4e:ca:dc:5b:04:e1:3f:67:18:54:90:7e:d9:f8:ae: a2:2f:fc:0f:c5:f6:75:ba:04:f7:5f:0f:12:2b:8e:32:d4:73: 5d:ef:e8:54:b4:38:2b:a9:54:a9:a2:69:9e:9a:f5:95:ea:a8: c9:f2:ce:72:a8:b6:a5:51:67:d4:33:cd:db:60:d0:9f:c3:ab: 10:78:f3:4b:1b:57:ab:65:11:f6:25:bd:16:4d:14:e5:48:07: 9a:6d:16:1e:f8:b3:f8:ff:da:80:5c:bd:d6:ba:9b:d0:aa:36: bc:2f:ac:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15ZLUA+GezUf8sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk ODA4MTgwYWMtYmIyYi00YmUxLTljNDMtNjQ4MjgzZTUwOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ3r/RnkD0G0v9PsZejQhxio0pnpawwqanHD AeJEosGdQJqLMK2Y34ZbP9oiIv9IGXLAyDIRqB6KI2xYZFMyQWFWJqQm2yrhmkEa qNfLhRAxx235TXRbxq7qodmUYDUuGZC1AaWLGobLyTKwTf5Vg1hPumGCfFgQ/reO O8QL8l1xlxc+TWi0Unwx8LT3Ngef4SMLk4TOnj+YguuWXrRIvA8/oztvm4OcjpaQ os/aeuLGdY00vtxWV8mcVIl8LjOsqRpQtiRhWSabzdwbjvzLPEWGigg+Vl3UfcP2 dVjmGoeZf9pY4kL5VNFBOeWSyzpoFuVNV8TMlfImGA0uogQRiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqrw4nVtC6a2OiIva4RpyEuTq8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE3ZWJhYjMtNzVjYy0z YjJjLTg4YzUtOGIwYTEzNDgwNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf6jDs42uHwSiVUb170XPEYfl2jcuJ98BY2KNj9cxZ2hjVvcAQk+3rx 7YMrLc425W6GZmfzBmlsFMImsskW7BLMO8L4qLhxLVIMO560RGbAxt6gS9ZhT1qN Yy/xEEJxTARR8FzK7DT9gbjEH1aHDq9i9gddSjQeGPYHHWIiBmtJtrnoned2fzoo h6xDSG1eNr3fCk7K3FsE4T9nGFSQftn4rqIv/A/F9nW6BPdfDxIrjjLUc13v6FS0 OCupVKmiaZ6a9ZXqqMnyznKotqVRZ9Qzzdtg0J/DqxB480sbV6tlEfYlvRZNFOVI B5ptFh74s/j/2oBcvda6m9CqNrwvrEU= -----END CERTIFICATE-----Generated at Sun Jun 29 06:37:39 2025 by rpki-client