$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa File: a2405e16-c99d-31e3-9565-9a6a7df814ed.roa (raw, json) Hash identifier: dMJVvkcnVjX8toAZUBL/61g7Mv31qzhBPuozLAPVw7o= Subject key identifier: 35:65:B9:50:DE:CB:2A:0A:21:D6:13:55:76:25:05:9D:7C:97:66:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497077C5D78B2B28D650D680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.20.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:77:c5:d7:8b:2b:28:d6:50:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=c6beb8e1-ccfe-450e-86f4-86ab216c34da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:bc:ec:40:ec:1f:7f:29:7e:55:8a:4a:48: 83:90:22:b6:57:9b:ee:23:9d:f1:37:b6:d2:b5:09: d7:06:b7:58:a0:bc:20:cf:c6:73:4a:a3:ed:4c:61: 5f:01:29:c4:fb:62:02:c2:44:a5:36:bc:89:c9:95: 6d:ef:be:69:f8:4e:3f:a4:72:38:62:f4:6f:31:cd: 11:6f:92:d3:b6:a4:15:43:3a:0a:6a:e1:88:be:9c: 0a:c3:b7:c2:30:22:1d:57:d9:b3:78:9e:59:2c:88: 99:c1:f2:6b:8d:8e:d0:72:ab:51:4f:90:14:75:16: 13:4b:52:d2:78:04:e5:91:d7:10:fb:ea:60:7c:1e: 39:05:9a:00:b2:a5:03:9e:f1:03:8e:52:d1:82:c4: 55:95:ea:1f:f7:cb:24:86:84:45:74:da:26:4d:0e: cb:b3:9a:ad:4a:c0:7f:36:dc:60:82:96:3d:c2:22: b6:82:51:c3:fa:f6:64:e7:a8:64:cf:c9:69:ea:38: 6a:3f:85:4b:14:be:64:9c:9b:6f:a1:9b:4f:a4:a1: 5f:b6:8b:f8:81:94:3e:58:19:17:2c:43:44:de:69: 49:6d:d7:ed:23:4a:8a:7f:8d:c4:af:fc:84:7d:a8: ac:b4:67:b6:55:73:96:fa:21:c4:b2:67:79:c8:eb: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:B9:50:DE:CB:2A:0A:21:D6:13:55:76:25:05:9D:7C:97:66:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3e:dc:07:63:c2:cd:d8:35:30:7d:62:5e:2a:5f:ef:1b:18: 86:e9:f1:55:3a:2f:e6:a2:b4:50:d7:35:34:25:51:18:f9:5f: c5:0b:35:c6:63:57:5f:ef:a9:30:32:29:25:47:2d:12:9c:29: a6:59:ec:b6:6e:b6:9b:3a:20:d3:15:38:40:72:eb:7e:a8:3d: c9:9b:e7:67:66:28:24:a4:b3:b5:04:12:00:a7:a1:b7:d3:6f: 28:08:24:72:32:72:72:a9:5b:f4:f3:a8:0d:b4:8c:f0:04:fd: fd:f7:d9:9c:db:70:da:4d:a9:94:c2:fd:57:79:89:47:9c:13: ec:02:24:b1:8b:a4:a4:ba:88:b5:c2:17:a8:63:ec:51:2d:84: 79:e7:6c:01:bd:ce:50:f4:46:62:ea:9d:74:3d:a4:6d:df:5f: fa:3f:f4:b0:8d:37:f6:ad:12:8b:96:72:24:bb:0c:8d:79:d9: 0d:5e:35:36:e7:4a:fe:22:a6:3a:9d:47:b6:d9:b7:44:0f:b2: 2d:06:4c:22:59:37:0b:f5:73:9a:ad:bf:1c:0d:f0:3e:fc:24: 57:dc:ee:32:ba:78:ad:c6:05:5a:be:7e:90:80:c8:d7:10:f9: 8b:88:b1:cf:2c:41:34:fa:95:b5:5e:28:26:80:3b:e5:dd:7f: db:56:87:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHfF14srKNZQ1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YzZiZWI4ZTEtY2NmZS00NTBlLTg2ZjQtODZhYjIxNmMzNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi287EDsH38pflWKSkiDkCK2V5vuI53xN7bS tQnXBrdYoLwgz8ZzSqPtTGFfASnE+2ICwkSlNryJyZVt775p+E4/pHI4YvRvMc0R b5LTtqQVQzoKauGIvpwKw7fCMCIdV9mzeJ5ZLIiZwfJrjY7QcqtRT5AUdRYTS1LS eATlkdcQ++pgfB45BZoAsqUDnvEDjlLRgsRVleof98skhoRFdNomTQ7Ls5qtSsB/ NtxggpY9wiK2glHD+vZk56hkz8lp6jhqP4VLFL5knJtvoZtPpKFftov4gZQ+WBkX LENE3mlJbdftI0qKf43Er/yEfaistGe2VXOW+iHEsmd5yOvT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVluVDeyyoKIdYTVXYlBZ18l2acMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI0MDVlMTYtYzk5ZC0z MWUzLTk1NjUtOWE2YTdkZjgxNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw+3Adjws3YNTB9Yl4qX+8bGIbp8VU6L+aitFDXNTQlURj5X8ULNcZj V1/vqTAyKSVHLRKcKaZZ7LZutps6INMVOEBy636oPcmb52dmKCSks7UEEgCnobfT bygIJHIycnKpW/TzqA20jPAE/f332ZzbcNpNqZTC/Vd5iUecE+wCJLGLpKS6iLXC F6hj7FEthHnnbAG9zlD0RmLqnXQ9pG3fX/o/9LCNN/atEouWciS7DI152Q1eNTbn Sv4ipjqdR7bZt0QPsi0GTCJZNwv1c5qtvxwN8D78JFfc7jK6eK3GBVq+fpCAyNcQ +YuIsc8sQTT6lbVeKCaAO+Xdf9tWh/I= -----END CERTIFICATE-----Generated at Tue Jul 1 05:44:17 2025 by rpki-client