$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc0f2d31-41c5-3f5a-b8fb-d005fc42f65a.roa File: bc0f2d31-41c5-3f5a-b8fb-d005fc42f65a.roa (raw, json) Hash identifier: jtlSPh3wwQITFMsEFzQrg8pc4/tKfohpBm+oGo37QP8= Subject key identifier: 00:B7:18:E2:9E:CF:FA:B8:E3:45:DD:FE:61:B0:62:F2:E8:44:A6:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707A8EB56614C876485800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc0f2d31-41c5-3f5a-b8fb-d005fc42f65a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.22.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7a:8e:b5:66:14:c8:76:48:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=891e7903-83b4-42c2-b924-aca929df748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:49:56:a1:d8:dd:01:81:a1:0f:3f:a3:c6: 3c:ff:63:13:a2:c1:82:62:d0:6c:31:9e:50:5e:4f: 3b:35:b2:33:ba:a8:0b:57:9d:5a:59:03:af:de:e1: 71:df:46:98:eb:67:4d:9e:74:d8:ae:22:ab:4d:32: 42:9f:98:af:74:9d:22:2c:88:38:2a:31:ee:1d:9a: 0d:f6:b5:c0:cb:5a:99:cc:ee:ff:49:31:fb:ed:60: 13:3a:5f:ab:f9:b1:9d:b7:78:93:b0:5a:fc:29:69: 92:d6:2b:b2:56:f5:2f:2d:db:d9:1c:67:90:c4:12: 03:48:2f:01:ef:78:2a:fe:d7:e7:7c:e4:c2:27:de: c7:f1:a9:eb:7e:57:93:f7:3a:3e:b4:2c:f5:55:a2: 2b:22:48:bd:89:dc:ad:a3:02:5d:f5:87:e4:71:23: e6:d4:39:4b:a7:d3:4f:5f:42:3c:88:69:49:ca:6f: 9e:c4:fb:ea:09:c1:a7:c2:b7:f6:df:12:c4:fe:39: 2c:d8:d4:4f:a3:dd:03:06:61:74:0a:b7:cc:d6:a5: b3:5c:d8:1e:d2:c2:83:cc:8e:ad:98:c7:be:80:7c: a8:b1:ab:cd:da:48:4d:5b:3e:37:09:63:fe:0d:6b: c2:0c:89:46:22:c2:06:45:bf:24:bb:82:5b:a0:d0: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:18:E2:9E:CF:FA:B8:E3:45:DD:FE:61:B0:62:F2:E8:44:A6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc0f2d31-41c5-3f5a-b8fb-d005fc42f65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:58:99:5f:03:de:8b:3a:45:5f:8e:b9:93:a1:62:c7:70:89: d6:0e:25:fc:66:0e:e7:8e:6d:e9:fb:8e:8f:3e:a3:32:bd:15: 80:69:db:69:a9:7e:87:9e:61:e5:b4:fb:11:bf:d6:9c:b0:6c: 0e:af:10:4c:cd:1d:a1:14:c1:28:5f:4f:9d:4a:7b:e1:46:34: db:8d:2b:22:33:08:f8:66:5f:1c:63:88:3f:20:48:48:23:36: 03:64:71:52:dc:08:c6:98:8b:25:9c:30:29:78:c3:2d:f2:77: 56:08:71:e6:42:ad:3a:4d:2c:03:49:aa:dd:a0:bd:7b:0c:9e: ed:4c:7f:7c:10:de:5f:59:67:24:5b:4c:2d:04:74:85:04:ef: 69:2f:82:0a:63:8a:73:ae:fa:12:18:6f:c3:4d:6b:9f:17:fb: 57:ca:45:41:89:b3:77:cc:da:13:60:49:16:08:20:c2:d7:85: d6:e9:cd:f2:d2:7d:bf:05:4f:46:b2:7b:50:9f:52:51:ff:6d: 8c:94:ab:f6:c4:25:32:71:61:46:01:bf:76:5e:49:15:24:2c: fd:c5:39:b4:42:3f:ce:76:bc:40:94:e8:31:73:18:20:55:e7: 3d:73:94:dc:9c:82:17:e9:20:f2:9f:db:d2:ab:fd:2e:7f:9b: 95:cb:19:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHqOtWYUyHZIWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ODkxZTc5MDMtODNiNC00MmMyLWI5MjQtYWNhOTI5ZGY3NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRZJVqHY3QGBoQ8/o8Y8/2MTosGCYtBsMZ5Q Xk87NbIzuqgLV51aWQOv3uFx30aY62dNnnTYriKrTTJCn5ivdJ0iLIg4KjHuHZoN 9rXAy1qZzO7/STH77WATOl+r+bGdt3iTsFr8KWmS1iuyVvUvLdvZHGeQxBIDSC8B 73gq/tfnfOTCJ97H8anrfleT9zo+tCz1VaIrIki9idytowJd9YfkcSPm1DlLp9NP X0I8iGlJym+exPvqCcGnwrf23xLE/jks2NRPo90DBmF0CrfM1qWzXNge0sKDzI6t mMe+gHyosavN2khNWz43CWP+DWvCDIlGIsIGRb8ku4JboNB+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC3GOKez/q440Xd/mGwYvLoRKZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmMwZjJkMzEtNDFjNS0z ZjVhLWI4ZmItZDAwNWZjNDJmNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9YmV8D3os6RV+OuZOhYsdwidYOJfxmDueOben7jo8+ozK9FYBp22mp foeeYeW0+xG/1pywbA6vEEzNHaEUwShfT51Ke+FGNNuNKyIzCPhmXxxjiD8gSEgj NgNkcVLcCMaYiyWcMCl4wy3yd1YIceZCrTpNLANJqt2gvXsMnu1Mf3wQ3l9ZZyRb TC0EdIUE72kvggpjinOu+hIYb8NNa58X+1fKRUGJs3fM2hNgSRYIIMLXhdbpzfLS fb8FT0aye1CfUlH/bYyUq/bEJTJxYUYBv3ZeSRUkLP3FObRCP852vECU6DFzGCBV 5z1zlNycghfpIPKf29Kr/S5/m5XLGYk= -----END CERTIFICATE-----Generated at Sun Jun 29 01:26:03 2025 by rpki-client