$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1ee0310-0352-3b7e-a33b-634ae896059a.roa File: d1ee0310-0352-3b7e-a33b-634ae896059a.roa (raw, json) Hash identifier: Z3uQ53wQsvdmFM46C1oqzfP2mvw+hQiKIdWlR23Koss= Subject key identifier: 52:DF:3C:87:8A:29:CF:60:AA:62:2E:C6:32:E4:9C:1F:76:DB:58:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497076FEDE7D104F0F0841C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1ee0310-0352-3b7e-a33b-634ae896059a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.22.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:76:fe:de:7d:10:4f:0f:08:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=455b9e70-8553-42b6-9716-5ff544e3b380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:1c:2a:fe:29:de:70:04:3d:55:f6:18:0b: 6f:a2:a5:21:99:7b:c1:20:d4:e9:20:dd:f1:fa:84: 98:48:d1:eb:0e:95:90:a6:4c:f3:5b:6d:45:d5:d0: 07:e5:7d:b8:f8:71:8f:58:37:1b:8a:e1:94:0a:14: 35:41:a6:5e:9e:1b:28:3a:db:c6:99:88:5c:15:f4: 31:21:bd:4c:9a:c4:ae:ad:35:56:4b:79:c8:28:fd: a1:6b:77:01:b8:4c:d7:e9:a7:83:32:3a:c3:94:23: ba:e2:27:47:f0:18:b5:23:d2:66:0e:84:a2:2c:77: 05:c0:c7:96:d0:a4:8c:bb:ba:ea:3a:37:a0:f1:d3: b2:de:03:a3:22:66:33:1e:af:0a:37:13:72:42:31: 69:74:d8:40:d3:82:48:f4:d8:77:f0:60:10:0d:6f: 9e:3a:41:0f:78:2a:26:c4:9d:8b:5f:5c:69:b6:53: 32:9f:5c:1d:1a:d6:16:76:e8:2b:c9:c0:00:c8:79: ad:1a:8d:93:c5:62:7c:45:39:75:72:11:a1:21:77: 63:90:e2:47:df:5f:6d:8c:93:a9:e9:6c:af:0a:19: ff:67:28:de:58:f8:04:42:2d:40:70:b4:0d:cd:d7: 89:59:06:5a:2f:03:11:a5:1f:d0:2a:b7:16:92:d8: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:3C:87:8A:29:CF:60:AA:62:2E:C6:32:E4:9C:1F:76:DB:58:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1ee0310-0352-3b7e-a33b-634ae896059a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c6:15:38:ad:7c:2c:8b:3b:09:cd:6d:d2:03:d2:be:27:d9: 63:7f:08:dd:70:60:32:c3:6e:57:00:52:d3:4f:8c:29:d9:6f: 39:24:3f:7f:62:f5:20:e4:a8:0f:95:f7:cf:57:04:ad:95:a4: 2d:92:04:68:2b:80:6a:ea:f0:33:2b:6a:bd:30:88:e6:31:e9: b5:ca:54:3a:da:f4:e8:3f:e7:fb:fc:d5:e9:ff:55:89:50:d5: d8:71:2c:59:56:7f:65:2f:82:fd:12:a1:f7:84:ef:fd:bb:45: 07:76:fb:8c:2e:6f:1e:4d:5a:e8:ba:07:5b:7f:ad:b2:f1:5f: 72:61:2e:8f:46:f5:a3:09:fe:39:91:28:6d:3b:ea:bb:ac:8c: a8:a7:ab:b5:ac:01:55:52:90:a0:51:21:1f:96:29:f4:d7:57: fa:ca:d9:c1:0e:95:89:1a:0b:cf:36:28:b3:6a:81:61:64:be: 70:eb:4d:b5:64:09:56:6a:b8:cd:73:9c:58:09:61:5e:fa:90: 4a:f0:53:df:4d:ea:61:db:81:6e:1d:68:23:a6:fa:b8:57:b0: 18:6d:f3:0c:6d:3d:d4:7a:c4:97:cf:45:c1:6f:ef:2e:7a:8b: 30:49:bb:d7:1c:a7:db:02:fd:0e:21:4a:41:7e:e5:d1:dc:9b: ac:e7:c9:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHb+3n0QTw8IQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDU1YjllNzAtODU1My00MmI2LTk3MTYtNWZmNTQ0ZTNiMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OQcKv4p3nAEPVX2GAtvoqUhmXvBINTpIN3x +oSYSNHrDpWQpkzzW21F1dAH5X24+HGPWDcbiuGUChQ1QaZenhsoOtvGmYhcFfQx Ib1MmsSurTVWS3nIKP2ha3cBuEzX6aeDMjrDlCO64idH8Bi1I9JmDoSiLHcFwMeW 0KSMu7rqOjeg8dOy3gOjImYzHq8KNxNyQjFpdNhA04JI9Nh38GAQDW+eOkEPeCom xJ2LX1xptlMyn1wdGtYWdugrycAAyHmtGo2TxWJ8RTl1chGhIXdjkOJH319tjJOp 6WyvChn/ZyjeWPgEQi1AcLQNzdeJWQZaLwMRpR/QKrcWktiN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLfPIeKKc9gqmIuxjLknB9221gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFlZTAzMTAtMDM1Mi0z YjdlLWEzM2ItNjM0YWU4OTYwNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDGFTitfCyLOwnNbdID0r4n2WN/CN1wYDLDblcAUtNPjCnZbzkkP39i 9SDkqA+V989XBK2VpC2SBGgrgGrq8DMrar0wiOYx6bXKVDra9Og/5/v81en/VYlQ 1dhxLFlWf2Uvgv0SofeE7/27RQd2+4wubx5NWui6B1t/rbLxX3JhLo9G9aMJ/jmR KG076rusjKinq7WsAVVSkKBRIR+WKfTXV/rK2cEOlYkaC882KLNqgWFkvnDrTbVk CVZquM1znFgJYV76kErwU99N6mHbgW4daCOm+rhXsBht8wxtPdR6xJfPRcFv7y56 izBJu9ccp9sC/Q4hSkF+5dHcm6znyV4= -----END CERTIFICATE-----Generated at Sun Jun 29 09:26:33 2025 by rpki-client