$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa File: ea353e60-f987-3dac-ab96-26c4bcf28808.roa (raw, json) Hash identifier: F/kC99NhGxpv0gbntGHVyW7I0hnMCDQ/4VV1+OBKz6c= Subject key identifier: FC:1D:14:DC:49:9C:C1:9D:8F:BD:CE:EC:49:A6:7E:D2:2C:8A:E7:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8B90C0DA972A35DD69E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.16.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8b:90:c0:da:97:2a:35:dd:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=33822260-ba8e-42f2-a585-b5a90e204aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:72:6c:78:4d:f8:45:86:db:19:87:85:80: 8b:41:d6:ad:72:6b:a2:45:7d:8a:0b:f9:a9:ff:9b: 62:28:46:6e:72:f5:bc:70:27:15:6d:22:47:df:1f: fb:dd:d2:fb:66:f2:89:81:2e:2e:43:56:34:cf:38: 8f:e0:bb:ba:29:9f:d0:2a:c2:67:d7:33:7c:85:f6: 02:d2:73:e2:67:3e:57:e1:f6:9e:d0:ee:98:6a:24: 24:c5:f0:50:50:a1:ea:ac:4e:b2:24:cf:2d:db:d3: c8:f4:86:fc:39:6a:72:69:b2:63:c3:a6:29:62:d6: aa:c2:81:b1:c9:61:56:56:3c:95:67:14:b5:92:7f: 06:d4:b0:a9:65:5b:f5:a5:5e:3a:7b:08:f5:3a:ac: 06:a1:41:78:81:d5:6d:17:39:8b:30:12:8a:f7:b2: 30:1b:e5:e4:06:22:2d:10:ff:b5:5d:7f:32:9c:05: d2:54:8a:7e:7f:9b:60:a5:ca:c9:12:fe:6b:de:6a: 23:bf:48:94:19:d1:87:15:f5:82:54:6c:96:b7:d6: 07:55:ab:fc:0a:ea:fe:b4:36:c9:7c:9a:fa:fb:9f: 2e:79:5f:c4:21:12:94:9e:e8:59:d0:ae:e7:88:11: 49:ae:9a:da:d9:2d:5b:7f:4c:d8:3d:ab:7b:1c:57: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1D:14:DC:49:9C:C1:9D:8F:BD:CE:EC:49:A6:7E:D2:2C:8A:E7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:04:6c:ab:81:89:6d:c5:a1:09:e6:f1:5e:cc:0d:44:6b:d3: 37:7e:46:ce:a4:ba:9b:ca:ea:28:2b:26:6a:a1:02:80:0c:c8: 30:4a:b3:85:2b:27:1d:27:9d:23:77:c4:e2:4c:ba:2f:4d:29: 87:51:86:f4:29:94:ee:a8:e0:5b:00:f2:2c:3c:17:34:85:c2: 52:94:95:9c:47:86:e4:43:e0:2f:d4:59:a2:60:14:8f:c9:b4: 99:78:7b:14:78:e9:3e:9e:0b:a2:83:fc:55:b9:d6:4e:6a:1c: aa:91:ae:73:a7:27:71:b6:76:bf:ef:49:ce:0d:73:7e:ba:de: 9f:ac:fa:85:4e:00:46:32:aa:79:4e:84:5a:d7:45:df:d7:26: 10:75:a6:16:3c:c8:28:06:4a:b1:96:4f:45:96:5b:19:77:91: 82:7f:74:0c:4c:94:b2:f9:b9:55:f8:eb:68:7c:6f:02:f7:dc: 74:b7:97:dd:09:c3:50:77:db:8c:77:57:1c:d1:d4:cb:d9:d7: 52:00:2b:18:64:2d:7d:1e:f8:b6:2d:f3:fd:fb:76:32:63:6a: 7e:10:fb:9d:ba:43:af:3b:1c:65:0e:03:8f:37:cc:41:34:cd: 8f:f8:6a:a2:bc:62:7e:36:c6:61:92:37:f9:95:63:d2:9f:c8: 4d:39:4a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qouQwNqXKjXdaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MzM4MjIyNjAtYmE4ZS00MmYyLWE1ODUtYjVhOTBlMjA0YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruZybHhN+EWG2xmHhYCLQdatcmuiRX2KC/mp /5tiKEZucvW8cCcVbSJH3x/73dL7ZvKJgS4uQ1Y0zziP4Lu6KZ/QKsJn1zN8hfYC 0nPiZz5X4fae0O6YaiQkxfBQUKHqrE6yJM8t29PI9Ib8OWpyabJjw6YpYtaqwoGx yWFWVjyVZxS1kn8G1LCpZVv1pV46ewj1OqwGoUF4gdVtFzmLMBKK97IwG+XkBiIt EP+1XX8ynAXSVIp+f5tgpcrJEv5r3mojv0iUGdGHFfWCVGyWt9YHVav8Cur+tDbJ fJr6+58ueV/EIRKUnuhZ0K7niBFJrpra2S1bf0zYPat7HFc9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwdFNxJnMGdj73O7EmmftIsiuekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWEzNTNlNjAtZjk4Ny0z ZGFjLWFiOTYtMjZjNGJjZjI4ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8EbKuBiW3FoQnm8V7MDURr0zd+Rs6kupvK6igrJmqhAoAMyDBKs4Ur Jx0nnSN3xOJMui9NKYdRhvQplO6o4FsA8iw8FzSFwlKUlZxHhuRD4C/UWaJgFI/J tJl4exR46T6eC6KD/FW51k5qHKqRrnOnJ3G2dr/vSc4Nc3663p+s+oVOAEYyqnlO hFrXRd/XJhB1phY8yCgGSrGWT0WWWxl3kYJ/dAxMlLL5uVX462h8bwL33HS3l90J w1B324x3VxzR1MvZ11IAKxhkLX0e+LYt8/37djJjan4Q+526Q687HGUOA483zEE0 zY/4aqK8Yn42xmGSN/mVY9KfyE05SuE= -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:29 2025 by rpki-client