$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa File: ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa (raw, json) Hash identifier: UPlgtQYC3bMdbXhmom6lPbOgcv3+gt54iGdw7Wvu8yE= Subject key identifier: E4:28:C4:28:9E:11:FD:34:B8:F7:D2:CF:F8:1E:4B:59:CA:57:A7:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497079CFE158ADB485A32980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 98.20.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:79:cf:e1:58:ad:b4:85:a3:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=bc0b25ff-4cd3-4e5d-b8fc-0b5c6e4756c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:10:ac:81:ed:32:54:be:1f:d5:76:e1:c3: fd:41:65:5b:bd:ee:c1:d7:f8:4e:b8:bf:aa:c3:46: 90:40:ed:b8:69:fd:af:bd:82:d2:29:bc:25:e9:28: 89:ad:d8:4e:32:54:ab:bb:ee:55:52:cd:1d:36:28: b3:73:90:05:46:86:a4:6e:c7:34:04:c5:04:5b:a5: fd:30:95:25:42:d8:d2:0d:c6:72:89:bf:06:e0:08: 27:89:69:db:05:96:f1:eb:de:3b:7e:40:f6:46:0b: 8c:f2:14:ac:a3:9e:62:be:fb:a3:8c:44:59:fb:29: 7d:ee:65:81:9f:03:4c:9d:89:21:d8:24:e3:ce:04: 76:c0:5a:d7:dd:c5:5f:c4:07:2e:07:db:8e:74:e7: cb:3f:20:eb:59:95:f4:cd:ea:e0:8b:da:44:a4:4d: e6:0f:98:3e:da:1d:b8:26:d5:6f:e0:65:14:bc:49: 9f:71:a0:da:c6:e8:6a:81:34:30:97:5f:f7:e1:66: 17:bc:82:d3:3c:68:03:26:07:76:fd:76:34:ed:47: 95:2a:9f:ff:e5:30:28:e6:8c:08:48:60:2f:92:87: db:b1:35:18:3d:99:08:5b:3c:07:50:c7:8b:cc:31: 58:2e:40:0e:2c:ce:41:75:1f:ca:fc:5b:e8:b0:77: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:28:C4:28:9E:11:FD:34:B8:F7:D2:CF:F8:1E:4B:59:CA:57:A7:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d7:31:e5:f9:78:0f:88:2f:75:ec:50:06:f1:59:4c:aa:4f: ad:63:09:38:5b:94:0a:98:21:01:ad:cb:ce:58:4f:26:ab:69: 37:a5:c2:f6:e9:da:73:26:fa:8b:3a:79:69:fa:81:6a:f1:f5: 42:69:59:ab:b9:76:78:71:8c:7e:1a:cb:3a:b1:19:d9:60:9d: e6:f3:99:88:b1:85:36:db:41:4f:5f:cd:d1:94:a5:2b:ce:31: fc:20:57:82:b5:44:12:ae:a5:ae:ed:c6:59:6e:85:c0:50:d9: 87:37:4e:7a:36:5e:6e:a3:bc:82:64:f6:bf:a1:81:99:e3:81: 90:1e:37:d8:b8:db:31:c2:a7:52:46:ec:49:e4:67:ad:87:d2: 62:08:07:8b:62:e1:8e:be:bb:60:50:1a:93:51:76:69:94:e4: 9b:7b:c6:31:c0:fc:98:77:77:b4:b8:d6:41:b4:4e:be:aa:ab: 0e:c1:04:2c:6a:c7:53:bd:36:60:2f:72:5a:cd:b3:95:d2:ee: 1a:3a:57:e2:a8:63:c7:91:bb:6e:c6:78:59:ae:3c:0c:9f:c1: 7d:68:25:d1:17:d5:fb:7b:f3:e4:56:ba:1c:c9:b1:72:10:3b: 3c:cb:7c:27:38:4f:ba:39:19:6f:2c:ba:04:98:6a:d3:20:20: 9f:45:c9:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHnP4VittIWjKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YmMwYjI1ZmYtNGNkMy00ZTVkLWI4ZmMtMGI1YzZlNDc1NmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmkQrIHtMlS+H9V24cP9QWVbve7B1/hOuL+q w0aQQO24af2vvYLSKbwl6SiJrdhOMlSru+5VUs0dNiizc5AFRoakbsc0BMUEW6X9 MJUlQtjSDcZyib8G4AgniWnbBZbx6947fkD2RguM8hSso55ivvujjERZ+yl97mWB nwNMnYkh2CTjzgR2wFrX3cVfxAcuB9uOdOfLPyDrWZX0zergi9pEpE3mD5g+2h24 JtVv4GUUvEmfcaDaxuhqgTQwl1/34WYXvILTPGgDJgd2/XY07UeVKp//5TAo5owI SGAvkofbsTUYPZkIWzwHUMeLzDFYLkAOLM5BdR/K/FvosHf0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQoxCieEf00uPfSz/geS1nKV6fIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQwMGU0ZmEtNmRiZC0z YjYwLWE2OTItZTYwMGY0ZTM2OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhQeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLXMeX5eA+IL3XsUAbxWUyqT61jCThblAqYIQGty85YTyaraTelwvbp 2nMm+os6eWn6gWrx9UJpWau5dnhxjH4ayzqxGdlgnebzmYixhTbbQU9fzdGUpSvO MfwgV4K1RBKupa7txlluhcBQ2Yc3Tno2Xm6jvIJk9r+hgZnjgZAeN9i42zHCp1JG 7EnkZ62H0mIIB4ti4Y6+u2BQGpNRdmmU5Jt7xjHA/Jh3d7S41kG0Tr6qqw7BBCxq x1O9NmAvclrNs5XS7ho6V+KoY8eRu27GeFmuPAyfwX1oJdEX1ft78+RWuhzJsXIQ OzzLfCc4T7o5GW8sugSYatMgIJ9FySM= -----END CERTIFICATE-----Generated at Mon Jun 30 15:33:39 2025 by rpki-client