$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22d71a99-e664-3ccc-9bcd-8ca3d4a241e2.roa File: 22d71a99-e664-3ccc-9bcd-8ca3d4a241e2.roa (raw, json) Hash identifier: 9myF3Jn7jYd+B8CuZ+NuyK1a5UfhXp4Z90rtBGAl2q8= Subject key identifier: 34:0D:92:01:C8:37:76:A4:35:62:51:31:64:D2:EF:DD:60:EC:55:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D8C2A93BE3B0F23665A5C4FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22d71a99-e664-3ccc-9bcd-8ca3d4a241e2.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 98.19.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:93:be:3b:0f:23:66:5a:5c:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=46ab7cda-744b-40bf-8e27-9a4a529b3dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:a0:12:f0:9e:97:33:5a:2f:87:2c:50:23: 6d:5d:7d:c8:6b:74:d5:2f:8c:4b:56:0d:99:ea:89: fd:47:2a:98:95:ae:c5:50:6c:a5:6b:a9:47:d8:e5: 86:85:71:22:34:7a:24:04:cd:c7:85:d3:c0:ab:5f: 50:d8:31:f9:6c:d8:af:de:72:15:c8:5b:90:5c:e6: 17:f5:a7:b0:b2:4c:f0:5b:d6:81:94:9d:8e:a0:26: 1d:14:20:b1:2c:ad:a4:60:a7:c4:da:b7:c0:62:15: 08:5c:96:c4:b5:1c:b5:f1:06:f8:f7:9e:f8:7e:38: 87:ce:f1:a7:e5:ba:63:53:8d:f3:95:64:19:b6:ba: 0c:f7:e0:08:66:7c:17:4c:a2:81:3f:cb:7b:ef:7e: ca:00:20:46:5b:b5:db:6c:c9:b2:a3:7e:ad:dd:b3: fc:d4:71:bf:58:3b:1d:b3:a7:e4:05:ec:09:c1:8f: bb:b9:7c:03:89:a0:9b:35:77:84:5c:21:b3:1b:5a: 6a:3e:7d:51:85:18:51:82:a7:c8:5c:99:3c:d1:29: e3:48:ae:c8:03:99:78:76:b6:70:27:d9:a3:2e:af: f7:2c:3e:16:b6:0a:c1:96:b4:97:d4:8a:da:28:a2: b7:03:2c:f2:5c:c7:69:8e:ea:9a:8d:bd:b1:e5:f5: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0D:92:01:C8:37:76:A4:35:62:51:31:64:D2:EF:DD:60:EC:55:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22d71a99-e664-3ccc-9bcd-8ca3d4a241e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2a:65:92:e1:a0:54:a9:2d:9d:8b:48:8b:cd:64:7e:46:bb: 98:96:c7:37:be:85:9a:80:22:39:02:56:98:e2:3a:3e:f5:7a: 62:2d:69:88:72:1b:5e:69:e5:09:29:c1:06:e1:03:a7:2d:16: 45:2d:6b:12:c7:20:66:98:26:c3:14:65:67:be:27:97:a0:dd: 7c:b9:d9:17:81:2d:47:8a:24:63:cb:b1:26:bc:bd:da:70:d4: 16:86:df:27:c3:35:cf:48:7b:72:f1:15:81:3d:15:45:80:2e: 1f:5c:ba:36:84:91:b4:14:25:02:d6:3d:d8:7f:35:ab:e4:e8: 3c:70:38:28:b5:ec:3b:26:bf:fd:02:1c:1e:5d:9b:d0:36:83: 5b:7b:48:5a:7b:cc:e5:f3:e3:3c:fc:e3:85:24:70:78:64:d9: 73:dd:ed:c8:d5:27:f0:a2:5b:62:35:5f:4a:03:0a:c1:4e:7a: 62:b5:3e:8a:7c:75:8e:eb:b6:8b:56:0b:2c:d3:43:4d:d8:b6: e7:3b:86:53:96:12:58:25:72:b1:74:2d:f3:69:c3:eb:f1:0c: d3:6e:d7:ca:5e:00:49:91:40:21:82:b7:c5:fe:4d:ed:b4:23: c6:2b:e9:4e:62:66:37:d7:29:82:7c:b9:77:44:d0:0c:c0:73: e2:9e:ac:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKpO+Ow8jZlpcT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk NDZhYjdjZGEtNzQ0Yi00MGJmLThlMjctOWE0YTUyOWIzZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKGgEvCelzNaL4csUCNtXX3Ia3TVL4xLVg2Z 6on9RyqYla7FUGyla6lH2OWGhXEiNHokBM3HhdPAq19Q2DH5bNiv3nIVyFuQXOYX 9aewskzwW9aBlJ2OoCYdFCCxLK2kYKfE2rfAYhUIXJbEtRy18Qb49574fjiHzvGn 5bpjU43zlWQZtroM9+AIZnwXTKKBP8t7737KACBGW7XbbMmyo36t3bP81HG/WDsd s6fkBewJwY+7uXwDiaCbNXeEXCGzG1pqPn1RhRhRgqfIXJk80SnjSK7IA5l4drZw J9mjLq/3LD4WtgrBlrSX1IraKKK3AyzyXMdpjuqajb2x5fXgtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQNkgHIN3akNWJRMWTS791g7FWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJkNzFhOTktZTY2NC0z Y2NjLTliY2QtOGNhM2Q0YTI0MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMqZZLhoFSpLZ2LSIvNZH5Gu5iWxze+hZqAIjkCVpjiOj71emItaYhy G15p5QkpwQbhA6ctFkUtaxLHIGaYJsMUZWe+J5eg3Xy52ReBLUeKJGPLsSa8vdpw 1BaG3yfDNc9Ie3LxFYE9FUWALh9cujaEkbQUJQLWPdh/Navk6DxwOCi17Dsmv/0C HB5dm9A2g1t7SFp7zOXz4zz844UkcHhk2XPd7cjVJ/CiW2I1X0oDCsFOemK1Pop8 dY7rtotWCyzTQ03Ytuc7hlOWElglcrF0LfNpw+vxDNNu18peAEmRQCGCt8X+Te20 I8Yr6U5iZjfXKYJ8uXdE0AzAc+KerKA= -----END CERTIFICATE-----Generated at Wed May 13 03:08:40 2026 by rpki-client