$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa File: 2532e085-e8d5-3931-b788-c0515f773874.roa (raw, json) Hash identifier: Zfau5lsZ+IL7LeWNaihXbQFsQZkdojQf6zKQYmk9tUA= Subject key identifier: D6:25:7B:FC:F8:C4:94:04:46:92:B6:10:82:5C:A1:84:92:34:A4:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D8C2A9AE826E2DF59ECA63028 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 98.19.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9a:e8:26:e2:df:59:ec:a6:30:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=4c8d4784-db71-4cb9-8ff5-15a54f713577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:cc:b2:dd:dc:18:07:aa:62:d4:82:4e:7d: 25:ec:ee:8b:f4:5d:97:92:6f:a3:de:90:b3:c1:78: dd:c1:8f:a4:cf:3e:89:b0:ec:19:81:32:a4:d3:60: f7:7b:88:52:eb:74:c0:45:8a:93:5c:3f:aa:1c:cb: 8b:02:18:ef:64:05:03:0b:6a:91:6a:65:a6:a0:5d: a1:61:92:0f:03:68:36:54:6e:ac:93:4d:08:b0:8c: 9d:fa:bd:f2:8d:b1:89:51:ff:a6:e9:f2:d3:9f:52: e4:44:b1:05:d1:6a:69:9a:08:f9:9a:e8:cb:d4:de: 67:89:4b:66:30:8a:8d:37:53:70:1d:95:93:6c:28: e3:17:12:27:9e:42:f7:09:b3:c0:41:d3:1e:cb:33: 31:8e:0a:84:5d:50:9f:67:55:68:d9:8e:a3:52:25: ce:fe:56:05:42:71:2b:3e:a0:6a:c7:cd:77:34:6d: 41:27:4d:53:2b:1c:2e:31:bf:8f:eb:ca:56:2e:b3: 15:a1:cc:89:c1:3c:c1:f2:b3:63:40:9c:3a:26:f3: f5:07:ea:bf:f0:3b:80:dd:8e:cd:a0:c8:4e:6f:c5: f2:93:a9:86:db:25:f6:b0:34:b6:dd:1e:c4:63:74: b4:66:63:a1:e3:db:16:a3:87:c1:e0:d1:9a:1f:af: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:7B:FC:F8:C4:94:04:46:92:B6:10:82:5C:A1:84:92:34:A4:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:87:45:0b:f1:6c:a7:c3:9a:56:ab:3b:93:59:08:9d:97:54: 3f:8e:58:77:bf:be:8c:c6:79:fd:14:a3:d2:4f:8f:bb:1f:91: 25:45:f4:21:96:f2:f2:2d:aa:b0:c3:e6:20:ac:3a:af:c4:d7: 8f:da:11:5a:f8:d0:55:17:7e:4e:e1:e9:65:f8:e9:2e:0d:99: 52:8b:db:24:b3:b5:77:a1:98:15:3d:55:29:c5:e0:1c:cc:5b: 82:3c:c9:d4:13:39:5e:a4:ab:73:fa:85:97:e8:88:65:ca:78: f1:20:60:01:9f:3f:81:e9:af:6d:aa:93:a6:f9:89:dd:89:02: 3b:d4:c9:e6:bf:7b:cd:d4:bc:12:01:3a:19:7a:1e:40:c6:2c: 71:e6:1f:a6:a3:41:10:b8:97:39:a2:a7:2f:20:00:12:53:f8: 9a:bc:9b:19:e0:21:bc:71:f8:6d:4b:f4:6e:9f:50:b5:b8:80: 7e:03:0f:a1:b9:54:47:68:09:44:fe:3b:ed:0d:b8:13:8e:16: c3:38:9e:ff:72:33:72:6b:27:13:19:d9:2f:95:eb:9e:30:b6: 73:62:33:d6:dd:8d:f3:9d:0e:32:f0:c3:5e:43:93:7e:74:62: 44:2a:ec:fa:9b:70:83:72:59:a1:a9:b1:cd:03:4a:4b:a5:36: c0:d3:9c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKproJuLfWeymMCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk NGM4ZDQ3ODQtZGI3MS00Y2I5LThmZjUtMTVhNTRmNzEzNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWnMst3cGAeqYtSCTn0l7O6L9F2Xkm+j3pCz wXjdwY+kzz6JsOwZgTKk02D3e4hS63TARYqTXD+qHMuLAhjvZAUDC2qRamWmoF2h YZIPA2g2VG6sk00IsIyd+r3yjbGJUf+m6fLTn1LkRLEF0Wppmgj5mujL1N5niUtm MIqNN1NwHZWTbCjjFxInnkL3CbPAQdMeyzMxjgqEXVCfZ1Vo2Y6jUiXO/lYFQnEr PqBqx813NG1BJ01TKxwuMb+P68pWLrMVocyJwTzB8rNjQJw6JvP1B+q/8DuA3Y7N oMhOb8Xyk6mG2yX2sDS23R7EY3S0ZmOh49sWo4fB4NGaH681yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYle/z4xJQERpK2EIJcoYSSNKRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjUzMmUwODUtZThkNS0z OTMxLWI3ODgtYzA1MTVmNzczODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2HRQvxbKfDmlarO5NZCJ2XVD+OWHe/vozGef0Uo9JPj7sfkSVF9CGW 8vItqrDD5iCsOq/E14/aEVr40FUXfk7h6WX46S4NmVKL2ySztXehmBU9VSnF4BzM W4I8ydQTOV6kq3P6hZfoiGXKePEgYAGfP4Hpr22qk6b5id2JAjvUyea/e83UvBIB Ohl6HkDGLHHmH6ajQRC4lzmipy8gABJT+Jq8mxngIbxx+G1L9G6fULW4gH4DD6G5 VEdoCUT+O+0NuBOOFsM4nv9yM3JrJxMZ2S+V654wtnNiM9bdjfOdDjLww15Dk350 YkQq7PqbcINyWaGpsc0DSkulNsDTnO4= -----END CERTIFICATE-----Generated at Wed May 13 08:13:16 2026 by rpki-client