$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa File: 2a4a1f38-23a1-3489-ac54-76169819c152.roa (raw, json) Hash identifier: pRkP8a4rg6HDTV3VY+JVsP6DWZU0J0HFES0hTM/ivGg= Subject key identifier: 47:8F:D7:17:3A:7A:CA:20:C7:42:0F:3F:2E:2D:C9:96:BB:80:62:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB1239723653258E966B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.23.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:12:39:72:36:53:25:8e:96:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=ed203d57-5068-4f04-b3d9-6f73c58fdb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:e5:ba:34:fd:c8:2a:5d:65:1d:ef:3b:80: 18:33:06:5a:8f:47:6a:14:f7:62:f6:89:13:bc:40: a9:02:0b:d8:4f:e4:88:69:37:b2:fe:f9:9a:a5:8e: d7:a6:bb:25:9c:ed:be:24:bd:ec:cb:94:2a:c2:43: 36:33:3b:99:8a:bf:31:32:f6:96:28:90:6a:a6:ae: d4:66:97:0a:09:8c:52:f7:a9:85:51:c6:98:91:c1: bf:9d:e5:d5:1f:29:dd:9e:26:2b:84:aa:e3:94:d0: 8c:2a:25:36:53:7e:32:a6:14:d8:06:68:aa:04:e9: 79:62:d6:b9:fc:30:63:05:48:b8:aa:e1:6b:be:5c: 6e:7b:ca:2e:81:da:8d:60:de:ce:77:8b:9e:e7:33: ee:d3:4e:7f:b9:08:38:c8:b2:66:6f:9c:2c:79:21: a9:59:34:45:05:76:bf:63:77:1e:de:7a:d1:e6:ad: a3:1b:0a:ed:3f:fd:35:c2:70:df:0a:b9:db:84:64: de:f4:81:6d:5e:f5:80:b2:f8:7b:35:3c:ca:1f:a0: 81:1b:66:c3:cc:48:ed:d9:00:a8:7b:ef:a0:33:4d: 68:05:31:2d:65:a4:3c:71:d5:c2:75:03:de:48:42: c2:d7:de:f5:74:11:8b:4c:3e:2b:c5:bf:12:27:2b: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:D7:17:3A:7A:CA:20:C7:42:0F:3F:2E:2D:C9:96:BB:80:62:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e3:8d:79:d4:b0:a7:9d:71:63:d5:0b:b9:f3:e5:94:d5:23: 84:59:ed:be:5a:b9:2a:05:48:40:ba:05:c4:5d:ae:f8:f7:57: 0a:08:ec:96:05:08:8e:d9:2f:71:c2:cc:43:1c:0c:67:87:bb: 55:09:3f:9b:88:6b:36:79:da:0b:b2:e5:7e:ff:0c:7d:9b:2b: 92:8b:bb:a2:2c:36:05:9d:5f:55:c8:d7:50:bc:67:f3:3d:2d: 30:d4:84:42:78:e3:d6:c2:f0:c5:25:24:26:78:7b:2e:f6:48: 17:1c:5d:06:9b:8d:42:af:a6:58:b5:fc:50:bf:da:d0:24:b2: 6b:04:bb:21:b7:c1:e9:aa:fd:c2:81:ef:f1:96:45:50:96:a4: 58:7a:19:61:79:3d:ee:5c:2e:55:ed:f8:34:69:8c:ac:96:3a: 2c:dc:68:96:69:49:dc:99:6b:b2:43:1e:10:9e:c0:52:e1:6e: 43:c4:55:4c:82:73:ab:c8:e9:5d:6e:af:b5:97:96:69:fd:07: 6a:1f:8a:b3:45:39:24:8c:cf:8b:e8:4e:70:59:f7:ff:df:26: 12:25:3a:34:60:d0:b8:d3:9d:aa:70:71:d0:03:9c:47:c6:1a: 81:a6:77:fc:0d:f8:04:4a:1e:22:ba:68:e9:d2:0d:62:b6:06: d3:51:4e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xI5cjZTJY6WawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWQyMDNkNTctNTA2OC00ZjA0LWIzZDktNmY3M2M1OGZkYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgTlujT9yCpdZR3vO4AYMwZaj0dqFPdi9okT vECpAgvYT+SIaTey/vmapY7XprslnO2+JL3sy5QqwkM2MzuZir8xMvaWKJBqpq7U ZpcKCYxS96mFUcaYkcG/neXVHyndniYrhKrjlNCMKiU2U34yphTYBmiqBOl5Yta5 /DBjBUi4quFrvlxue8ougdqNYN7Od4ue5zPu005/uQg4yLJmb5wseSGpWTRFBXa/ Y3ce3nrR5q2jGwrtP/01wnDfCrnbhGTe9IFtXvWAsvh7NTzKH6CBG2bDzEjt2QCo e++gM01oBTEtZaQ8cdXCdQPeSELC1971dBGLTD4rxb8SJyv1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeP1xc6esogx0IPPy4tyZa7gGLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0YTFmMzgtMjNhMS0z NDg5LWFjNTQtNzYxNjk4MTljMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrjjXnUsKedcWPVC7nz5ZTVI4RZ7b5auSoFSEC6BcRdrvj3VwoI7JYF CI7ZL3HCzEMcDGeHu1UJP5uIazZ52guy5X7/DH2bK5KLu6IsNgWdX1XI11C8Z/M9 LTDUhEJ449bC8MUlJCZ4ey72SBccXQabjUKvpli1/FC/2tAksmsEuyG3wemq/cKB 7/GWRVCWpFh6GWF5Pe5cLlXt+DRpjKyWOizcaJZpSdyZa7JDHhCewFLhbkPEVUyC c6vI6V1ur7WXlmn9B2ofirNFOSSMz4voTnBZ9//fJhIlOjRg0LjTnapwcdADnEfG GoGmd/wN+ARKHiK6aOnSDWK2BtNRTqA= -----END CERTIFICATE-----Generated at Wed May 13 12:56:19 2026 by rpki-client