$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa File: 2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa (raw, json) Hash identifier: NK0OypkMjpERwzbk9TONdFAuVjFewmyVNL3xIF5QN0s= Subject key identifier: EF:19:9A:8B:D2:53:D2:C1:7B:9F:C2:13:F3:29:22:AA:84:4F:9F:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB1143E04497E69BED2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.20.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:11:43:e0:44:97:e6:9b:ed:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=7542a956-6110-4fa8-a3a8-4d8b7629f131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:53:ac:08:7e:aa:b2:b1:9c:3a:0c:c6:6f: db:5f:4b:44:5b:8d:67:7a:29:29:49:de:e3:b7:5f: 40:63:b0:00:61:f6:d0:8c:07:56:1f:2f:7e:43:85: 17:a4:03:3b:9c:7e:8a:f7:48:24:f7:30:93:1f:c0: 74:2a:ab:d0:b2:99:fc:82:96:f0:7f:c9:e4:e4:f8: e0:a3:c8:1a:d8:97:d5:99:17:51:a7:95:b1:10:26: df:18:d8:7f:8d:94:f3:af:ad:4f:25:31:30:78:e4: 09:75:5e:7e:a5:6d:44:94:0d:92:44:b5:8c:49:e2: 86:ec:02:3d:dd:ec:41:88:4e:8c:07:5b:a3:2f:89: 30:41:03:f6:9b:ff:c1:40:a4:85:db:c2:ba:60:ec: 20:74:25:39:f0:60:65:29:9f:08:92:f8:95:55:b2: 14:39:90:13:a9:f5:37:76:ba:78:41:70:5f:1e:9b: aa:73:a5:3b:09:69:01:f7:4f:4e:8d:61:73:98:b4: 4d:11:5c:91:28:ae:4a:ba:ec:79:ee:f5:9b:6b:72: 81:22:66:3a:6b:11:d5:c3:e4:6a:fe:0b:1b:d9:72: 5f:af:dd:73:c4:8c:ae:10:4d:63:93:9b:77:c5:93: db:cf:26:41:c1:f7:1e:60:0b:a7:76:b5:79:cc:7f: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:19:9A:8B:D2:53:D2:C1:7B:9F:C2:13:F3:29:22:AA:84:4F:9F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4d:27:82:72:f9:a0:82:40:e7:82:20:ad:ed:f6:96:6c:5b: 1e:ed:1d:b5:69:9e:09:a1:7f:db:09:ec:1b:30:0b:30:e6:3d: a2:cf:eb:a1:fc:17:3f:fb:d8:90:f4:e0:ac:b4:ee:34:02:be: c6:ef:6e:74:42:62:1d:99:9e:fa:53:74:82:9d:c2:6c:26:ca: df:cd:20:18:20:1f:93:46:35:3a:30:c0:fc:9f:7f:fe:c5:02: fd:c5:ce:3e:b4:df:66:89:56:2d:15:19:b6:86:61:d2:8b:91: c9:29:be:60:19:57:e8:d5:ea:b8:10:4f:dc:a7:19:e6:1d:b0: be:fd:26:03:a9:01:de:ab:b8:1c:8c:26:d5:d7:36:ff:d2:e9: bf:4f:ef:9b:70:14:4e:6a:24:bc:6e:a4:f8:1d:6f:2d:48:77: 80:9f:58:8b:b2:8d:7c:9d:a1:eb:2a:1e:a3:52:54:a5:ec:1d: 53:d0:40:5c:ad:d0:93:a4:81:16:e7:53:fc:86:be:d7:8d:3f: fe:8b:e2:6c:e2:8d:d2:fa:e4:be:4c:c5:be:61:5d:ed:27:66: 34:74:b1:23:89:b4:9b:55:32:31:64:67:5e:26:69:a6:0f:cf: 93:47:46:55:13:70:7a:2a:f5:ab:cb:b7:db:51:cb:a2:d1:b2: 97:75:3e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xFD4ESX5pvtI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NzU0MmE5NTYtNjExMC00ZmE4LWEzYTgtNGQ4Yjc2MjlmMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysZTrAh+qrKxnDoMxm/bX0tEW41neikpSd7j t19AY7AAYfbQjAdWHy9+Q4UXpAM7nH6K90gk9zCTH8B0KqvQspn8gpbwf8nk5Pjg o8ga2JfVmRdRp5WxECbfGNh/jZTzr61PJTEweOQJdV5+pW1ElA2SRLWMSeKG7AI9 3exBiE6MB1ujL4kwQQP2m//BQKSF28K6YOwgdCU58GBlKZ8IkviVVbIUOZATqfU3 drp4QXBfHpuqc6U7CWkB909OjWFzmLRNEVyRKK5Kuux57vWba3KBImY6axHVw+Rq /gsb2XJfr91zxIyuEE1jk5t3xZPbzyZBwfceYAundrV5zH+VlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8ZmovSU9LBe5/CE/MpIqqET5/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE5ZjZkMDktZGMxZC0z YTZhLWJmNDMtMjZiMzg2MTNhZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxNJ4Jy+aCCQOeCIK3t9pZsWx7tHbVpngmhf9sJ7BswCzDmPaLP66H8 Fz/72JD04Ky07jQCvsbvbnRCYh2ZnvpTdIKdwmwmyt/NIBggH5NGNTowwPyff/7F Av3Fzj6032aJVi0VGbaGYdKLkckpvmAZV+jV6rgQT9ynGeYdsL79JgOpAd6ruByM JtXXNv/S6b9P75twFE5qJLxupPgdby1Id4CfWIuyjXydoesqHqNSVKXsHVPQQFyt 0JOkgRbnU/yGvteNP/6L4mzijdL65L5Mxb5hXe0nZjR0sSOJtJtVMjFkZ14maaYP z5NHRlUTcHoq9avLt9tRy6LRspd1PlY= -----END CERTIFICATE-----Generated at Wed May 13 08:57:47 2026 by rpki-client