$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa File: 37e2a1fd-6045-3704-9912-f89b40158f53.roa (raw, json) Hash identifier: Jel40LfYdnnEVBoqO2ltkGlirVUAoZgjCiy4MyxiEWo= Subject key identifier: E7:20:28:8E:89:3F:46:02:6D:3B:34:AE:1D:9F:06:BE:7C:56:A9:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB1182BF27FFE30A7FBA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.20.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:11:82:bf:27:ff:e3:0a:7f:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=7861bfdd-21cb-4d4f-9ca6-466fc7f9b7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d2:6b:0a:6b:fa:ea:94:95:22:d9:f2:6e:1d: d8:c8:9a:5e:7c:6a:d8:06:04:d6:43:4c:2c:34:bb: cf:05:96:98:b5:1b:58:ee:0b:4a:55:1a:87:d9:0d: 13:46:85:40:c4:5d:ce:c0:f8:4c:a5:5f:36:05:cf: 5b:17:a1:97:db:ba:d6:25:e5:e0:87:fc:42:dd:7b: 67:f7:f2:d6:87:40:b1:3a:83:77:59:80:b9:f1:96: af:1d:5e:1e:95:32:63:fb:fe:ab:7d:2d:9c:16:aa: 06:26:a4:0a:41:af:7a:16:48:9c:d6:b6:15:4d:82: 55:f0:0f:26:e0:a2:e5:46:44:33:94:31:e2:65:18: db:77:6d:d8:29:df:bb:06:70:45:36:b0:9e:06:ba: 2d:ce:2e:21:50:50:56:d3:c1:b6:68:dd:4d:ef:ac: 45:b4:74:db:4a:68:7f:c6:3a:6a:e5:d3:93:5e:1a: c0:e9:ee:66:1b:46:49:08:85:e1:6b:30:1f:31:05: c7:97:96:60:b8:9a:85:17:8f:5b:f6:a8:5f:a7:85: f7:88:6f:4d:29:73:43:ac:67:b5:2d:a1:cb:0b:59: b1:0e:f0:7c:df:f3:a9:28:10:12:53:c1:4e:c3:b0: f7:84:9e:6e:c1:3b:7c:a1:2c:35:b9:42:ee:80:a6: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:28:8E:89:3F:46:02:6D:3B:34:AE:1D:9F:06:BE:7C:56:A9:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:25:71:b2:05:f0:09:de:ee:a4:d1:bc:6d:a0:2a:e5:e8:f3: 0d:f3:cb:e6:14:41:2e:b8:d2:d3:23:33:e0:af:68:c7:5e:b4: 52:89:fc:5e:31:ad:5d:76:f4:e0:ea:fc:18:6a:36:30:3d:22: fb:d7:2a:7d:18:2d:bb:e0:7f:77:c5:56:e1:21:d8:62:24:7e: 08:70:91:25:4b:f6:60:2f:c0:60:9d:1b:11:2c:33:a2:7e:72: ed:fe:53:ea:bb:1c:ee:f4:d3:46:c5:9a:bf:de:4c:77:4e:8d: e9:28:6a:71:a8:06:82:6c:49:47:28:30:ad:1b:99:0b:91:3d: ae:c6:f6:24:42:95:40:c5:a9:25:2b:07:ed:61:dc:03:4b:a8: 4d:8a:13:14:f0:b3:55:93:68:50:d8:01:43:34:dc:d4:6e:17: 67:57:31:9f:fd:a4:7c:05:e8:1f:7d:e6:f6:39:4d:67:dc:6f: 27:c1:51:b6:a6:03:83:29:77:f7:0e:d6:3b:a4:07:1b:cf:75: 02:d1:8d:ec:ea:ab:1a:43:98:cb:9b:49:be:7e:9f:86:7e:82: db:d5:ea:61:69:14:5b:df:3a:39:61:fc:a7:7b:15:df:ac:08: d8:5e:57:fd:76:ae:fe:4f:bb:43:56:9f:0c:55:86:93:ec:ff: 94:ba:79:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xGCvyf/4wp/ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk Nzg2MWJmZGQtMjFjYi00ZDRmLTljYTYtNDY2ZmM3ZjliN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltJrCmv66pSVItnybh3YyJpefGrYBgTWQ0ws NLvPBZaYtRtY7gtKVRqH2Q0TRoVAxF3OwPhMpV82Bc9bF6GX27rWJeXgh/xC3Xtn 9/LWh0CxOoN3WYC58ZavHV4elTJj+/6rfS2cFqoGJqQKQa96Fkic1rYVTYJV8A8m 4KLlRkQzlDHiZRjbd23YKd+7BnBFNrCeBrotzi4hUFBW08G2aN1N76xFtHTbSmh/ xjpq5dOTXhrA6e5mG0ZJCIXhazAfMQXHl5ZguJqFF49b9qhfp4X3iG9NKXNDrGe1 LaHLC1mxDvB83/OpKBASU8FOw7D3hJ5uwTt8oSw1uULugKY5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcgKI6JP0YCbTs0rh2fBr58VqloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdlMmExZmQtNjA0NS0z NzA0LTk5MTItZjg5YjQwMTU4ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYlcbIF8Ane7qTRvG2gKuXo8w3zy+YUQS640tMjM+CvaMdetFKJ/F4x rV129ODq/BhqNjA9IvvXKn0YLbvgf3fFVuEh2GIkfghwkSVL9mAvwGCdGxEsM6J+ cu3+U+q7HO7000bFmr/eTHdOjekoanGoBoJsSUcoMK0bmQuRPa7G9iRClUDFqSUr B+1h3ANLqE2KExTws1WTaFDYAUM03NRuF2dXMZ/9pHwF6B995vY5TWfcbyfBUbam A4Mpd/cO1jukBxvPdQLRjezqqxpDmMubSb5+n4Z+gtvV6mFpFFvfOjlh/Kd7Fd+s CNheV/12rv5Pu0NWnwxVhpPs/5S6ebQ= -----END CERTIFICATE-----Generated at Wed May 13 14:30:37 2026 by rpki-client