$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa File: 38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa (raw, json) Hash identifier: w7V0u5fwSNJxeEICcahzFNYvVL9AxmaW2Y9uwhJ1IsI= Subject key identifier: E3:CD:F5:69:B3:7B:6E:8C:61:4B:29:16:38:FD:E3:7A:C8:C6:A1:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB11B1E80D6954ACE3E440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:11:b1:e8:0d:69:54:ac:e3:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=f20d5c5f-c34a-40ff-aad1-28968e5f4f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:71:b3:66:b8:01:59:6e:39:d0:0d:f9:0a: 81:44:d6:2b:fd:28:71:e3:b9:22:42:8c:4f:f6:d4: d6:5a:dd:9a:21:e3:41:9a:3c:bb:bf:0d:d7:e7:60: 51:67:cf:45:93:4a:d7:de:c3:77:eb:41:55:28:2e: 94:af:5a:72:3e:68:46:86:2e:07:b5:51:2c:45:79: 79:d7:ef:f4:90:77:0d:9a:46:a2:b1:62:df:68:0b: fe:a8:2f:b1:c4:41:ec:29:0a:b9:e9:fe:60:10:e1: 59:be:de:28:6d:e7:ed:ef:e2:49:2d:ab:1f:09:a4: c8:4e:95:05:a4:63:1e:e7:38:a6:6c:42:45:21:cd: fa:0f:28:b2:31:a8:cf:0f:11:13:55:fc:8a:30:c0: 0c:3a:4d:97:1e:43:e0:d0:16:77:a0:3c:cf:1a:48: 05:a6:d1:79:97:65:21:48:30:85:dc:fd:91:e4:c3: 05:f1:3e:d1:09:a1:40:4c:c2:67:9f:f9:38:3a:e6: 10:65:0c:af:63:7d:42:b9:38:88:04:3a:10:c7:74: 18:06:2e:77:9e:a5:7d:8d:6b:0c:29:a0:f8:3f:83: e9:63:9a:5f:0a:ef:50:54:ba:16:0a:b5:a5:3f:df: 93:21:64:91:3a:e2:9c:dc:b7:f1:93:5b:99:0a:41: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CD:F5:69:B3:7B:6E:8C:61:4B:29:16:38:FD:E3:7A:C8:C6:A1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0f:96:fc:a0:e5:80:6b:d0:1d:c0:9c:ba:12:53:c0:84:6e: 44:6f:ef:1d:60:28:5a:d7:25:9f:e8:b2:c6:47:d9:52:c9:75: 7a:11:02:43:38:c3:cd:1e:ee:77:8b:bc:0c:de:9e:90:0c:2b: 6a:93:01:a9:e2:73:84:4c:e0:cb:77:d4:8d:a3:c1:0c:b1:ec: 27:c0:da:48:7c:a4:55:f3:a5:e7:ff:b3:77:bd:e3:b3:20:b6: 5f:2a:53:eb:ab:89:0e:dd:0a:98:be:c3:93:f7:05:c2:4e:3c: f8:b6:e2:2a:25:3d:f9:4a:b0:55:c0:20:7f:95:5c:9c:a8:14: dd:87:6f:96:2e:94:c0:7a:94:61:e3:6f:13:70:37:ca:17:37: 42:6c:7f:33:65:52:ce:4d:62:b8:7d:e7:55:e2:a3:d4:9e:f3: 3a:a2:f4:21:bc:29:9a:67:20:07:2c:f0:f5:1d:25:fa:b0:ad: a3:c1:45:29:36:14:03:f7:cd:d8:ac:c2:22:47:19:ec:89:ae: ef:03:33:ca:c9:8f:e5:86:85:f9:ed:d6:9f:e5:b1:8e:c7:14: d4:e5:d0:17:e5:a8:81:f0:fa:67:09:ee:de:63:16:b8:f2:12: b1:4b:66:b5:c3:a5:0a:65:05:b2:d0:22:ad:8d:68:87:c4:02: 90:51:64:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xGx6A1pVKzj5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZjIwZDVjNWYtYzM0YS00MGZmLWFhZDEtMjg5NjhlNWY0ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr9xs2a4AVluOdAN+QqBRNYr/Shx47kiQoxP 9tTWWt2aIeNBmjy7vw3X52BRZ89Fk0rX3sN360FVKC6Ur1pyPmhGhi4HtVEsRXl5 1+/0kHcNmkaisWLfaAv+qC+xxEHsKQq56f5gEOFZvt4obeft7+JJLasfCaTITpUF pGMe5zimbEJFIc36DyiyMajPDxETVfyKMMAMOk2XHkPg0BZ3oDzPGkgFptF5l2Uh SDCF3P2R5MMF8T7RCaFATMJnn/k4OuYQZQyvY31CuTiIBDoQx3QYBi53nqV9jWsM KaD4P4PpY5pfCu9QVLoWCrWlP9+TIWSROuKc3Lfxk1uZCkGPwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPN9Wmze26MYUspFjj943rIxqHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhmZTgzZTgtMmJhMC0z ZDkyLWJlZTMtMjliYjIwN2E5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkPlvyg5YBr0B3AnLoSU8CEbkRv7x1gKFrXJZ/ossZH2VLJdXoRAkM4 w80e7neLvAzenpAMK2qTAanic4RM4Mt31I2jwQyx7CfA2kh8pFXzpef/s3e947Mg tl8qU+uriQ7dCpi+w5P3BcJOPPi24iolPflKsFXAIH+VXJyoFN2Hb5YulMB6lGHj bxNwN8oXN0JsfzNlUs5NYrh951Xio9Se8zqi9CG8KZpnIAcs8PUdJfqwraPBRSk2 FAP3zdiswiJHGeyJru8DM8rJj+WGhfnt1p/lsY7HFNTl0BflqIHw+mcJ7t5jFrjy ErFLZrXDpQplBbLQIq2NaIfEApBRZPo= -----END CERTIFICATE-----Generated at Wed May 13 06:14:01 2026 by rpki-client