$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41bc662b-447c-3f01-a427-74675a6fa6fa.roa File: 41bc662b-447c-3f01-a427-74675a6fa6fa.roa (raw, json) Hash identifier: y+S9lN7o6cDez0OR/rcfy8y1XyfxxHbHrXvFU9glI7c= Subject key identifier: 41:E2:39:77:19:44:A3:4A:56:F4:4A:91:0D:68:27:37:DC:40:60:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB10E2438B43CDDA918DB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41bc662b-447c-3f01-a427-74675a6fa6fa.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.16.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:10:e2:43:8b:43:cd:da:91:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=c70a6f56-68a0-45a8-ba6c-b94083e5a5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:1a:02:ac:dc:a4:f7:9b:04:4a:1d:22:93: cf:8b:d0:1d:32:43:53:a4:5e:89:27:6f:a3:f9:e1: 53:cf:8e:35:88:88:d8:56:13:37:ba:fc:13:4e:ff: 19:e6:2d:2a:90:07:07:df:2b:20:9f:70:42:26:22: ec:ea:c8:c0:4b:f5:db:8f:99:c7:97:45:a5:fc:b5: 38:9c:30:21:be:7b:0c:58:db:95:e1:4f:50:4a:e9: a2:64:de:5d:ac:e0:3d:ba:a3:db:ee:cf:5c:18:eb: ea:c5:62:ef:94:b7:5e:7d:58:cf:4f:1e:d6:4f:e2: fb:18:e0:25:1b:66:87:7b:10:99:0f:a3:f6:a9:d2: dc:40:61:da:63:13:27:ae:19:1c:30:02:87:7c:0b: 32:65:c2:30:9a:3d:14:57:c6:b2:41:6b:cd:29:3a: e3:79:38:af:5a:71:6d:27:2d:2f:ce:a0:c2:d0:b6: 1a:4a:5e:11:7e:1d:95:5d:83:c3:39:71:d2:41:4c: 39:35:b6:f9:6e:57:f6:37:19:2d:17:1c:32:40:48: a1:26:e0:31:b4:e9:b8:fa:72:b5:bf:81:07:5b:ef: fc:a9:68:cd:c3:92:61:a7:85:f7:ff:a3:d6:3c:81: 0a:ca:3a:17:56:79:a0:f9:73:bf:9a:9b:d5:ad:3d: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E2:39:77:19:44:A3:4A:56:F4:4A:91:0D:68:27:37:DC:40:60:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41bc662b-447c-3f01-a427-74675a6fa6fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6f:ca:dc:71:be:44:e7:91:09:17:c6:dd:d0:5d:55:5f:66: 64:e4:88:99:39:b7:99:6d:68:03:26:1d:e7:b6:57:cb:52:3e: cc:87:5f:7b:48:e1:e8:5b:f2:7d:ac:fc:68:aa:b2:f0:44:f2: 96:40:d1:5d:81:79:b3:03:9a:ed:db:c3:ca:ff:ba:46:27:98: 8a:3a:d3:b9:1e:1f:6a:8f:bf:84:c5:00:e4:d6:f5:52:cc:0d: 00:99:0b:87:30:ad:15:66:7d:83:58:cc:c5:04:a8:ec:b6:52: 7c:a7:ce:9f:4a:a4:1a:0a:44:b3:9b:c1:53:1d:f0:75:44:56: 7c:1e:ac:bb:46:a6:ec:63:2c:11:93:84:17:1a:3c:49:03:22: e6:51:19:d7:97:6f:f2:9f:f1:1f:23:2c:11:1e:a7:09:66:3b: 1c:12:cd:9f:96:e9:27:12:54:7b:f5:d7:18:b4:12:12:c4:d9: 8a:7d:30:85:70:03:cf:3b:81:95:0e:e9:6c:a1:a8:20:44:1d: ee:9c:8e:37:b2:16:f4:1c:f6:7e:d2:c2:c3:d3:d1:90:c2:ae: 19:10:57:7c:99:1d:08:e9:a9:f2:01:53:e6:4e:fc:a0:f1:26: 0d:8a:2b:7c:c9:73:d0:5d:f0:00:22:fb:38:c4:34:5a:eb:e3: e9:56:d9:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xDiQ4tDzdqRjbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk YzcwYTZmNTYtNjhhMC00NWE4LWJhNmMtYjk0MDgzZTVhNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ4aAqzcpPebBEodIpPPi9AdMkNTpF6JJ2+j +eFTz441iIjYVhM3uvwTTv8Z5i0qkAcH3ysgn3BCJiLs6sjAS/Xbj5nHl0Wl/LU4 nDAhvnsMWNuV4U9QSumiZN5drOA9uqPb7s9cGOvqxWLvlLdefVjPTx7WT+L7GOAl G2aHexCZD6P2qdLcQGHaYxMnrhkcMAKHfAsyZcIwmj0UV8ayQWvNKTrjeTivWnFt Jy0vzqDC0LYaSl4Rfh2VXYPDOXHSQUw5Nbb5blf2NxktFxwyQEihJuAxtOm4+nK1 v4EHW+/8qWjNw5Jhp4X3/6PWPIEKyjoXVnmg+XO/mpvVrT0jjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHiOXcZRKNKVvRKkQ1oJzfcQGBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFiYzY2MmItNDQ3Yy0z ZjAxLWE0MjctNzQ2NzVhNmZhNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhvytxxvkTnkQkXxt3QXVVfZmTkiJk5t5ltaAMmHee2V8tSPsyHX3tI 4ehb8n2s/GiqsvBE8pZA0V2BebMDmu3bw8r/ukYnmIo607keH2qPv4TFAOTW9VLM DQCZC4cwrRVmfYNYzMUEqOy2Unynzp9KpBoKRLObwVMd8HVEVnwerLtGpuxjLBGT hBcaPEkDIuZRGdeXb/Kf8R8jLBEepwlmOxwSzZ+W6ScSVHv11xi0EhLE2Yp9MIVw A887gZUO6WyhqCBEHe6cjjeyFvQc9n7SwsPT0ZDCrhkQV3yZHQjpqfIBU+ZO/KDx Jg2KK3zJc9Bd8AAi+zjENFrr4+lW2aE= -----END CERTIFICATE-----Generated at Wed May 13 08:18:03 2026 by rpki-client