$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa File: 4c5f2c02-022b-371a-8966-9ae694c3b539.roa (raw, json) Hash identifier: FJHCiSHjfnoTsy3rOS3x2NPyAg6nCYQnHMSVor5Udlk= Subject key identifier: CB:6C:CD:1B:B3:F3:1D:6C:5A:D6:20:AF:E3:2E:51:E4:47:1F:46:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB116AE614E3CB3A41C0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.20.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:11:6a:e6:14:e3:cb:3a:41:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=4a3135ce-d3a7-432b-b14c-eb0525e4b3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:e9:d1:ad:63:09:5b:2e:20:b4:b3:6b:0e: 61:5b:98:b3:b5:c2:24:57:c4:2f:b1:de:f8:35:8d: 9d:7f:fd:63:fe:5e:f6:af:34:dd:88:55:ec:21:13: 54:84:64:f4:1e:93:f2:9b:1d:9a:91:a7:e3:1b:b9: 48:4c:5c:11:81:ed:dc:2a:93:94:58:10:34:70:ee: 72:33:cc:77:b5:6e:bb:d8:4e:e7:13:8c:74:59:32: 3b:f1:40:ae:2b:dd:fe:cb:50:5c:68:dc:a8:fd:1b: 9c:d1:73:83:21:0b:a5:02:f9:72:ac:1f:a7:77:46: 53:51:4c:b4:fc:9b:a4:78:5b:44:02:f0:e9:b9:a4: bd:c4:25:0c:15:85:ef:df:a8:b6:5e:c9:57:54:63: 11:88:58:a7:b4:c4:91:83:c4:12:b9:82:b4:8a:41: e7:25:6a:73:ee:22:43:f5:81:66:ce:78:1f:eb:f4: c7:19:71:ec:e4:16:0c:03:94:0c:d5:42:a5:c0:d6: c1:bb:5c:af:04:3b:af:d1:e5:45:17:55:0f:1f:4f: ad:ce:5c:dd:84:66:57:29:c4:23:07:a3:41:5c:70: f5:9b:ec:20:b0:12:2d:b4:f7:1b:6a:b6:2a:a3:0c: f3:76:93:ca:e9:c9:ce:54:8b:f0:7b:b6:c7:24:7d: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6C:CD:1B:B3:F3:1D:6C:5A:D6:20:AF:E3:2E:51:E4:47:1F:46:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:5f:d9:43:d2:a9:40:30:24:9b:fb:e4:0c:8e:d5:71:c8:01: 0d:47:0b:57:00:42:e3:9a:be:c4:1c:cb:3e:99:56:d1:af:a8: 50:a0:7f:a6:e1:b9:53:64:72:91:1e:a8:f8:1b:b0:7a:77:25: 84:4b:a6:64:e8:f2:ed:1f:f1:ef:b6:71:fd:e8:15:22:68:87: 86:70:1f:4b:e9:22:a3:46:23:0c:e3:5e:86:75:5a:b2:0b:41: 4b:56:f8:d9:75:06:8c:b7:6c:55:83:dd:66:e6:e9:b7:75:9d: 44:b5:26:92:75:a4:cb:42:89:da:fe:cf:a8:fc:73:f3:4d:7a: 1d:10:f0:97:e2:94:03:3f:4b:c4:07:f9:41:e7:e1:64:20:ad: 5a:29:b3:a6:c7:95:90:55:65:b6:1f:5f:99:ae:ad:fe:d7:39: 73:ac:14:a8:5c:e9:81:03:48:8b:52:4c:83:1b:2d:fa:7a:ec: f9:1c:5a:69:2c:ec:b8:86:f2:44:b8:10:47:3d:75:45:49:9d: 9e:11:bf:b3:f6:a5:41:9a:89:fd:9e:07:42:29:32:d8:e2:04: 5b:fb:cb:51:51:c4:d5:e8:86:ba:38:6d:04:4f:a0:9b:7e:fd: eb:6e:d0:a7:60:9b:e2:41:d0:c1:18:2a:e7:50:da:08:10:b2: 71:12:56:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xFq5hTjyzpBwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NGEzMTM1Y2UtZDNhNy00MzJiLWIxNGMtZWIwNTI1ZTRiM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWPp0a1jCVsuILSzaw5hW5iztcIkV8Qvsd74 NY2df/1j/l72rzTdiFXsIRNUhGT0HpPymx2akafjG7lITFwRge3cKpOUWBA0cO5y M8x3tW672E7nE4x0WTI78UCuK93+y1BcaNyo/Ruc0XODIQulAvlyrB+nd0ZTUUy0 /JukeFtEAvDpuaS9xCUMFYXv36i2XslXVGMRiFintMSRg8QSuYK0ikHnJWpz7iJD 9YFmzngf6/THGXHs5BYMA5QM1UKlwNbBu1yvBDuv0eVFF1UPH0+tzlzdhGZXKcQj B6NBXHD1m+wgsBIttPcbarYqowzzdpPK6cnOVIvwe7bHJH0nlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtszRuz8x1sWtYgr+MuUeRHH0bgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM1ZjJjMDItMDIyYi0z NzFhLTg5NjYtOWFlNjk0YzNiNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9f2UPSqUAwJJv75AyO1XHIAQ1HC1cAQuOavsQcyz6ZVtGvqFCgf6bh uVNkcpEeqPgbsHp3JYRLpmTo8u0f8e+2cf3oFSJoh4ZwH0vpIqNGIwzjXoZ1WrIL QUtW+Nl1Boy3bFWD3Wbm6bd1nUS1JpJ1pMtCidr+z6j8c/NNeh0Q8JfilAM/S8QH +UHn4WQgrVops6bHlZBVZbYfX5murf7XOXOsFKhc6YEDSItSTIMbLfp67PkcWmks 7LiG8kS4EEc9dUVJnZ4Rv7P2pUGaif2eB0IpMtjiBFv7y1FRxNXohro4bQRPoJt+ /etu0Kdgm+JB0MEYKudQ2ggQsnESVlM= -----END CERTIFICATE-----Generated at Wed May 13 12:37:53 2026 by rpki-client