$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa File: 8f4b3c29-f04f-376c-b398-03b99174ddb1.roa (raw, json) Hash identifier: cwTQVwzajmp7RsrX3ZOCm/utQh9wXXZf6CocV15aQD0= Subject key identifier: 25:D0:3A:67:DC:0B:21:BB:F1:43:C6:02:D3:C9:2A:2C:AB:15:B3:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DB77039269EEF783FF3A28100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 7029 IP address blocks: 98.22.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:39:26:9e:ef:78:3f:f3:a2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=c8b9699d-0096-430e-b015-a5ff9f7f904f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:df:9b:ba:37:3b:4d:2b:8e:fa:d7:23:55: 27:b9:36:6e:fe:74:78:8f:dd:b1:e7:7a:ed:0a:a8: fb:96:e1:aa:e2:de:1a:7e:db:2a:e7:68:fa:28:dc: 0a:98:ef:83:18:b0:c1:4d:f2:2f:e8:7c:fc:ee:51: 11:f7:3e:b5:2d:2b:59:cc:d3:b7:da:4c:7f:00:10: fa:11:ec:7d:4f:e0:9c:4d:09:73:61:1e:5e:74:31: a8:2d:4f:49:2f:54:fc:75:d0:d6:16:c9:08:51:78: aa:28:69:36:c1:4e:87:c3:b2:40:ff:bf:18:e8:ac: e9:ff:26:9e:de:94:17:61:e2:8b:87:c2:bd:71:aa: cf:ce:ae:f6:4c:58:95:26:79:e3:cf:e2:13:fc:58: 99:97:2d:98:19:6a:47:77:38:c4:7b:bc:6d:cb:c4: 84:dc:fc:2c:eb:b7:91:c0:e3:6f:d5:7d:ff:e5:3a: 92:c0:03:c8:1f:8f:cb:51:16:fe:71:66:e5:86:f7: 76:3a:ab:a9:ba:4f:59:b6:07:96:ca:cb:ee:49:46: 04:50:82:79:f6:65:77:a1:c1:a9:77:68:b6:47:79: fd:21:79:70:1e:b8:a6:59:18:3a:55:a5:69:bd:29: da:65:79:e0:cc:28:02:10:8e:d9:08:55:f5:86:56: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D0:3A:67:DC:0B:21:BB:F1:43:C6:02:D3:C9:2A:2C:AB:15:B3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8f:b3:30:ef:a5:93:a9:13:d0:75:0b:ba:e2:6a:a5:c7:01: 98:24:73:fb:ce:22:b0:fa:8b:c0:18:8d:56:ca:aa:8f:3c:b3: 72:7a:e3:22:db:16:37:bb:4d:4f:6e:15:de:58:b1:07:62:25: f0:a6:e8:63:7a:1d:ba:a6:67:52:bf:f7:39:7a:fc:57:d7:96: 2c:97:5d:4f:c7:cc:0e:88:5e:a4:d6:c6:f3:c3:21:94:47:75: 04:ca:12:15:82:1c:91:13:a8:d9:85:83:a1:f4:cf:78:b1:9e: ac:2d:86:cc:f9:90:30:23:18:f6:c3:59:31:f6:3d:42:23:da: 6b:9e:5f:11:42:b3:2a:aa:27:06:26:72:0b:1c:7d:2b:0c:4b: b2:2d:13:f7:31:64:96:c7:12:f6:6f:da:81:33:e3:4f:31:7e: b7:27:4a:cf:7e:76:6a:d0:30:90:15:9c:8b:6e:cc:7a:e3:ed: 9f:3f:cc:39:35:12:c2:6c:18:5b:0b:89:4a:f0:0f:ad:ce:59: 42:a7:3c:39:0e:f8:07:72:80:98:b8:24:03:6b:5e:dd:1c:b9: f7:0f:a6:ea:43:24:7f:c4:c2:0c:69:d0:86:72:60:ab:5e:90: d6:4d:04:41:cb:4f:0c:fc:09:be:2c:ed:02:10:0a:ce:8c:ab: f8:bb:ca:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDkmnu94P/OigQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YzhiOTY5OWQtMDA5Ni00MzBlLWIwMTUtYTVmZjlmN2Y5MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXfm7o3O00rjvrXI1UnuTZu/nR4j92x53rt Cqj7luGq4t4aftsq52j6KNwKmO+DGLDBTfIv6Hz87lER9z61LStZzNO32kx/ABD6 Eex9T+CcTQlzYR5edDGoLU9JL1T8ddDWFskIUXiqKGk2wU6Hw7JA/78Y6Kzp/yae 3pQXYeKLh8K9carPzq72TFiVJnnjz+IT/FiZly2YGWpHdzjEe7xty8SE3Pws67eR wONv1X3/5TqSwAPIH4/LURb+cWblhvd2Oqupuk9ZtgeWysvuSUYEUIJ59mV3ocGp d2i2R3n9IXlwHrimWRg6VaVpvSnaZXngzCgCEI7ZCFX1hlYg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXQOmfcCyG78UPGAtPJKiyrFbOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY0YjNjMjktZjA0Zi0z NzZjLWIzOTgtMDNiOTkxNzRkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYha4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyPszDvpZOpE9B1C7riaqXHAZgkc/vOIrD6i8AYjVbKqo88s3J64yLb Fje7TU9uFd5YsQdiJfCm6GN6HbqmZ1K/9zl6/FfXliyXXU/HzA6IXqTWxvPDIZRH dQTKEhWCHJETqNmFg6H0z3ixnqwthsz5kDAjGPbDWTH2PUIj2mueXxFCsyqqJwYm cgscfSsMS7ItE/cxZJbHEvZv2oEz408xfrcnSs9+dmrQMJAVnItuzHrj7Z8/zDk1 EsJsGFsLiUrwD63OWUKnPDkO+AdygJi4JANrXt0cufcPpupDJH/Ewgxp0IZyYKte kNZNBEHLTwz8Cb4s7QIQCs6Mq/i7yrM= -----END CERTIFICATE-----Generated at Wed May 13 14:23:02 2026 by rpki-client