$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fca8b34-a21e-364e-b35b-77ac67eb4158.roa File: 8fca8b34-a21e-364e-b35b-77ac67eb4158.roa (raw, json) Hash identifier: MjObof+c7kEpE1B4aSYpcGjQbfpxLrgBFlszhcBcvMM= Subject key identifier: D7:3F:51:8D:B2:7E:8C:BE:7A:A8:B3:AC:06:36:38:9C:BD:51:CD:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DADAACE08B2FC42B07DED6BA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fca8b34-a21e-364e-b35b-77ac67eb4158.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 98.22.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:ce:08:b2:fc:42:b0:7d:ed:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=c0a1042e-00fd-4209-b14f-949cacd7df2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:12:5d:fe:b4:ef:84:f5:6a:d1:d7:c9:bf: 66:05:1f:1a:e3:2c:e6:d9:d2:0e:96:bb:2f:91:9a: a6:19:b6:a0:bd:b3:05:b3:7b:60:53:fd:56:dc:5c: dc:42:b6:a3:8c:f3:50:ba:bf:3b:ee:92:bc:57:b7: e4:a6:bf:61:f2:b8:f0:80:37:48:94:4a:cd:e6:b5: ca:cb:bc:19:15:6a:ef:50:82:1b:ca:6e:80:4d:d0: 2c:6f:ec:23:ae:fe:b1:02:ea:e8:a0:97:60:16:ad: 94:57:fb:8e:0e:53:b2:19:b4:c8:f2:42:35:99:08: 96:18:2f:e7:e1:4d:58:f5:f0:02:08:fa:4b:d1:44: b9:fb:ea:9e:af:d3:38:7f:38:a1:0e:18:71:a1:f6: 72:2c:ec:8c:51:44:e3:26:a4:cc:b9:65:34:12:8d: a6:02:d7:41:53:7c:d2:7d:94:91:63:70:9f:af:5a: 91:11:ee:34:4d:e4:5d:57:25:85:42:40:3f:20:da: 4d:6e:e5:6f:44:87:a9:58:c5:37:a2:0f:70:4f:29: 50:c0:61:ae:f4:26:90:51:24:65:9f:99:b4:6d:6d: 9c:3d:70:0f:ae:51:09:ac:5f:9c:ad:f2:c2:f6:d8: 11:5f:50:fb:87:7b:70:d0:44:d7:53:2f:49:95:7d: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3F:51:8D:B2:7E:8C:BE:7A:A8:B3:AC:06:36:38:9C:BD:51:CD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fca8b34-a21e-364e-b35b-77ac67eb4158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:dd:bb:95:05:53:90:29:8d:92:58:27:9c:3a:03:82:78:6a: ae:04:fb:7a:0e:2d:54:de:9b:66:97:85:a7:ec:af:2c:ec:a3: ab:c2:30:1a:bb:31:c5:bf:4a:c8:01:7e:7c:4e:9b:3d:ab:dc: a2:c8:e3:7c:3c:ae:cf:f9:99:38:ae:a9:82:c5:3e:e6:68:ea: c4:27:51:05:ef:78:a5:01:5a:d4:b6:9c:20:fe:db:6f:c3:f5: 87:d2:d4:fc:1e:e9:3f:1a:05:dc:83:91:8d:3a:e7:70:1a:bb: 95:55:4c:6d:c4:34:75:8b:d0:34:13:e3:d7:36:d9:8d:f7:57: 00:13:65:13:d5:8a:66:e9:92:f2:82:20:77:d3:f3:95:b9:db: 39:ad:5b:ae:95:0a:be:d7:41:76:de:bf:72:89:03:ec:06:f1: 19:08:f7:a4:f5:ab:ef:74:cf:68:00:37:d9:1c:f9:ae:50:ed: 9e:2a:be:c1:4e:62:8b:3e:6a:6e:62:cc:c6:07:28:93:7b:34: de:3b:94:9a:11:77:c9:b6:a5:44:3d:1f:20:c6:6b:72:8a:18: 2d:44:c3:1e:39:52:d6:36:72:77:3c:c2:60:a5:16:f4:f6:57: f6:33:7c:b8:98:3a:cb:fa:06:89:de:93:6a:e8:fc:85:a2:0e: 14:0c:39:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqs4IsvxCsH3ta6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YzBhMTA0MmUtMDBmZC00MjA5LWIxNGYtOTQ5Y2FjZDdkZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY8SXf6074T1atHXyb9mBR8a4yzm2dIOlrsv kZqmGbagvbMFs3tgU/1W3FzcQrajjPNQur877pK8V7fkpr9h8rjwgDdIlErN5rXK y7wZFWrvUIIbym6ATdAsb+wjrv6xAurooJdgFq2UV/uODlOyGbTI8kI1mQiWGC/n 4U1Y9fACCPpL0US5++qer9M4fzihDhhxofZyLOyMUUTjJqTMuWU0Eo2mAtdBU3zS fZSRY3Cfr1qREe40TeRdVyWFQkA/INpNbuVvRIepWMU3og9wTylQwGGu9CaQUSRl n5m0bW2cPXAPrlEJrF+crfLC9tgRX1D7h3tw0ETXUy9JlX1bRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc/UY2yfoy+eqizrAY2OJy9Uc0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZjYThiMzQtYTIxZS0z NjRlLWIzNWItNzdhYzY3ZWI0MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhZzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADdu5UFU5ApjZJYJ5w6A4J4aq4E+3oOLVTem2aXhafsryzso6vCMBq7 McW/SsgBfnxOmz2r3KLI43w8rs/5mTiuqYLFPuZo6sQnUQXveKUBWtS2nCD+22/D 9YfS1Pwe6T8aBdyDkY0653Aau5VVTG3ENHWL0DQT49c22Y33VwATZRPVimbpkvKC IHfT85W52zmtW66VCr7XQXbev3KJA+wG8RkI96T1q+90z2gAN9kc+a5Q7Z4qvsFO Yos+am5izMYHKJN7NN47lJoRd8m2pUQ9HyDGa3KKGC1Ewx45UtY2cnc8wmClFvT2 V/YzfLiYOsv6Bonek2ro/IWiDhQMOc8= -----END CERTIFICATE-----Generated at Wed May 13 08:14:55 2026 by rpki-client