$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa File: a2405e16-c99d-31e3-9565-9a6a7df814ed.roa (raw, json) Hash identifier: wKYJG6a5KF+57NUaTCG9s81SEgc0pi/72yh4DdvJoQc= Subject key identifier: 01:BD:EC:9C:65:A9:29:04:49:11:95:D4:C8:03:FA:1E:33:7E:9B:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB0F993B67038BCBDE81C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.20.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0f:99:3b:67:03:8b:cb:de:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=cd431a1d-da47-4570-a96c-6bafb50c4111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:8b:43:ec:53:b6:10:07:63:65:a6:60:a2: 4a:04:4a:ce:87:c1:a5:fc:52:09:84:0e:00:2b:4c: 22:87:27:cd:eb:a4:a3:b8:d8:f3:9f:a0:1b:e1:a3: 75:f1:cb:2f:fc:01:1c:e7:4c:45:e5:12:00:96:8b: 6b:87:a7:53:b3:15:49:2c:eb:5d:32:55:9b:f6:26: dc:43:52:70:7b:e8:8d:1c:94:f7:ab:6b:1a:2a:43: ec:8e:a2:89:63:69:b6:7f:5c:e2:1c:30:ed:52:a9: 8e:10:9f:9a:82:eb:bb:66:70:87:b6:d3:98:9d:f2: 63:01:96:3d:9d:40:54:0e:8a:d3:29:10:b9:2c:4d: e0:17:ee:94:87:f5:af:e9:06:82:6d:86:a4:66:f8: ad:a1:fc:f9:ba:b4:1d:6c:4d:47:64:87:28:4e:cd: c3:7d:7e:e0:75:91:84:ca:05:3d:29:66:de:bf:5c: bf:4c:0b:7d:fe:3b:f9:20:4e:f1:40:86:2d:d6:4c: 96:08:71:50:af:ab:8a:81:1d:20:1e:8b:37:ac:1f: a9:d2:e2:80:c0:cd:c8:e7:d8:e4:65:8c:98:00:95: 12:41:6b:34:0f:03:0d:4c:cd:dd:05:83:34:c8:cc: 55:8e:9f:81:8b:f9:8d:d1:8a:61:b6:8e:93:d6:67: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:EC:9C:65:A9:29:04:49:11:95:D4:C8:03:FA:1E:33:7E:9B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2405e16-c99d-31e3-9565-9a6a7df814ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d8:85:3d:21:99:a0:7a:13:c8:79:d8:ac:37:05:33:fa:87: b5:72:da:43:fc:b4:33:c0:18:03:2f:7f:13:db:e6:69:59:83: 79:c0:1b:30:20:da:37:65:f2:4d:8b:f7:57:4c:27:e0:ab:cc: d2:9d:13:9a:cc:f2:8b:8b:5a:2d:22:4a:27:83:59:33:88:a8: 23:b0:d2:da:e1:7b:80:44:75:8c:98:69:ca:8a:e4:ad:eb:6a: 2a:14:5c:58:cd:e4:cb:10:53:ac:70:5d:83:a3:85:3b:0f:b9: 66:43:6b:14:c9:ba:b8:a2:e7:dd:d4:3d:c6:47:ed:bc:e1:5d: b5:b0:ce:01:b9:00:35:ad:45:4e:33:eb:25:6b:a9:a7:7b:30: 73:49:62:0d:99:cb:43:d3:d3:d8:93:8a:3d:5d:81:e2:ca:8a: da:9b:db:64:f6:ce:c3:c5:84:16:61:1a:13:04:5a:36:e2:83: 2c:05:94:50:2c:bc:51:77:7b:7a:6c:5f:72:1c:e1:03:f8:41: f7:e2:52:24:3b:36:03:d8:bd:23:bd:34:e9:83:1a:10:5e:36: 44:3f:59:13:70:ec:76:ea:f0:87:9a:b0:a4:16:97:ac:c2:5a: 21:47:85:7d:a6:bd:7e:96:c4:3c:b2:ac:d9:ab:fd:ce:7b:32: 60:d8:59:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+w+ZO2cDi8vegcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk Y2Q0MzFhMWQtZGE0Ny00NTcwLWE5NmMtNmJhZmI1MGM0MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwiLQ+xTthAHY2WmYKJKBErOh8Gl/FIJhA4A K0wihyfN66SjuNjzn6Ab4aN18csv/AEc50xF5RIAlotrh6dTsxVJLOtdMlWb9ibc Q1Jwe+iNHJT3q2saKkPsjqKJY2m2f1ziHDDtUqmOEJ+aguu7ZnCHttOYnfJjAZY9 nUBUDorTKRC5LE3gF+6Uh/Wv6QaCbYakZvitofz5urQdbE1HZIcoTs3DfX7gdZGE ygU9KWbev1y/TAt9/jv5IE7xQIYt1kyWCHFQr6uKgR0gHos3rB+p0uKAwM3I59jk ZYyYAJUSQWs0DwMNTM3dBYM0yMxVjp+Bi/mN0Yphto6T1mcbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG97JxlqSkESRGV1MgD+h4zfpuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI0MDVlMTYtYzk5ZC0z MWUzLTk1NjUtOWE2YTdkZjgxNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLYhT0hmaB6E8h52Kw3BTP6h7Vy2kP8tDPAGAMvfxPb5mlZg3nAGzAg 2jdl8k2L91dMJ+CrzNKdE5rM8ouLWi0iSieDWTOIqCOw0trhe4BEdYyYacqK5K3r aioUXFjN5MsQU6xwXYOjhTsPuWZDaxTJurii593UPcZH7bzhXbWwzgG5ADWtRU4z 6yVrqad7MHNJYg2Zy0PT09iTij1dgeLKitqb22T2zsPFhBZhGhMEWjbigywFlFAs vFF3e3psX3Ic4QP4QffiUiQ7NgPYvSO9NOmDGhBeNkQ/WRNw7Hbq8IeasKQWl6zC WiFHhX2mvX6WxDyyrNmr/c57MmDYWQ8= -----END CERTIFICATE-----Generated at Wed May 13 12:38:48 2026 by rpki-client