$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4e92900-c6fe-3a90-9815-f1ee0f051193.roa File: c4e92900-c6fe-3a90-9815-f1ee0f051193.roa (raw, json) Hash identifier: FmAMIfimkeihgR0mcpgwYP+NGWUXBshPcQFW6GGe08Y= Subject key identifier: A4:5C:03:5F:E3:5D:1D:9C:92:AA:C0:73:3C:DA:BD:9F:F8:58:EC:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB1176D92B6A0C2851A780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4e92900-c6fe-3a90-9815-f1ee0f051193.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.20.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:11:76:d9:2b:6a:0c:28:51:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=949bd641-a0ee-4a46-bd7c-8c6cae5849d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:d8:12:3f:d6:a0:52:5f:80:0d:4e:46:5f: 8c:ec:a9:d7:74:c2:ff:7f:1e:03:2f:4f:e7:99:d7: d3:4a:b2:cc:de:6f:c4:d1:5c:f1:42:bb:36:55:32: 4c:7c:10:e4:3d:93:39:4c:7f:68:ea:b9:6e:f4:43: a8:f9:e7:33:ac:92:70:94:42:0f:48:61:83:70:64: 71:01:5e:1e:9b:43:0e:e5:86:c1:26:8e:38:1b:7d: 82:3e:ee:73:d0:2b:79:5a:9f:d8:57:f5:21:74:4d: 30:50:09:c5:f7:00:2c:f4:bb:d3:3c:fd:30:17:ac: b0:75:16:1a:a2:07:bc:01:85:3a:f3:01:b7:ed:b4: c7:a6:e8:79:f2:76:f5:fb:8a:c3:29:a1:87:e0:8e: dd:ec:40:30:a8:27:a0:e7:65:a4:a7:3e:75:64:c5: 3d:37:4d:cf:b3:2e:6c:19:a0:de:47:ff:91:22:97: 09:ad:06:db:21:1a:47:8a:07:fb:6f:e1:9f:29:e9: e4:5b:ae:cb:6e:37:4b:41:cf:9e:02:45:c4:99:98: bd:2a:20:54:bb:a4:ff:20:a0:14:56:f1:f8:d8:9f: b6:2c:2d:c8:0e:51:69:cd:79:bf:8f:ad:13:fb:be: e8:78:40:54:1c:ab:84:1d:d5:8f:ce:ed:3f:49:16: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5C:03:5F:E3:5D:1D:9C:92:AA:C0:73:3C:DA:BD:9F:F8:58:EC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4e92900-c6fe-3a90-9815-f1ee0f051193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ec:78:74:6a:87:6c:8c:ba:57:ae:e0:2a:f7:f9:72:34:71: 7d:27:ce:5d:ab:33:4f:dd:83:00:a9:9a:21:59:34:81:86:4f: 62:ae:ea:17:3f:23:3f:57:5a:19:c6:27:ea:65:15:a7:fb:65: cd:e6:6e:2e:92:a1:a4:3d:4d:0d:89:3e:e4:80:14:e2:0f:9c: a0:5d:b0:37:9d:88:a9:1d:1f:c3:83:74:cd:31:2c:18:60:ff: 5a:e3:56:04:da:68:1e:29:53:4e:90:54:ed:25:20:3e:88:87: 73:74:82:82:d7:f6:86:93:50:f0:fa:c9:68:2d:f5:ca:8a:b9: 89:23:54:2c:1e:89:2b:31:ef:c3:0f:7a:f0:a6:2f:98:85:0a: d8:86:e7:8c:75:ca:9d:ec:0a:d0:64:a3:f7:12:1d:63:87:43: ea:e0:1f:de:7b:33:8b:e1:bd:ab:61:31:bc:5a:91:6b:ff:ee: 40:c1:90:fe:9f:ca:0d:bb:b4:2d:6d:74:49:21:61:0f:fd:d6: 8f:ef:8d:3a:a5:cd:9b:6b:80:31:f1:15:58:56:a7:fc:76:9e: 86:27:d1:02:87:e6:13:f9:d7:02:c8:28:05:72:0c:fd:ee:96: 56:77:d0:cb:ba:2e:b5:9c:d3:61:c9:db:e1:c1:d4:cf:ad:6c: 4b:17:16:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xF22StqDChRp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk OTQ5YmQ2NDEtYTBlZS00YTQ2LWJkN2MtOGM2Y2FlNTg0OWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSjYEj/WoFJfgA1ORl+M7KnXdML/fx4DL0/n mdfTSrLM3m/E0VzxQrs2VTJMfBDkPZM5TH9o6rlu9EOo+eczrJJwlEIPSGGDcGRx AV4em0MO5YbBJo44G32CPu5z0Ct5Wp/YV/UhdE0wUAnF9wAs9LvTPP0wF6ywdRYa oge8AYU68wG37bTHpuh58nb1+4rDKaGH4I7d7EAwqCeg52Wkpz51ZMU9N03Psy5s GaDeR/+RIpcJrQbbIRpHigf7b+GfKenkW67LbjdLQc+eAkXEmZi9KiBUu6T/IKAU VvH42J+2LC3IDlFpzXm/j60T+77oeEBUHKuEHdWPzu0/SRYEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRcA1/jXR2ckqrAczzavZ/4WOyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRlOTI5MDAtYzZmZS0z YTkwLTk4MTUtZjFlZTBmMDUxMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhTiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfseHRqh2yMuleu4Cr3+XI0cX0nzl2rM0/dgwCpmiFZNIGGT2Ku6hc/ Iz9XWhnGJ+plFaf7Zc3mbi6SoaQ9TQ2JPuSAFOIPnKBdsDediKkdH8ODdM0xLBhg /1rjVgTaaB4pU06QVO0lID6Ih3N0goLX9oaTUPD6yWgt9cqKuYkjVCweiSsx78MP evCmL5iFCtiG54x1yp3sCtBko/cSHWOHQ+rgH957M4vhvathMbxakWv/7kDBkP6f yg27tC1tdEkhYQ/91o/vjTqlzZtrgDHxFVhWp/x2noYn0QKH5hP51wLIKAVyDP3u llZ30Mu6LrWc02HJ2+HB1M+tbEsXFiA= -----END CERTIFICATE-----Generated at Wed May 13 16:02:45 2026 by rpki-client