$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6d214b1-f489-3119-a5f6-b1d556161f81.roa File: d6d214b1-f489-3119-a5f6-b1d556161f81.roa (raw, json) Hash identifier: bbHGcVuSwiRY/ZLA0WiH8O+ZKVRtpO3LVmvQrRZXQoM= Subject key identifier: 25:EE:61:17:D6:E4:5E:D3:E1:CE:AD:E1:07:42:99:1B:FA:15:B3:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCF2B1830174FA224F92AED80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6d214b1-f489-3119-a5f6-b1d556161f81.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 7029 IP address blocks: 98.16.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:18:30:17:4f:a2:24:f9:2a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=38020a0b-82a3-46cf-b09b-e8e8712b6ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:d5:fc:05:f8:9f:63:04:cb:01:14:93:03: 8b:f3:e0:80:90:30:f4:4c:29:49:7f:87:74:86:c4: 58:6d:79:77:42:5b:88:7c:e3:36:52:12:30:74:b2: c0:f6:e8:1a:b7:8c:d1:22:68:cc:49:b6:4f:d7:88: 81:75:94:a4:c9:c8:a4:3d:47:17:43:3c:61:55:0f: 6e:5a:c4:5a:15:66:53:49:4f:01:b4:66:11:8f:93: 30:b2:46:5a:e0:5c:5a:47:16:e0:53:69:24:55:dd: d8:ea:f9:f9:53:57:2a:33:03:73:49:c3:dc:82:2c: d5:dc:47:23:61:0f:bf:1c:6c:5d:e8:6b:61:11:64: 9a:06:30:12:0e:a5:35:44:c9:d1:56:a7:77:53:22: a2:e5:f8:25:6a:dc:d2:ab:6c:6c:d1:44:1f:6f:08: 30:bc:c5:b6:b8:50:b7:b1:3e:24:df:67:04:bd:a0: b4:4e:a8:22:0f:7b:8d:1a:4c:4e:7a:57:45:6a:3c: ad:69:72:b6:e7:40:0c:74:37:91:73:51:b9:fa:ea: b2:dd:73:32:30:11:bc:08:52:8a:4e:28:19:5f:8d: 50:60:8e:0a:40:0f:a2:ec:b5:76:7a:26:38:34:44: 12:de:6d:2e:8a:17:25:ae:56:66:1b:ff:48:ab:51: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EE:61:17:D6:E4:5E:D3:E1:CE:AD:E1:07:42:99:1B:FA:15:B3:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6d214b1-f489-3119-a5f6-b1d556161f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2e:8d:5c:5b:93:73:0b:d4:39:53:37:6a:df:d1:3c:29:33: 98:b3:0d:90:fb:a4:74:bd:f3:32:64:26:e5:e7:2b:ab:32:a4: 35:70:f6:40:e2:6a:c3:20:b9:8a:33:7e:f6:bf:7a:9e:e5:77: c8:56:59:97:ba:64:dd:b1:97:ac:45:c4:2f:b4:62:fc:95:6d: 78:87:8c:9b:fe:ed:e0:b1:b5:1e:ea:01:1e:62:2a:b8:f9:c0: dd:a8:e5:eb:b1:02:b3:39:d7:19:4b:76:65:75:f9:6c:93:78: 05:81:b2:3f:40:65:17:26:f1:11:11:87:e8:4a:7a:2f:bb:8b: 71:28:11:62:69:95:23:16:e1:6e:1a:bb:fa:a7:36:e1:ae:15: cb:b6:9b:82:f3:4a:24:6d:94:ce:4c:7a:c0:ec:71:b5:24:d9: 15:d2:8e:00:dd:95:80:3a:46:f4:b8:ae:3d:4c:d7:7b:d7:99: 51:99:bf:1e:1d:44:dd:6b:4f:c2:9c:48:79:6f:59:d9:92:95: df:ff:79:43:9c:6e:2d:96:6e:27:b4:46:05:49:dc:51:b6:0c: b7:c4:d4:09:9e:b8:53:1c:76:60:51:30:22:0b:0d:4e:5d:ca: 62:42:0a:6f:72:29:a1:e8:fb:63:41:b0:e5:d2:ba:b0:c5:19: cc:f4:fb:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxgwF0+iJPkq7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk MzgwMjBhMGItODJhMy00NmNmLWIwOWItZThlODcxMmI2YWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut3V/AX4n2MEywEUkwOL8+CAkDD0TClJf4d0 hsRYbXl3QluIfOM2UhIwdLLA9ugat4zRImjMSbZP14iBdZSkycikPUcXQzxhVQ9u WsRaFWZTSU8BtGYRj5MwskZa4FxaRxbgU2kkVd3Y6vn5U1cqMwNzScPcgizV3Ecj YQ+/HGxd6GthEWSaBjASDqU1RMnRVqd3UyKi5fglatzSq2xs0UQfbwgwvMW2uFC3 sT4k32cEvaC0TqgiD3uNGkxOeldFajytaXK250AMdDeRc1G5+uqy3XMyMBG8CFKK TigZX41QYI4KQA+i7LV2eiY4NEQS3m0uihclrlZmG/9Iq1GPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXuYRfW5F7T4c6t4QdCmRv6FbOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZkMjE0YjEtZjQ4OS0z MTE5LWE1ZjYtYjFkNTU2MTYxZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYujVxbk3ML1DlTN2rf0TwpM5izDZD7pHS98zJkJuXnK6sypDVw9kDi asMguYozfva/ep7ld8hWWZe6ZN2xl6xFxC+0YvyVbXiHjJv+7eCxtR7qAR5iKrj5 wN2o5euxArM51xlLdmV1+WyTeAWBsj9AZRcm8RERh+hKei+7i3EoEWJplSMW4W4a u/qnNuGuFcu2m4LzSiRtlM5MesDscbUk2RXSjgDdlYA6RvS4rj1M13vXmVGZvx4d RN1rT8KcSHlvWdmSld//eUOcbi2Wbie0RgVJ3FG2DLfE1AmeuFMcdmBRMCILDU5d ymJCCm9yKaHo+2NBsOXSurDFGcz0+xM= -----END CERTIFICATE-----Generated at Wed May 13 15:02:15 2026 by rpki-client