$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f146db96-b866-3e75-b71f-fff86d5934f0.roa File: f146db96-b866-3e75-b71f-fff86d5934f0.roa (raw, json) Hash identifier: 4rgzzalGeeH7rKsP7rP2tRAS96ctdD0Tr9CdElbaIbE= Subject key identifier: 95:85:5A:31:4C:19:8A:E6:DD:18:B6:5E:A0:F2:BB:1E:C2:41:A1:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DCAFB111F86E6800035136A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f146db96-b866-3e75-b71f-fff86d5934f0.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.17.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:11:1f:86:e6:80:00:35:13:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=c706df6e-38d1-475f-b534-0f5e2b4c4d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:62:5b:f4:03:bc:b9:f2:9f:16:e5:01:71:68: fe:fe:bc:e7:6d:1f:cd:31:74:25:2f:6b:99:d8:fc: c0:c4:21:84:16:48:d8:53:32:8a:6b:37:01:38:07: a1:3b:0a:1b:a2:ec:6f:3e:ab:89:2e:f0:16:10:27: d7:25:98:08:a1:59:8a:b3:50:e2:49:ea:94:c5:db: 1c:db:df:7e:09:ec:7c:e6:b6:07:73:17:e8:dc:a0: 17:04:ae:79:12:54:85:16:de:25:10:71:30:0b:37: b5:96:ea:9e:8b:f7:10:58:26:a1:8a:1e:80:cd:dd: ef:0a:62:6a:29:58:44:e0:f3:65:01:07:5d:87:f1: 6e:ba:c1:3e:bd:c5:02:da:ce:6e:e0:07:14:f4:7f: 95:b4:f7:a4:d0:08:ef:1c:c3:f5:0b:44:0b:01:0a: 8f:77:ca:d5:76:85:d2:d6:a8:1d:5b:a3:30:13:41: f3:4f:b3:0c:32:61:13:33:ce:be:84:3d:7e:a9:80: f3:7b:fe:7d:88:75:a6:e0:6a:b0:a4:ee:55:94:93: 2e:25:bb:14:3e:de:dd:cf:2f:4f:3c:fc:ef:4c:16: 05:f6:84:00:02:8a:46:1c:fb:5f:8c:b2:57:52:28: d7:6f:65:76:4d:57:6a:4e:5c:fd:17:c3:c0:3b:44: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:85:5A:31:4C:19:8A:E6:DD:18:B6:5E:A0:F2:BB:1E:C2:41:A1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f146db96-b866-3e75-b71f-fff86d5934f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d3:6e:ab:a7:c1:4a:c3:c1:41:4c:5a:09:a5:8d:56:ef:d5: a1:37:53:5c:19:07:86:f5:4e:87:19:91:2f:2a:29:ab:5e:20: 70:6d:60:21:c9:0d:ea:0b:81:15:3f:32:c1:cd:6e:b9:d1:fb: af:3d:63:95:39:ef:61:7b:e4:5b:c9:91:79:0d:c2:16:0a:f8: 4c:13:98:83:74:1f:1b:b7:6e:1b:67:24:58:2f:af:df:a3:af: 18:ba:e3:cb:13:76:86:31:cc:d5:a2:35:3b:05:ab:a4:d9:87: 03:68:d8:f4:4a:97:10:a5:9c:26:fa:32:21:2d:6a:9d:f6:f8: fe:98:01:b9:86:b0:53:95:50:54:4d:d9:86:b2:e1:4f:e8:f4: 8b:ab:e0:bc:d9:91:68:c5:81:74:6d:6a:b3:e9:7c:2a:c8:9d: d8:d8:e7:25:a2:f0:b9:a0:05:15:22:71:65:24:6a:7c:0b:14: bd:d8:3c:c9:ba:b1:d5:6d:c9:f9:19:48:ca:60:84:05:0c:e9: 62:91:eb:15:5c:6d:8f:90:8e:2d:7b:a0:63:bb:0c:c3:df:3a: 26:97:a3:2a:90:f1:53:52:2f:00:fc:16:68:41:12:e0:b5:8d: 90:5b:da:ad:aa:d2:45:3e:24:5b:1d:41:80:3e:b3:26:8c:48: 17:8c:a0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xEfhuaAADUTaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk YzcwNmRmNmUtMzhkMS00NzVmLWI1MzQtMGY1ZTJiNGM0ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Jb9AO8ufKfFuUBcWj+/rznbR/NMXQlL2uZ 2PzAxCGEFkjYUzKKazcBOAehOwobouxvPquJLvAWECfXJZgIoVmKs1DiSeqUxdsc 299+Cex85rYHcxfo3KAXBK55ElSFFt4lEHEwCze1luqei/cQWCahih6Azd3vCmJq KVhE4PNlAQddh/FuusE+vcUC2s5u4AcU9H+VtPek0AjvHMP1C0QLAQqPd8rVdoXS 1qgdW6MwE0HzT7MMMmETM86+hD1+qYDze/59iHWm4GqwpO5VlJMuJbsUPt7dzy9P PPzvTBYF9oQAAopGHPtfjLJXUijXb2V2TVdqTlz9F8PAO0SjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWFWjFMGYrm3Ri2XqDyux7CQaGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE0NmRiOTYtYjg2Ni0z ZTc1LWI3MWYtZmZmODZkNTkzNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhGyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzTbqunwUrDwUFMWgmljVbv1aE3U1wZB4b1TocZkS8qKateIHBtYCHJ DeoLgRU/MsHNbrnR+689Y5U572F75FvJkXkNwhYK+EwTmIN0Hxu3bhtnJFgvr9+j rxi648sTdoYxzNWiNTsFq6TZhwNo2PRKlxClnCb6MiEtap32+P6YAbmGsFOVUFRN 2Yay4U/o9Iur4LzZkWjFgXRtarPpfCrIndjY5yWi8LmgBRUicWUkanwLFL3YPMm6 sdVtyfkZSMpghAUM6WKR6xVcbY+Qji17oGO7DMPfOiaXoyqQ8VNSLwD8FmhBEuC1 jZBb2q2q0kU+JFsdQYA+syaMSBeMoME= -----END CERTIFICATE-----Generated at Wed May 13 07:10:16 2026 by rpki-client