$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d079efe-74fc-3d05-86bb-ef73e488eb7e.roa File: 1d079efe-74fc-3d05-86bb-ef73e488eb7e.roa (raw, json) Hash identifier: ab4A3Vj3a5Pqs1Blt+qfxal4YpFbqWxw2W+3JtwQoSY= Subject key identifier: 0C:B0:99:DA:6A:9D:CD:E6:AC:BD:3E:DE:4F:C2:0D:38:F9:77:53:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD4C06247515F2767E25E3180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d079efe-74fc-3d05-86bb-ef73e488eb7e.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 98.16.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:62:47:51:5f:27:67:e2:5e:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=d4b33b90-7510-4b47-b943-e73a05e56022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:28:cc:8c:a4:98:f9:45:90:ce:a4:c8:2f:a2: 9f:c1:92:d3:7a:09:6b:29:f2:65:c7:b5:dc:07:31: 1f:5a:cc:84:32:0e:76:56:89:43:97:b6:a2:53:8e: 4c:d5:03:5e:0b:df:72:d7:fd:bb:e5:f3:e1:af:06: 32:89:8a:17:c5:6f:10:1a:02:72:6a:b6:6e:88:67: 58:e8:98:32:0e:31:66:37:d5:13:54:41:1e:2d:06: 5f:7c:a5:86:6d:2b:f6:69:92:0e:cd:9b:cd:f4:68: d4:9b:cf:50:06:de:4a:a7:2a:55:96:5b:e4:47:e1: 16:58:71:2c:e3:a4:38:63:88:e5:a0:3d:e4:ae:a9: 11:7a:eb:8c:88:25:10:df:10:9a:66:6c:72:b9:ed: 5a:b2:ed:db:d0:8a:64:08:64:e5:49:41:37:7f:9e: 66:39:75:09:84:d4:ee:2c:25:27:b4:e0:d5:bd:66: ef:58:92:32:bb:32:ed:d1:1c:28:4a:7e:0f:81:31: 84:5d:34:f3:6b:69:79:41:c2:d5:f9:32:b4:65:53: 6e:f2:48:61:d9:39:43:b4:14:91:59:cb:d4:d3:2a: 0c:ae:0a:7d:97:ca:a5:af:37:19:6f:70:c0:7a:d5: 81:8b:45:9a:a5:82:4b:f0:ec:fd:f8:9d:eb:a1:9e: 64:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:99:DA:6A:9D:CD:E6:AC:BD:3E:DE:4F:C2:0D:38:F9:77:53:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d079efe-74fc-3d05-86bb-ef73e488eb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3a:21:50:81:31:f8:8c:e6:43:0f:3a:a1:1e:9d:f8:a3:92: 2a:03:07:1b:ad:95:37:cc:c3:af:07:a5:df:84:df:45:85:1c: 9c:44:ac:3a:75:05:0d:23:35:3b:9b:ed:78:dd:8c:30:5c:90: f6:0f:96:cb:e0:e4:d9:2e:7c:df:5d:1a:ba:fc:33:41:8a:10: 98:3d:88:a7:9d:3d:63:6a:23:c3:f6:84:82:eb:c7:dd:28:53: d2:d8:a9:9c:5e:33:ac:9f:98:b8:91:37:51:e2:93:0a:59:5f: aa:d4:f0:73:84:b1:e9:a9:bb:43:3c:e7:79:e2:eb:49:9c:f3: e9:5a:ca:2b:f5:b6:aa:59:bc:72:00:46:70:e5:b9:20:c7:35: 2d:d7:ea:43:ab:d7:31:b1:b3:a9:b2:d1:ab:e4:96:15:95:01: 55:d8:39:1a:d3:8b:44:d5:f5:f2:81:bf:96:a1:5e:93:56:c7: 2d:92:e5:16:77:cb:9f:27:e0:18:e9:11:c3:b7:29:1f:99:eb: cd:a7:2a:67:8d:aa:bb:36:19:d7:a9:80:d5:91:e3:e5:f6:85: 0a:5d:84:a6:81:37:f6:96:b4:4b:0f:a5:72:8b:d3:d0:c7:74: 71:b8:c1:e8:6e:91:13:f9:0c:76:ad:08:48:c6:f4:0d:ed:95: 35:bf:e6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwGJHUV8nZ+JeMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk ZDRiMzNiOTAtNzUxMC00YjQ3LWI5NDMtZTczYTA1ZTU2MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSjMjKSY+UWQzqTIL6KfwZLTeglrKfJlx7Xc BzEfWsyEMg52VolDl7aiU45M1QNeC99y1/275fPhrwYyiYoXxW8QGgJyarZuiGdY 6JgyDjFmN9UTVEEeLQZffKWGbSv2aZIOzZvN9GjUm89QBt5KpypVllvkR+EWWHEs 46Q4Y4jloD3krqkReuuMiCUQ3xCaZmxyue1asu3b0IpkCGTlSUE3f55mOXUJhNTu LCUntODVvWbvWJIyuzLt0RwoSn4PgTGEXTTza2l5QcLV+TK0ZVNu8khh2TlDtBSR WcvU0yoMrgp9l8qlrzcZb3DAetWBi0WapYJL8Oz9+J3roZ5kbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAywmdpqnc3mrL0+3k/CDTj5d1MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWQwNzllZmUtNzRmYy0z ZDA1LTg2YmItZWY3M2U0ODhlYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw6IVCBMfiM5kMPOqEenfijkioDBxutlTfMw68Hpd+E30WFHJxErDp1 BQ0jNTub7XjdjDBckPYPlsvg5NkufN9dGrr8M0GKEJg9iKedPWNqI8P2hILrx90o U9LYqZxeM6yfmLiRN1HikwpZX6rU8HOEsempu0M853ni60mc8+layiv1tqpZvHIA RnDluSDHNS3X6kOr1zGxs6my0avklhWVAVXYORrTi0TV9fKBv5ahXpNWxy2S5RZ3 y58n4BjpEcO3KR+Z682nKmeNqrs2GdepgNWR4+X2hQpdhKaBN/aWtEsPpXKL09DH dHG4wehukRP5DHatCEjG9A3tlTW/5mc= -----END CERTIFICATE-----Generated at Thu May 28 17:45:17 2026 by rpki-client