$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa File: 2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa (raw, json) Hash identifier: 1tWAeR0x8Jneh2pqhLuU0fdHqmhLb2bY3tfuVMsVuGc= Subject key identifier: 94:4B:24:C3:B8:31:37:11:2A:28:C7:68:AD:0F:26:C0:35:62:03:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF4B11D31E3582FB1E33C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.16.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4b:11:d3:1e:35:82:fb:1e:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=090a7e31-c6b1-4a1b-aef2-78f328f27036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:b3:58:be:eb:ba:c6:3f:c4:bd:a3:ab:1a: fc:37:33:80:f8:55:79:32:67:90:85:62:4d:80:ea: 66:65:50:9f:90:ee:e5:bc:e5:4c:79:0e:e0:40:3c: 19:de:50:71:b6:b7:25:c0:05:be:c2:39:f6:89:3a: 1f:83:fd:a7:2f:00:1c:18:07:3e:99:64:28:ce:53: 54:19:f1:ff:d0:e9:50:65:48:22:77:f0:d8:74:ed: a2:b1:c5:40:a8:f7:22:45:fb:e7:0d:1b:60:90:f8: 9f:cc:75:0a:9c:9f:b6:81:ba:9b:bd:a1:11:a6:21: 13:1f:9f:8b:d5:c2:b0:20:ba:4f:44:89:d4:fb:21: 13:cc:24:d6:01:23:e9:e0:b1:ab:28:bc:66:53:5c: 7a:2c:3e:ef:fc:d5:ef:65:1e:25:84:cb:39:8b:5b: 65:b7:f1:fe:74:1c:7a:35:2b:51:e1:46:dc:35:22: 56:e0:f0:b0:aa:15:03:2e:fa:d9:e6:1d:6d:e9:f5: 39:a4:fb:50:19:4f:7a:bd:aa:26:6f:31:2b:b4:99: 14:2f:1b:5d:7e:df:b7:0c:18:26:70:cc:e1:e4:a3: ba:16:67:fa:43:87:fc:38:c1:60:f7:76:3a:cc:44: bb:66:d6:f6:da:15:4d:2f:19:79:b7:ec:06:f9:ca: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:24:C3:B8:31:37:11:2A:28:C7:68:AD:0F:26:C0:35:62:03:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:99:7d:4d:3c:55:4c:84:15:9c:65:e1:41:fa:6a:41:40:07: a4:5b:b1:fc:e2:f1:4f:27:4d:41:3a:10:6f:bd:99:1e:46:4b: 1a:31:cd:4b:68:3f:6b:9b:47:64:a6:e1:46:d2:d5:6c:d5:6f: 29:a1:78:ed:46:99:33:4a:da:99:1a:5a:69:fe:84:b1:08:be: 74:05:fd:eb:99:47:4d:93:f1:bc:b3:7f:e5:bb:3d:e2:95:8c: 78:03:db:b0:8d:54:b8:b2:dd:68:7d:01:64:69:75:d9:7d:d3: 60:c4:95:68:41:56:4f:cc:d1:43:0a:0d:a4:5f:85:79:80:2e: 55:f8:ee:fa:5f:2c:21:13:87:ea:8e:2f:dc:02:bd:b6:41:cd: bb:f1:29:56:4f:87:5f:ef:35:b7:e1:96:65:c2:86:5b:d9:7c: ab:97:1b:42:e6:52:3e:54:ba:a3:13:f7:6b:76:96:d6:55:84: 05:39:fa:1c:03:f0:5a:e1:f7:c7:b2:3e:59:64:01:10:cd:ee: ea:9c:e6:7e:ee:6a:7a:cd:55:b5:54:db:a3:7b:fd:f2:0e:35: e3:03:5e:23:99:97:d1:f0:7b:ae:d2:52:97:41:28:17:cd:47: 85:79:fe:48:ad:54:07:b7:91:b2:5a:b7:ed:ef:83:9b:5c:54: b5:59:72:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz0sR0x41gvseM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MDkwYTdlMzEtYzZiMS00YTFiLWFlZjItNzhmMzI4ZjI3MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9+zWL7rusY/xL2jqxr8NzOA+FV5MmeQhWJN gOpmZVCfkO7lvOVMeQ7gQDwZ3lBxtrclwAW+wjn2iTofg/2nLwAcGAc+mWQozlNU GfH/0OlQZUgid/DYdO2iscVAqPciRfvnDRtgkPifzHUKnJ+2gbqbvaERpiETH5+L 1cKwILpPRInU+yETzCTWASPp4LGrKLxmU1x6LD7v/NXvZR4lhMs5i1tlt/H+dBx6 NStR4UbcNSJW4PCwqhUDLvrZ5h1t6fU5pPtQGU96vaombzErtJkULxtdft+3DBgm cMzh5KO6Fmf6Q4f8OMFg93Y6zES7Ztb22hVNLxl5t+wG+cqlwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRLJMO4MTcRKijHaK0PJsA1YgPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjEyOTUzOGItYzg1ZC0z ZDFiLTgzM2ItMGRkYmRlMmE0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGZfU08VUyEFZxl4UH6akFAB6Rbsfzi8U8nTUE6EG+9mR5GSxoxzUto P2ubR2Sm4UbS1WzVbymheO1GmTNK2pkaWmn+hLEIvnQF/euZR02T8byzf+W7PeKV jHgD27CNVLiy3Wh9AWRpddl902DElWhBVk/M0UMKDaRfhXmALlX47vpfLCETh+qO L9wCvbZBzbvxKVZPh1/vNbfhlmXChlvZfKuXG0LmUj5UuqMT92t2ltZVhAU5+hwD 8Frh98eyPllkARDN7uqc5n7uanrNVbVU26N7/fIONeMDXiOZl9Hwe67SUpdBKBfN R4V5/kitVAe3kbJat+3vg5tcVLVZckM= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:28 2026 by rpki-client