$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa File: 44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa (raw, json) Hash identifier: cJIlQg980cmXmYNaczs0Q0OrVWuECyHINQq4GDtYKU0= Subject key identifier: 59:87:4A:ED:87:F0:9D:D4:DF:F4:21:7C:80:05:97:D6:17:45:26:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD8F0718CFE812509B5FEBA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 7029 IP address blocks: 98.20.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:71:8c:fe:81:25:09:b5:fe:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=530c352b-6370-49bf-a2c7-150938f6f711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:ad:79:c1:b1:2a:8a:25:9e:78:17:16:65: e0:84:de:0b:53:b5:e9:f6:0d:cc:2c:74:59:c4:7c: 82:dd:63:06:6e:dd:9b:4b:e8:77:69:84:fd:f5:0a: 2e:82:77:94:82:fe:42:2c:f9:b1:7a:c7:85:eb:a7: 58:1a:b2:b2:59:07:3c:e4:da:ea:27:15:ae:85:a1: f9:a7:86:87:ab:e0:42:73:b2:6e:ef:ca:19:d0:20: 3d:1e:32:f2:3a:17:56:bc:db:41:1e:38:29:b0:34: c2:99:1e:0e:ce:3c:04:9b:9d:6f:46:86:d2:dd:3c: 25:49:fd:10:e0:6c:07:17:79:c2:d6:15:0f:e2:51: db:2e:d7:4f:0c:85:b9:52:72:e2:75:1b:e8:84:50: 0b:dc:3b:30:55:6f:66:3d:59:32:a7:fa:db:6a:60: df:34:35:b5:1c:7b:ed:9c:af:65:91:3d:f5:d8:60: 7c:67:76:0f:6c:c1:d6:c1:18:05:8d:a3:85:6a:b3: f3:dd:7d:95:a9:ee:da:d4:43:7a:b1:f5:ef:5a:58: e5:2e:6d:34:7d:c0:f2:24:c6:14:a2:e6:c0:54:12: 6a:18:2b:88:b9:14:44:85:7a:47:fd:e8:80:34:19: c5:56:d6:a3:f9:cf:9c:83:ec:30:b1:f4:f4:8c:87: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:87:4A:ED:87:F0:9D:D4:DF:F4:21:7C:80:05:97:D6:17:45:26:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bc:e5:7f:cb:6f:ed:45:69:2c:0c:32:f7:cf:60:b0:ca:8c: 0f:cd:02:fa:f6:0d:b2:a2:a3:c1:66:4d:24:65:20:30:44:0b: 6f:8d:70:a4:d2:61:72:4f:7b:39:f1:56:0b:25:64:d9:65:7c: 78:3a:20:d9:78:41:2b:f7:e8:43:ae:b1:84:de:f3:e3:cf:dc: 43:df:49:6c:08:e9:0c:2f:4d:5f:af:7e:12:7a:9a:f3:5d:e1: 8f:c0:3d:7b:54:98:cb:ef:54:31:e1:00:7e:64:cd:0f:4f:dd: f2:3c:0f:f7:53:76:b8:af:15:c1:98:8d:0a:24:2e:58:85:fe: f9:ba:de:b4:44:b1:30:dd:86:e5:5f:d4:35:1a:d8:5b:4b:c9: d9:da:13:a5:41:6c:82:48:80:b1:c0:50:d1:ba:a6:1a:11:db: 1c:af:1f:1f:41:fd:cf:fe:92:22:58:8e:11:da:70:fb:88:89: ef:16:b3:cb:43:b0:29:a2:ea:e6:0f:28:e3:f4:37:5b:c5:ab: 03:ed:bf:d4:b3:96:ef:2c:52:73:3a:f1:a0:0d:5d:cc:33:2d: 45:b2:fc:5e:b8:d3:da:cb:19:da:e8:70:6d:a7:08:42:76:b3: 98:d9:6d:c9:5e:a4:ea:05:56:d3:e1:ee:08:cf:83:7a:ee:cf: fb:17:b8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HGM/oElCbX+ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NTMwYzM1MmItNjM3MC00OWJmLWEyYzctMTUwOTM4ZjZmNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo6tecGxKoolnngXFmXghN4LU7Xp9g3MLHRZ xHyC3WMGbt2bS+h3aYT99QougneUgv5CLPmxeseF66dYGrKyWQc85NrqJxWuhaH5 p4aHq+BCc7Ju78oZ0CA9HjLyOhdWvNtBHjgpsDTCmR4OzjwEm51vRobS3TwlSf0Q 4GwHF3nC1hUP4lHbLtdPDIW5UnLidRvohFAL3DswVW9mPVkyp/rbamDfNDW1HHvt nK9lkT312GB8Z3YPbMHWwRgFjaOFarPz3X2Vqe7a1EN6sfXvWljlLm00fcDyJMYU oubAVBJqGCuIuRREhXpH/eiANBnFVtaj+c+cg+wwsfT0jIfnEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmHSu2H8J3U3/QhfIAFl9YXRSYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRkZGYxYWUtNTRhNC0z Mjg5LWEzZDEtNDk3ZTUwY2M2Y2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG85X/Lb+1FaSwMMvfPYLDKjA/NAvr2DbKio8FmTSRlIDBEC2+NcKTS YXJPeznxVgslZNllfHg6INl4QSv36EOusYTe8+PP3EPfSWwI6QwvTV+vfhJ6mvNd 4Y/APXtUmMvvVDHhAH5kzQ9P3fI8D/dTdrivFcGYjQokLliF/vm63rREsTDdhuVf 1DUa2FtLydnaE6VBbIJIgLHAUNG6phoR2xyvHx9B/c/+kiJYjhHacPuIie8Ws8tD sCmi6uYPKOP0N1vFqwPtv9Szlu8sUnM68aANXcwzLUWy/F6409rLGdrocG2nCEJ2 s5jZbclepOoFVtPh7gjPg3ruz/sXuMo= -----END CERTIFICATE-----Generated at Thu May 28 17:11:13 2026 by rpki-client