$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b8a998d-88c9-3664-a411-50b7a919f703.roa File: 4b8a998d-88c9-3664-a411-50b7a919f703.roa (raw, json) Hash identifier: j0qOvX5V/pNQjFpeDhttjXkcaC3atqpmgXngn29yrYU= Subject key identifier: 38:D3:77:F9:21:26:23:83:F4:6D:BF:BA:0F:DD:FD:35:8E:00:24:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE9B0BB622FC34034A3BE47A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b8a998d-88c9-3664-a411-50b7a919f703.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.18.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:bb:62:2f:c3:40:34:a3:be:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=9b25d8e9-a2fe-4ae6-94a8-c3436618d3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:40:78:99:3b:c6:7e:76:0c:24:70:5c:b0: 05:9e:73:7e:fb:cf:b2:d8:22:04:9d:9c:87:b6:88: 7c:6a:7a:0b:76:a1:86:2f:65:77:a2:99:1a:ec:82: ea:39:51:65:04:5d:a4:7e:2f:0f:3a:67:49:7e:b2: ca:6c:64:65:6e:ec:3b:e8:64:7f:31:04:71:0c:4b: 8b:eb:61:49:a2:92:d5:1a:14:1f:0b:24:96:18:ac: 11:9c:f6:4c:fe:72:21:25:6a:4a:ad:0f:f4:05:ce: 1b:f9:b5:cd:ff:d7:fb:8c:81:6a:da:91:fe:88:7c: e3:2d:e3:9a:50:11:86:7d:df:53:2b:6e:bf:fe:d2: bd:a1:d7:79:8a:1e:5d:f9:1e:1e:86:e3:20:2d:cd: 82:d5:4a:59:88:de:bb:c1:74:7b:2c:ce:5c:7f:57: 6f:ff:10:1b:a5:ad:ef:ba:da:bb:74:47:8c:60:91: fd:0c:e4:16:1a:bb:a1:85:29:0b:74:07:c9:5d:0a: 83:d1:f9:cf:dd:e2:65:a6:18:9a:49:7c:55:c4:85: 57:d0:20:b1:e6:99:9b:8d:0e:10:6f:34:c2:2e:a9: 49:b4:66:4b:d3:18:78:05:41:9d:49:c5:1a:be:d7: 71:4a:ca:f2:17:1b:a2:b2:3f:b8:e5:ac:1c:da:f0: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:77:F9:21:26:23:83:F4:6D:BF:BA:0F:DD:FD:35:8E:00:24:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b8a998d-88c9-3664-a411-50b7a919f703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a2:38:b6:02:6d:05:b4:9c:29:dd:fb:7d:45:45:0d:75:a9: 1e:c5:38:0e:49:da:16:bf:d4:33:1c:8f:d0:6d:d8:59:46:b0: 7d:f1:26:76:8e:b2:ab:0c:ec:1d:34:d8:49:9a:d0:9f:fe:ec: e0:67:f8:d8:4e:26:f3:89:d8:8f:e1:5d:3d:73:d5:fa:d1:06: cf:78:52:5c:64:dc:e7:18:5d:e3:54:32:f0:19:59:32:5b:a8: a8:77:3b:5b:c6:5b:54:c2:d5:cf:c4:cd:fc:eb:a3:a0:58:00: 8b:16:4b:90:8f:20:a1:7c:3a:06:59:57:7b:74:32:42:f4:a3: 6f:aa:f7:c6:2b:66:bc:fc:58:96:9c:a5:2c:61:73:da:fd:65: 22:b8:07:f9:14:8f:ff:c3:ab:45:f1:3d:47:47:b4:74:7e:84: 8d:af:ad:07:8c:b1:10:ae:37:95:e0:c9:1a:c2:3c:8d:54:de: dd:0f:04:57:15:85:5b:19:24:9a:ed:9d:cc:04:2a:17:38:38: 56:77:d3:8d:cc:f2:67:48:04:6b:ff:e3:cb:a7:55:c7:79:60: 33:ec:7f:03:fc:0e:7f:37:94:93:f4:87:bf:3f:8e:c7:60:67: bc:09:93:ab:b9:6d:b5:ba:d9:67:6d:76:bc:cc:50:fe:b1:08: cd:84:33:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psLtiL8NANKO+R6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk OWIyNWQ4ZTktYTJmZS00YWU2LTk0YTgtYzM0MzY2MThkM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ZAeJk7xn52DCRwXLAFnnN++8+y2CIEnZyH toh8anoLdqGGL2V3opka7ILqOVFlBF2kfi8POmdJfrLKbGRlbuw76GR/MQRxDEuL 62FJopLVGhQfCySWGKwRnPZM/nIhJWpKrQ/0Bc4b+bXN/9f7jIFq2pH+iHzjLeOa UBGGfd9TK26//tK9odd5ih5d+R4ehuMgLc2C1UpZiN67wXR7LM5cf1dv/xAbpa3v utq7dEeMYJH9DOQWGruhhSkLdAfJXQqD0fnP3eJlphiaSXxVxIVX0CCx5pmbjQ4Q bzTCLqlJtGZL0xh4BUGdScUavtdxSsryFxuisj+45awc2vC3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjTd/khJiOD9G2/ug/d/TWOACRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI4YTk5OGQtODhjOS0z NjY0LWE0MTEtNTBiN2E5MTlmNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOiOLYCbQW0nCnd+31FRQ11qR7FOA5J2ha/1DMcj9Bt2FlGsH3xJnaO sqsM7B002Ema0J/+7OBn+NhOJvOJ2I/hXT1z1frRBs94Ulxk3OcYXeNUMvAZWTJb qKh3O1vGW1TC1c/Ezfzro6BYAIsWS5CPIKF8OgZZV3t0MkL0o2+q98YrZrz8WJac pSxhc9r9ZSK4B/kUj//Dq0XxPUdHtHR+hI2vrQeMsRCuN5XgyRrCPI1U3t0PBFcV hVsZJJrtncwEKhc4OFZ3043M8mdIBGv/48unVcd5YDPsfwP8Dn83lJP0h78/jsdg Z7wJk6u5bbW62WdtdrzMUP6xCM2EM7w= -----END CERTIFICATE-----Generated at Thu May 28 17:12:34 2026 by rpki-client