$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa File: 4dac845c-f6b7-3920-8c86-2e4456a0f133.roa (raw, json) Hash identifier: Wg2e8v//4uARlJDWV4n9UygHlc9W89xBFrqwfvTqEMY= Subject key identifier: C2:15:05:9B:79:94:63:45:59:0B:30:93:71:C9:01:56:AA:58:81:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE1507D8BA5F1E7456A896780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.16.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:7d:8b:a5:f1:e7:45:6a:89:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=8b837717-c69c-4b46-83c5-cc0981090d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:d7:9d:58:db:a6:f3:97:2d:fd:2f:c9:af: df:a1:65:d5:fe:1e:7e:c7:05:f7:57:f6:f3:8c:f7: b9:3f:12:a9:f3:19:b9:d4:40:b6:7f:3e:a3:c1:e1: ae:7f:b5:83:93:7c:6f:67:ec:47:e3:a1:3b:20:56: dd:03:7f:f7:fe:65:9f:32:03:e2:5e:e0:17:2a:6d: b5:7e:66:cf:5d:d3:0f:9b:fd:c7:18:15:e1:07:b9: 25:b3:48:02:d4:ea:76:6e:19:82:48:b6:35:ec:39: 4a:50:3c:7f:98:68:c8:96:65:e6:85:c4:f2:44:1d: 5f:00:b9:46:81:d3:02:a6:73:54:1b:51:f6:66:b3: af:ee:8e:c3:5d:4d:ea:98:de:e7:a0:92:78:6b:c2: 67:aa:1a:87:cb:4b:1b:4c:2c:b0:04:62:cb:ac:42: 10:3d:0d:cd:a4:e0:4f:e4:42:1f:e3:89:20:0b:e3: 44:0d:b8:67:aa:d3:d6:71:31:61:63:29:b4:89:bd: 0b:fe:cd:45:8d:3f:16:32:6c:c2:43:15:00:81:99: 14:d7:39:9f:55:cb:a8:72:d3:b0:85:59:05:d4:d8: 65:83:8a:cc:e6:4a:64:73:77:12:55:8a:bf:06:b3: 27:fd:45:d9:79:ae:22:cd:b9:e2:f9:80:61:f2:41: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:15:05:9B:79:94:63:45:59:0B:30:93:71:C9:01:56:AA:58:81:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a2:1a:06:3b:82:d1:cc:56:97:b0:cc:d8:1d:87:71:1d:7d: 46:a2:7e:17:76:b6:9f:13:63:c2:e4:2a:0a:50:1a:5d:dd:92: ce:97:13:de:f1:c5:2d:66:8a:d1:c1:b7:96:81:4c:bc:8c:16: 22:a6:12:b5:d7:e5:15:73:24:02:b7:3b:5b:26:38:01:f4:bc: 88:6b:e5:2e:2c:b6:cb:ed:5d:a6:43:0e:55:aa:c7:a5:a5:ea: be:6f:4f:51:d8:c6:05:80:e6:d9:3e:20:9f:ec:f2:51:de:83: 43:06:9f:5e:84:e6:5f:5d:d3:05:55:fd:c7:ac:b6:7f:70:51: 8d:d1:37:df:6a:26:cd:f6:44:98:af:2c:06:40:42:ce:86:d1: 4e:f9:51:fb:d1:c5:49:40:7e:23:92:14:a6:a4:e0:38:c7:69: 7c:c2:0e:b3:12:90:48:8a:04:03:25:9d:18:6b:6f:7f:00:77: 81:48:8a:e4:3d:ac:89:99:2b:31:b5:52:ce:48:0c:21:14:97: 1b:2c:2b:94:8d:b5:8b:29:f5:c9:ae:ad:87:b8:63:d7:85:f1: 51:ce:d9:23:aa:c1:38:40:31:39:5c:ce:15:81:c9:9e:98:b1: e3:e5:de:9d:6a:5b:bf:50:a6:6d:7e:11:cb:70:0a:9b:92:09: b8:c4:d6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUH2LpfHnRWqJZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OGI4Mzc3MTctYzY5Yy00YjQ2LTgzYzUtY2MwOTgxMDkwZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSLXnVjbpvOXLf0vya/foWXV/h5+xwX3V/bz jPe5PxKp8xm51EC2fz6jweGuf7WDk3xvZ+xH46E7IFbdA3/3/mWfMgPiXuAXKm21 fmbPXdMPm/3HGBXhB7kls0gC1Op2bhmCSLY17DlKUDx/mGjIlmXmhcTyRB1fALlG gdMCpnNUG1H2ZrOv7o7DXU3qmN7noJJ4a8JnqhqHy0sbTCywBGLLrEIQPQ3NpOBP 5EIf44kgC+NEDbhnqtPWcTFhYym0ib0L/s1FjT8WMmzCQxUAgZkU1zmfVcuoctOw hVkF1Nhlg4rM5kpkc3cSVYq/BrMn/UXZea4izbni+YBh8kHTjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIVBZt5lGNFWQswk3HJAVaqWIHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhYzg0NWMtZjZiNy0z OTIwLThjODYtMmU0NDU2YTBmMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaiGgY7gtHMVpewzNgdh3EdfUaifhd2tp8TY8LkKgpQGl3dks6XE97x xS1mitHBt5aBTLyMFiKmErXX5RVzJAK3O1smOAH0vIhr5S4stsvtXaZDDlWqx6Wl 6r5vT1HYxgWA5tk+IJ/s8lHeg0MGn16E5l9d0wVV/cestn9wUY3RN99qJs32RJiv LAZAQs6G0U75UfvRxUlAfiOSFKak4DjHaXzCDrMSkEiKBAMlnRhrb38Ad4FIiuQ9 rImZKzG1Us5IDCEUlxssK5SNtYsp9cmurYe4Y9eF8VHO2SOqwThAMTlczhWByZ6Y sePl3p1qW79Qpm1+EctwCpuSCbjE1gk= -----END CERTIFICATE-----Generated at Thu May 28 17:52:52 2026 by rpki-client