$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa File: 582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa (raw, json) Hash identifier: VJd4eaM/Lw2YUCq6p1srMqalZANHFijuYdImm1Kx0pI= Subject key identifier: 2F:94:0B:7C:65:07:D6:B8:8A:EB:49:CB:4F:3C:D6:5C:77:E9:F7:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E35FF170D2E42A1973CF1D540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 98.17.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:17:0d:2e:42:a1:97:3c:f1:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=37a085f1-22b3-4ad2-a4fc-fd6509fd2a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:21:26:8c:a3:5d:04:6f:05:e2:5c:ce:0b:56: ea:e8:39:b3:d3:61:0d:57:a8:1c:2f:8a:ea:52:d7: 21:0e:a3:49:31:1f:6b:c3:fc:29:c2:59:95:4a:1e: e4:50:97:37:52:1c:43:9b:bd:31:7d:31:e8:b3:ba: bc:a5:3a:aa:93:f6:f8:3a:65:43:7b:22:6a:10:30: 1a:53:3f:d5:81:dd:13:32:f1:40:19:53:f1:1f:9d: 47:1b:77:05:0b:c6:89:9e:f8:db:81:38:53:47:31: 27:10:05:8f:2a:ed:ca:ff:ab:7a:65:86:29:06:60: f2:13:75:82:3a:27:d5:d8:04:35:cd:0e:b6:e7:a5: 12:13:00:46:cf:35:e0:a1:db:81:ce:2a:fa:74:c0: c9:8f:67:28:2a:81:f9:2f:03:ae:38:be:5f:5c:db: 04:f7:ca:2a:f5:0c:7b:a6:ef:94:67:af:ae:71:9f: 72:e1:fc:2b:0d:2b:6b:c3:c2:a4:74:39:61:37:b7: 05:d6:95:10:1e:c4:13:c5:46:ed:79:16:76:7b:5d: 40:ce:7e:cb:6f:a3:bc:3f:55:4c:c4:cc:b3:db:58: 90:38:b4:00:fa:7e:41:d9:de:33:2b:63:34:2c:c2: 91:56:03:5d:f8:4c:c6:f1:39:11:f6:f4:25:31:c4: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:0B:7C:65:07:D6:B8:8A:EB:49:CB:4F:3C:D6:5C:77:E9:F7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8e:fe:d1:73:a3:59:fd:39:02:47:04:97:47:68:a1:80:54: b4:0f:41:3f:52:d0:8f:ed:de:e6:b7:29:ab:92:52:a2:f5:0b: 1d:e7:f7:da:5a:02:c7:4f:e9:46:29:b5:e5:9e:25:14:9d:39: c4:8a:18:e9:b0:a6:95:25:af:71:72:e2:ac:b7:46:c5:19:81: 17:31:16:22:2b:45:ca:38:3a:75:5e:f3:39:e0:d4:ab:38:72: db:ac:7a:eb:64:2c:a4:46:10:de:56:2a:61:b2:48:ca:02:1f: 29:94:d2:e7:72:d2:6f:17:4c:3c:53:b7:13:55:e5:fe:dd:13: ba:0d:d0:83:e6:9c:ce:c9:a2:aa:c7:af:43:02:32:33:a6:ba: 04:08:0b:7f:1c:7d:98:0f:0a:9f:44:62:c4:81:04:33:8e:44: e0:35:b0:2f:62:80:c0:ba:c7:9a:67:de:b8:3f:c1:1f:3d:f0: 68:37:77:c6:2c:32:89:98:88:79:10:04:a9:6a:2c:b5:68:75: 2f:14:d2:a7:55:f6:66:7f:f9:38:89:d0:e6:b8:44:e3:9b:6a: 25:ba:d8:eb:9c:1c:6c:33:f6:47:1c:c6:92:9b:b3:14:7e:7b: d4:56:f9:90:bb:a2:a7:8b:8e:e4:8d:c1:07:94:c2:50:dc:d5: a3:ac:03:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xcNLkKhlzzx1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MzdhMDg1ZjEtMjJiMy00YWQyLWE0ZmMtZmQ2NTA5ZmQyYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yEmjKNdBG8F4lzOC1bq6Dmz02ENV6gcL4rq UtchDqNJMR9rw/wpwlmVSh7kUJc3UhxDm70xfTHos7q8pTqqk/b4OmVDeyJqEDAa Uz/Vgd0TMvFAGVPxH51HG3cFC8aJnvjbgThTRzEnEAWPKu3K/6t6ZYYpBmDyE3WC OifV2AQ1zQ6256USEwBGzzXgoduBzir6dMDJj2coKoH5LwOuOL5fXNsE98oq9Qx7 pu+UZ6+ucZ9y4fwrDStrw8KkdDlhN7cF1pUQHsQTxUbteRZ2e11Azn7Lb6O8P1VM xMyz21iQOLQA+n5B2d4zK2M0LMKRVgNd+EzG8TkR9vQlMcT0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+UC3xlB9a4iutJy0881lx36fd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTgyOTgwYzYtZGQ5My0z ZmEzLTkxNDYtN2U2YWM2YTQ1YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaO/tFzo1n9OQJHBJdHaKGAVLQPQT9S0I/t3ua3KauSUqL1Cx3n99pa AsdP6UYpteWeJRSdOcSKGOmwppUlr3Fy4qy3RsUZgRcxFiIrRco4OnVe8zng1Ks4 ctuseutkLKRGEN5WKmGySMoCHymU0udy0m8XTDxTtxNV5f7dE7oN0IPmnM7JoqrH r0MCMjOmugQIC38cfZgPCp9EYsSBBDOOROA1sC9igMC6x5pn3rg/wR898Gg3d8Ys MomYiHkQBKlqLLVodS8U0qdV9mZ/+TiJ0Oa4ROObaiW62OucHGwz9kccxpKbsxR+ e9RW+ZC7oqeLjuSNwQeUwlDc1aOsA9Q= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:24 2026 by rpki-client