$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa File: 5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa (raw, json) Hash identifier: NwUSsqvtZ40EUiBaaQoz3qyyse71tYMu0qNBuIkgnt0= Subject key identifier: 16:F8:E8:F6:E6:E4:95:87:49:0B:BC:29:A8:24:12:79:8D:DA:89:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E376480BEABD628C7ABF74D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.17.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:80:be:ab:d6:28:c7:ab:f7:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=832c1b96-4d5c-42a5-8b8e-b2dba4d4f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:29:46:f9:f5:f3:06:d0:c4:b4:67:3c:cb: 8a:b7:94:e2:b9:18:5d:09:85:0f:7e:7d:8f:2a:c2: b8:88:e8:64:f4:bc:0f:7d:82:77:74:da:f3:79:3a: 21:35:98:a4:09:ec:d2:db:25:f0:bd:7e:1e:19:cd: 88:2e:be:a5:23:18:c0:d0:87:e6:df:e3:74:31:11: e0:8e:e9:5e:19:a6:ea:16:3c:4d:9c:92:ab:7e:f7: a9:35:c8:e5:63:2e:82:71:df:73:4b:9a:51:ad:3f: bd:1b:cc:16:5c:bd:74:30:2a:b2:96:db:20:74:02: 7e:c1:4b:2d:1e:ec:84:85:b5:e3:8c:10:12:7a:ce: fe:5f:51:ef:6c:79:31:b1:fc:f6:95:e2:a1:de:58: 33:c8:88:63:c9:87:0e:73:c2:14:c1:f8:fc:6f:59: 69:57:45:aa:ad:59:2b:56:f1:47:24:02:d5:00:a7: 37:33:a1:e6:49:ba:ce:32:14:30:d0:2c:bf:8f:89: 12:25:63:6d:34:2f:77:b8:37:dd:ee:69:f2:8d:4d: ef:d9:7b:40:a8:e1:da:32:de:db:57:b3:08:a4:2f: 4f:b1:42:0a:6c:0b:a4:77:9c:70:ca:8f:5d:5f:36: d7:60:0d:df:f9:f4:42:9c:e9:58:c5:dc:57:3a:c3: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F8:E8:F6:E6:E4:95:87:49:0B:BC:29:A8:24:12:79:8D:DA:89:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:63:4a:93:cd:89:48:32:bb:7c:b9:97:b1:c3:cf:3a:de:28: c7:1e:be:7c:a5:4a:63:cc:16:77:70:7b:0b:88:0f:7f:71:fb: a7:64:5f:e2:2d:6a:a4:0c:28:9e:91:84:b7:54:4c:f2:1f:09: f5:b7:36:91:86:a7:80:60:f2:2b:e3:34:dc:b5:6f:ff:6b:51: 5d:68:dc:c1:d9:7b:21:77:a8:1c:2d:f5:72:6a:b6:93:d0:f0: 52:e7:7f:d5:2e:c0:b4:8a:d7:f8:3a:33:4a:41:c0:41:5c:4b: 9d:6b:ea:a5:a7:f3:04:6c:a9:9e:4a:0c:69:2d:12:56:ac:0d: 36:c9:4f:d3:5b:c5:7d:e6:66:2b:76:a5:8e:6e:d3:d2:1c:da: b1:03:43:90:2e:44:ae:40:3b:75:3b:9f:c4:c4:38:28:3b:9b: 19:1c:a0:41:8a:81:e2:00:c5:96:3b:8f:56:ee:5c:92:97:34: 2a:53:5f:ba:de:11:40:58:bd:5c:a8:05:53:8a:a2:5e:4b:fe: f5:dc:c8:37:eb:21:40:a9:e5:2a:8e:7a:d7:1d:b9:6a:2e:01: e5:a1:fb:c7:6d:11:36:11:41:b7:71:c8:d3:4f:a8:68:51:e6: 22:3c:ae:ec:e7:93:92:e4:a7:07:f8:d9:2d:88:49:d6:f7:93: 29:30:54:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIC+q9Yox6v3TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk ODMyYzFiOTYtNGQ1Yy00MmE1LThiOGUtYjJkYmE0ZDRmODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0pRvn18wbQxLRnPMuKt5TiuRhdCYUPfn2P KsK4iOhk9LwPfYJ3dNrzeTohNZikCezS2yXwvX4eGc2ILr6lIxjA0Ifm3+N0MRHg juleGabqFjxNnJKrfvepNcjlYy6Ccd9zS5pRrT+9G8wWXL10MCqyltsgdAJ+wUst HuyEhbXjjBASes7+X1HvbHkxsfz2leKh3lgzyIhjyYcOc8IUwfj8b1lpV0WqrVkr VvFHJALVAKc3M6HmSbrOMhQw0Cy/j4kSJWNtNC93uDfd7mnyjU3v2XtAqOHaMt7b V7MIpC9PsUIKbAukd5xwyo9dXzbXYA3f+fRCnOlYxdxXOsMDAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb46Pbm5JWHSQu8KagkEnmN2onWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFiZGViMTgtMzA3NS0z MWM3LTgyZTQtZWQ3Y2RmMGE0ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANjSpPNiUgyu3y5l7HDzzreKMcevnylSmPMFndwewuID39x+6dkX+It aqQMKJ6RhLdUTPIfCfW3NpGGp4Bg8ivjNNy1b/9rUV1o3MHZeyF3qBwt9XJqtpPQ 8FLnf9UuwLSK1/g6M0pBwEFcS51r6qWn8wRsqZ5KDGktElasDTbJT9NbxX3mZit2 pY5u09Ic2rEDQ5AuRK5AO3U7n8TEOCg7mxkcoEGKgeIAxZY7j1buXJKXNCpTX7re EUBYvVyoBVOKol5L/vXcyDfrIUCp5SqOetcduWouAeWh+8dtETYRQbdxyNNPqGhR 5iI8ruznk5Lkpwf42S2ISdb3kykwVIQ= -----END CERTIFICATE-----Generated at Mon Jul 13 05:52:39 2026 by rpki-client