$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa File: 5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa (raw, json) Hash identifier: WQZbI+OU+129Poqer3DppxXy17mj37prF1w+At5tQ4E= Subject key identifier: 01:90:7E:BD:5A:C0:A5:CC:92:55:7D:E4:70:06:01:C2:0A:59:C2:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA40D095D108D637E84FA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 98.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:40:d0:95:d1:08:d6:37:e8:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a2efca50-8113-46e9-b494-81deb0b2c31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:2e:51:49:d2:35:d0:d1:03:67:42:6e:14: c9:20:7e:bd:27:1b:4e:bb:6f:d0:1b:38:92:01:39: 39:88:39:16:f3:de:39:a2:0d:f8:22:61:cf:81:fe: 68:12:43:75:f8:9c:75:c6:51:6e:81:a7:a2:73:75: fa:eb:f9:d0:cb:13:03:0d:99:8e:12:09:6c:b6:63: 7e:59:45:e7:0d:c2:76:37:ad:05:5d:28:d5:8d:bb: 2a:0a:a0:9f:3c:29:ff:30:24:57:da:fe:fe:7e:7f: 4b:22:2d:a7:43:aa:a2:9c:5d:72:de:59:62:b2:08: 4e:ee:6e:27:04:f2:a9:62:f4:34:11:c1:23:ee:ea: f5:ed:dd:9d:2d:69:53:fd:84:ff:0b:9b:11:19:7a: e9:28:03:06:75:15:bf:07:99:93:30:bc:46:81:d7: 2b:20:57:b4:e1:15:af:96:00:5a:5a:1e:ae:a7:23: be:48:9e:f6:65:53:01:c2:0b:c1:07:c0:cd:ac:dc: a2:b8:5c:8f:1f:96:b6:fb:e9:26:a8:34:14:21:39: df:74:e1:38:a9:3f:7a:db:b2:cc:37:c2:ad:c3:01: ad:99:17:31:2d:2f:de:9f:a2:ec:fa:4d:07:6d:ff: f8:3e:2a:62:79:89:ea:b3:f3:99:31:ed:ee:7c:c1: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:90:7E:BD:5A:C0:A5:CC:92:55:7D:E4:70:06:01:C2:0A:59:C2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d1:31:00:b7:62:e6:30:e6:ed:6e:a3:25:b8:f7:8c:22:83: 5e:d3:b7:76:5c:b2:bc:c5:c5:d5:69:c0:f7:2f:f8:ae:24:4d: 62:65:1b:04:1e:61:cd:42:d8:d7:57:c4:e2:ca:23:7a:16:84: e4:e0:2f:a2:84:81:c9:59:dd:87:21:d0:6d:fe:7f:42:9b:1d: 16:e8:4f:e1:2b:0a:b3:86:66:0d:65:59:6f:aa:9b:88:55:85: ed:56:ef:cc:b4:25:2c:1d:71:88:11:e8:db:84:9e:b8:0a:a1: 0e:42:6b:6a:e6:c3:79:75:1c:13:52:8c:7b:51:4e:8d:58:3a: 8a:ef:e8:1e:d5:63:01:b4:fe:da:d4:98:d4:d5:b7:6f:7e:62: 8e:55:1d:15:d2:27:ad:80:5b:d2:90:84:3b:00:e0:3d:ea:d2: 30:d9:b9:8d:7e:15:32:e6:39:6d:39:63:3e:2f:61:30:41:c1: a5:b8:af:77:13:04:1f:98:01:1c:1f:76:a1:b7:8e:0f:5a:8a: 19:2b:1e:b9:72:0c:15:cb:d5:21:9d:9c:5b:6f:7b:64:07:75: e5:0e:25:de:99:bd:4c:ba:17:a6:2c:a5:87:98:ff:66:c0:05: 96:71:1f:13:b2:82:c1:a2:50:99:a2:24:f5:b5:8f:0d:48:7f: 3c:3c:0f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukDQldEI1jfoT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTJlZmNhNTAtODExMy00NmU5LWI0OTQtODFkZWIwYjJjMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgusuUUnSNdDRA2dCbhTJIH69JxtOu2/QGziS ATk5iDkW8945og34ImHPgf5oEkN1+Jx1xlFugaeic3X66/nQyxMDDZmOEglstmN+ WUXnDcJ2N60FXSjVjbsqCqCfPCn/MCRX2v7+fn9LIi2nQ6qinF1y3llisghO7m4n BPKpYvQ0EcEj7ur17d2dLWlT/YT/C5sRGXrpKAMGdRW/B5mTMLxGgdcrIFe04RWv lgBaWh6upyO+SJ72ZVMBwgvBB8DNrNyiuFyPH5a2++kmqDQUITnfdOE4qT9627LM N8KtwwGtmRcxLS/en6Ls+k0Hbf/4PipieYnqs/OZMe3ufME6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGQfr1awKXMklV95HAGAcIKWcLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFmMDNiYTMtZDZkYS0z ODBjLTllNzctY2JjNDgyZjZkZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3RMQC3YuYw5u1uoyW494wig17Tt3ZcsrzFxdVpwPcv+K4kTWJlGwQe Yc1C2NdXxOLKI3oWhOTgL6KEgclZ3Ych0G3+f0KbHRboT+ErCrOGZg1lWW+qm4hV he1W78y0JSwdcYgR6NuEnrgKoQ5Ca2rmw3l1HBNSjHtRTo1YOorv6B7VYwG0/trU mNTVt29+Yo5VHRXSJ62AW9KQhDsA4D3q0jDZuY1+FTLmOW05Yz4vYTBBwaW4r3cT BB+YARwfdqG3jg9aihkrHrlyDBXL1SGdnFtve2QHdeUOJd6ZvUy6F6YspYeY/2bA BZZxHxOygsGiUJmiJPW1jw1Ifzw8D3g= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:32 2026 by rpki-client