$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a136ac-30e4-3fdf-b588-d54c51315330.roa File: a6a136ac-30e4-3fdf-b588-d54c51315330.roa (raw, json) Hash identifier: PoWsiXTdXzpwUprlXNgQPt30RZKJU+Zr9gHrfo5HMB8= Subject key identifier: 46:0E:28:97:09:99:1B:2D:B2:7C:CB:83:70:B3:FF:12:86:C4:0E:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E46BF25C6B9C49BEF852EC140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a136ac-30e4-3fdf-b588-d54c51315330.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 98.17.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:25:c6:b9:c4:9b:ef:85:2e:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=0b4f3713-c8de-4daa-8588-5b10c7519263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:03:38:88:2b:cc:8b:36:8c:89:89:62:b7: 16:33:24:a9:52:11:fb:64:76:cc:43:74:2b:89:db: 3d:b2:e0:15:04:9d:bb:86:88:14:9c:c6:40:72:31: aa:15:85:d1:4d:b1:c5:cd:f8:b2:88:aa:b8:4f:f1: d0:e7:57:da:49:7e:a4:97:e4:30:ba:f1:15:ba:5b: 85:98:9c:f7:09:57:d5:89:c6:e3:06:09:10:36:6c: 55:aa:1b:7b:3e:63:cc:d1:16:15:5b:7c:d9:07:d4: e9:cf:70:6b:55:ea:55:06:ac:9d:cc:01:39:79:2b: a5:f3:8d:45:2c:7f:c1:7f:b5:e6:c8:df:bd:a9:b4: 37:e3:c3:df:12:56:77:fe:db:3d:a1:9f:51:7a:42: f6:57:cc:40:2b:fb:df:f1:5c:da:65:d5:13:c8:ab: 56:ab:a3:e6:f2:d9:6a:d7:08:0b:3d:71:a3:c9:ec: c7:38:ac:69:87:64:0e:03:d0:f0:11:23:f8:07:ad: 5b:a0:31:7e:c1:a5:45:42:65:68:80:97:da:2f:6d: 69:c0:87:54:4d:f9:e2:6d:60:44:be:f5:be:93:88: 6a:9d:24:6e:a0:b6:9d:13:19:c7:04:37:d2:81:3b: 06:83:da:0c:33:1d:7e:f4:ca:18:d6:52:0e:74:ab: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:28:97:09:99:1B:2D:B2:7C:CB:83:70:B3:FF:12:86:C4:0E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a136ac-30e4-3fdf-b588-d54c51315330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0e:71:a4:a1:0c:0a:59:44:82:c5:e7:b9:06:b2:63:2a:ee: 0b:ad:33:14:39:b9:92:4b:70:3e:7e:01:ac:0b:8a:2f:95:19: 2d:37:b4:21:e5:7d:7e:1b:09:fd:b8:a7:fc:3d:ad:77:f0:2d: fd:1e:0b:35:11:26:f7:cd:d2:90:49:2b:bc:1c:da:de:cc:37: 91:b0:25:b5:95:e8:21:11:10:da:32:f6:6b:f1:3f:d3:5a:6d: 67:62:4a:06:05:11:1d:0f:59:b9:00:8a:fe:72:4f:8d:fd:2b: fc:cd:ec:80:67:11:19:93:cd:6f:f5:33:d3:cd:51:f5:6a:86: 96:96:14:21:25:6c:a5:ba:7d:d0:9c:e3:46:01:e0:51:43:e0: 83:ba:6f:31:ef:37:55:85:a7:bd:2e:d6:40:2e:22:13:4a:51: 68:5c:4d:05:8c:17:ee:0f:0a:24:47:dd:84:a1:0d:c8:f8:75: f5:fc:55:a1:64:29:1b:c9:01:3f:bc:93:37:52:94:ff:69:88: b2:6f:fd:a3:0f:82:4c:38:63:62:12:41:0b:c1:7c:b4:12:b5: b3:90:49:b8:c3:b0:a8:f5:5f:4b:c0:c7:ea:de:78:11:4a:42: 18:24:39:21:08:55:ea:90:31:03:88:e5:7e:ba:6e:fc:7c:3a: b4:86:dd:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvyXGucSb74UuwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk MGI0ZjM3MTMtYzhkZS00ZGFhLTg1ODgtNWIxMGM3NTE5MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibwDOIgrzIs2jImJYrcWMySpUhH7ZHbMQ3Qr ids9suAVBJ27hogUnMZAcjGqFYXRTbHFzfiyiKq4T/HQ51faSX6kl+QwuvEVuluF mJz3CVfVicbjBgkQNmxVqht7PmPM0RYVW3zZB9Tpz3BrVepVBqydzAE5eSul841F LH/Bf7XmyN+9qbQ348PfElZ3/ts9oZ9RekL2V8xAK/vf8VzaZdUTyKtWq6Pm8tlq 1wgLPXGjyezHOKxph2QOA9DwESP4B61boDF+waVFQmVogJfaL21pwIdUTfnibWBE vvW+k4hqnSRuoLadExnHBDfSgTsGg9oMMx1+9MoY1lIOdKtHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYOKJcJmRstsnzLg3Cz/xKGxA7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZhMTM2YWMtMzBlNC0z ZmRmLWI1ODgtZDU0YzUxMzE1MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcOcaShDApZRILF57kGsmMq7gutMxQ5uZJLcD5+AawLii+VGS03tCHl fX4bCf24p/w9rXfwLf0eCzURJvfN0pBJK7wc2t7MN5GwJbWV6CERENoy9mvxP9Na bWdiSgYFER0PWbkAiv5yT439K/zN7IBnERmTzW/1M9PNUfVqhpaWFCElbKW6fdCc 40YB4FFD4IO6bzHvN1WFp70u1kAuIhNKUWhcTQWMF+4PCiRH3YShDcj4dfX8VaFk KRvJAT+8kzdSlP9piLJv/aMPgkw4Y2ISQQvBfLQStbOQSbjDsKj1X0vAx+reeBFK QhgkOSEIVeqQMQOI5X66bvx8OrSG3fg= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:47 2026 by rpki-client