$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: V0xVDPCtC0tUk8Z1d2V0fTuzM37bjTzrcNVF5YySsS8= Subject key identifier: 02:12:86:80:5E:50:39:8B:ED:1C:2A:02:CF:8E:56:3F:CC:D7:44:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE15079DC60B2DDAFB6A3C480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:79:dc:60:b2:dd:af:b6:a3:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=fd1b9558-1d8f-4091-afc1-560ed5f3f64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e0:5a:34:b1:4e:38:9e:00:34:13:cd:5e:30: 79:c1:75:64:6e:63:5f:0a:38:0e:65:29:5b:62:b4: 36:15:47:49:8d:c4:f6:43:e8:ea:bf:75:99:d2:62: 2d:2d:a9:de:c6:a0:89:09:ef:b1:f7:1f:e4:3a:25: cc:ba:8e:0b:be:ee:3c:c3:3a:2a:e7:c2:e5:3a:54: bf:3d:3b:95:05:19:da:76:89:93:78:54:ef:b4:ba: 2a:91:f8:44:83:c2:dd:0c:b2:ea:92:e1:8f:68:e6: 73:ec:99:7c:c1:c6:1e:1c:ea:16:76:46:9a:82:01: 00:04:69:a8:1b:44:c0:d0:18:9d:ae:7f:f7:9e:92: 17:6f:7a:e8:f3:2b:ec:4b:1a:c1:2f:41:67:9a:6e: 0e:d9:b3:00:93:9f:70:cd:e7:1c:76:24:1e:88:cb: 3c:63:38:b0:8a:a2:8e:ca:1a:65:53:98:ef:76:f5: 81:8c:be:d3:87:7e:b5:18:20:11:13:ea:8c:5a:b5: 13:41:40:90:49:f2:c8:ef:c0:39:26:36:7e:b6:77: 41:f5:4f:20:16:ca:b4:b5:3e:74:e3:cf:06:02:44: a7:72:cf:f9:bf:0b:80:5d:b4:3f:9e:fa:48:dd:5e: 50:fc:7a:0d:70:0b:0e:02:7d:ae:5a:45:1a:0a:dc: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:86:80:5E:50:39:8B:ED:1C:2A:02:CF:8E:56:3F:CC:D7:44:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:4f:55:1f:ab:35:05:b2:ca:98:54:67:29:fd:b8:a8:89:51: e9:23:9f:2e:57:2e:d4:42:f0:03:9e:51:d3:94:a5:95:85:bb: 76:b6:2a:ce:5d:02:11:41:b2:11:ca:f1:1b:72:94:a5:a8:08: e3:fa:24:74:2f:f8:09:76:5b:ae:89:a4:44:e9:57:60:51:5c: ea:bf:44:31:de:03:c7:b0:a6:bb:fa:0b:df:b7:0b:32:e5:04: 67:ba:56:1a:b9:76:d5:ec:34:d9:2a:a2:92:08:df:2f:cd:bd: 1f:91:0c:66:c0:15:16:3d:86:d2:07:4a:59:ff:77:6c:fa:36: 70:1b:ff:fe:66:66:8b:96:b3:da:9c:65:2e:96:11:b8:c2:08: e0:ec:ec:73:b1:93:aa:93:05:cd:12:a6:2d:f8:de:0f:c9:7e: f9:44:21:13:35:7d:93:a0:8d:b2:1c:78:35:96:83:28:27:d2: 4e:c7:d0:26:ae:85:b9:57:76:ed:fb:b2:6e:fd:46:48:90:2f: 32:92:24:fe:0c:76:66:82:5c:05:63:51:88:16:11:0e:2b:c4: 4f:85:07:71:c7:d5:df:a4:f2:06:c9:3a:b9:9f:14:70:70:52: b3:e5:c3:72:3d:d5:15:95:2a:e8:1e:9a:fe:57:09:14:83:ab: b6:76:32:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUHncYLLdr7ajxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZmQxYjk1NTgtMWQ4Zi00MDkxLWFmYzEtNTYwZWQ1ZjNmNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uBaNLFOOJ4ANBPNXjB5wXVkbmNfCjgOZSlb YrQ2FUdJjcT2Q+jqv3WZ0mItLanexqCJCe+x9x/kOiXMuo4Lvu48wzoq58LlOlS/ PTuVBRnadomTeFTvtLoqkfhEg8LdDLLqkuGPaOZz7Jl8wcYeHOoWdkaaggEABGmo G0TA0Bidrn/3npIXb3ro8yvsSxrBL0Fnmm4O2bMAk59wzeccdiQeiMs8YziwiqKO yhplU5jvdvWBjL7Th361GCARE+qMWrUTQUCQSfLI78A5JjZ+tndB9U8gFsq0tT50 488GAkSncs/5vwuAXbQ/nvpI3V5Q/HoNcAsOAn2uWkUaCty3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIShoBeUDmL7RwqAs+OVj/M10SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1PVR+rNQWyyphUZyn9uKiJUekjny5XLtRC8AOeUdOUpZWFu3a2Ks5d AhFBshHK8RtylKWoCOP6JHQv+Al2W66JpETpV2BRXOq/RDHeA8ewprv6C9+3CzLl BGe6Vhq5dtXsNNkqopII3y/NvR+RDGbAFRY9htIHSln/d2z6NnAb//5mZouWs9qc ZS6WEbjCCODs7HOxk6qTBc0Spi343g/JfvlEIRM1fZOgjbIceDWWgygn0k7H0Cau hblXdu37sm79RkiQLzKSJP4MdmaCXAVjUYgWEQ4rxE+FB3HH1d+k8gbJOrmfFHBw UrPlw3I91RWVKugemv5XCRSDq7Z2MvI= -----END CERTIFICATE-----Generated at Thu May 28 17:11:52 2026 by rpki-client