$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa File: af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa (raw, json) Hash identifier: upyDLpk1XkJKaw47HTml3fDftqXuJeN4tVxwgLwlIbE= Subject key identifier: DA:C7:AB:06:A1:8C:86:0F:54:5D:06:41:60:AE:7A:9B:50:EC:67:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF4B1DC3D6E1B565EBAEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:4b:1d:c3:d6:e1:b5:65:eb:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=7af6366a-4734-432c-a81c-e20331c8679b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:b5:65:08:c6:d1:09:d0:f2:a1:de:71:c8: 51:ae:3e:12:49:52:f8:ac:8a:1c:c8:b9:ba:69:f8: 08:04:a9:01:02:1a:60:e8:ae:66:99:ba:52:b6:5e: c8:a6:50:c5:22:87:62:12:92:6e:da:dd:97:fc:ba: 92:57:b4:3e:c8:78:9e:df:b2:3a:bc:a8:91:35:ca: d9:dd:70:2e:4d:5a:5d:7c:aa:d1:cc:42:a2:69:8d: 27:29:07:5e:9c:a4:7a:9b:f7:10:6f:44:f9:88:e0: e8:49:18:92:f2:b3:1d:e9:8b:01:58:2b:0a:41:59: db:1b:6a:6a:6d:c3:3a:96:99:90:ca:d7:47:02:02: d3:ea:cc:bc:7c:25:e1:12:19:0f:a5:3a:8a:77:d2: 55:44:a2:b7:8f:2c:54:12:24:29:91:b1:03:c7:0b: ee:ca:c2:d4:02:18:fd:b8:ec:8a:28:0a:13:0c:5e: ad:bc:9d:13:f8:e4:60:68:32:4b:9f:d5:e7:aa:91: 51:8a:48:90:2c:e8:05:b6:d3:90:04:61:1e:cf:5f: 59:85:49:e7:f8:e8:5d:79:27:4f:43:82:a6:83:c9: 0e:37:40:5f:e6:d8:28:a0:9b:20:f5:49:12:c8:33: af:d6:9c:2c:54:df:fa:7f:83:67:2f:c9:cf:83:3c: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:AB:06:A1:8C:86:0F:54:5D:06:41:60:AE:7A:9B:50:EC:67:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:37:ec:69:00:aa:ae:07:5d:12:9d:a4:13:85:bf:c6:23:25: b4:5e:d5:e9:dc:1e:80:54:cf:89:30:df:4a:5f:96:c4:90:f7: 93:fd:34:64:42:3c:53:24:a5:bb:2c:c6:73:91:7a:62:44:11: a3:91:e5:13:cb:13:6f:d7:e6:40:5a:3a:6f:e9:83:0f:1f:0f: 14:00:96:96:20:7f:f6:b4:3e:8b:15:5b:eb:c2:61:15:06:57: 6c:b9:ee:2c:b4:5f:60:ea:fb:d6:3e:12:ed:c9:bb:c4:ca:75: f6:11:78:f9:48:45:8b:a8:90:77:04:01:da:f1:85:5e:f4:f5: 6c:c8:33:42:2e:64:c1:48:5b:eb:cf:77:8d:57:cc:99:bd:bf: a0:de:74:b1:ab:25:d8:1f:65:81:82:43:f8:e0:16:f0:57:cd: ca:4e:c6:ea:71:7b:d8:42:a1:b0:a2:7b:b6:42:22:30:80:95: 88:d6:37:6b:a0:04:ae:5d:63:e5:1f:e2:05:b9:1d:fa:c7:f9: c2:99:91:5e:38:79:2e:a2:15:d2:ab:61:a6:6f:12:0b:71:ee: d0:04:56:35:cf:71:3e:25:d2:e6:73:99:c9:07:e8:51:0a:4b: 72:34:4c:df:ad:7f:23:30:8c:b5:6c:b4:d0:c9:fa:d9:10:1a: 41:a1:e3:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz0sdw9bhtWXrrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk N2FmNjM2NmEtNDczNC00MzJjLWE4MWMtZTIwMzMxYzg2NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArha1ZQjG0QnQ8qHecchRrj4SSVL4rIocyLm6 afgIBKkBAhpg6K5mmbpStl7IplDFIodiEpJu2t2X/LqSV7Q+yHie37I6vKiRNcrZ 3XAuTVpdfKrRzEKiaY0nKQdenKR6m/cQb0T5iODoSRiS8rMd6YsBWCsKQVnbG2pq bcM6lpmQytdHAgLT6sy8fCXhEhkPpTqKd9JVRKK3jyxUEiQpkbEDxwvuysLUAhj9 uOyKKAoTDF6tvJ0T+ORgaDJLn9XnqpFRikiQLOgFttOQBGEez19ZhUnn+OhdeSdP Q4Kmg8kON0Bf5tgooJsg9UkSyDOv1pwsVN/6f4NnL8nPgzyQ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrHqwahjIYPVF0GQWCueptQ7GcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY5YjA4MGItY2RjMy0z Yjk4LWFhOWItZjg3MjUzZDdhNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw37GkAqq4HXRKdpBOFv8YjJbRe1encHoBUz4kw30pflsSQ95P9NGRC PFMkpbssxnORemJEEaOR5RPLE2/X5kBaOm/pgw8fDxQAlpYgf/a0PosVW+vCYRUG V2y57iy0X2Dq+9Y+Eu3Ju8TKdfYRePlIRYuokHcEAdrxhV709WzIM0IuZMFIW+vP d41XzJm9v6DedLGrJdgfZYGCQ/jgFvBXzcpOxupxe9hCobCie7ZCIjCAlYjWN2ug BK5dY+Uf4gW5HfrH+cKZkV44eS6iFdKrYaZvEgtx7tAEVjXPcT4l0uZzmckH6FEK S3I0TN+tfyMwjLVstNDJ+tkQGkGh440= -----END CERTIFICATE-----Generated at Mon Jul 13 07:21:35 2026 by rpki-client