$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa File: b624cd06-3f80-33dc-9336-4ce73e3a13da.roa (raw, json) Hash identifier: ncshe/hBjpW8aXImc+Fc4NWH9T1mXsxaM1W/nygWBlU= Subject key identifier: 9C:3B:BA:27:FE:3E:38:D2:A4:AD:98:12:79:AF:8A:9D:72:93:08:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA2EB96F31C4CDF8A9D840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 98.17.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:2e:b9:6f:31:c4:cd:f8:a9:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=01bd27ce-db63-443f-91e5-21c314d0b121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:48:01:4e:b5:2b:da:b0:9e:59:50:b6:da: 2c:64:95:cd:12:14:a5:f0:fa:85:26:13:7c:97:a4: 57:a4:76:f0:70:b5:fe:f3:cc:7a:4a:96:21:4a:46: 56:1b:20:cc:c2:fe:9b:39:27:ef:1f:98:28:e0:00: 68:e0:14:10:36:cc:68:2e:ab:2f:60:61:e0:a5:8d: 80:a7:98:4f:ad:0b:86:56:e2:e2:8a:11:0c:9a:62: e3:57:12:3e:7f:e1:e3:36:a4:26:a1:40:10:79:63: fc:1d:ae:8b:3a:be:0f:4c:36:bb:9d:f6:0b:85:17: da:f5:97:34:57:c8:1c:5b:71:ef:e1:8d:81:e3:1f: b5:08:3c:63:8e:8c:df:a2:a7:2f:11:20:ec:72:c2: ec:e5:80:79:3a:bf:87:54:9e:e9:f2:ed:e9:64:a7: b1:86:bf:aa:f9:54:84:d2:a1:e5:70:74:dd:c7:5d: 4f:39:a8:5e:29:e7:fc:52:23:bd:18:c2:93:01:69: 83:51:6d:f5:63:8e:63:61:7e:7f:1a:e7:cc:66:c9: e4:66:f1:8e:5d:dc:c9:c6:4c:7c:4a:7c:bf:35:c9: a1:8d:fb:c6:d7:0d:74:ad:d7:32:4c:3a:e0:b3:20: 58:24:49:c4:55:e4:cd:b4:57:11:49:55:e6:02:2d: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:BA:27:FE:3E:38:D2:A4:AD:98:12:79:AF:8A:9D:72:93:08:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d5:73:e5:cd:67:9b:1a:cd:2c:f4:6c:f8:46:b2:e8:4f:d4: 06:3a:d2:1c:61:bb:f9:d6:9c:84:c7:4f:87:c5:d9:e1:51:2b: e6:da:9b:7f:c2:81:43:52:08:23:72:13:31:4e:ff:6d:a5:0c: b8:51:a4:b9:85:e2:c9:14:06:d6:3f:bc:4d:12:21:0c:85:21: d4:c1:41:27:59:99:ab:15:eb:09:3f:20:44:96:38:de:c7:7d: 72:f2:40:21:ce:db:7a:f2:60:1b:16:15:07:88:0b:7f:35:2a: 1b:94:d9:19:c1:55:2b:80:10:ee:68:f8:24:ad:26:b4:bb:1c: 92:8e:26:78:c4:1c:cc:84:33:5f:07:b7:50:cc:62:5a:81:97: 50:f2:a1:ac:e3:af:34:b3:0e:0b:2f:ab:a9:06:bb:79:8c:7c: 8c:03:96:b2:be:33:0b:91:40:28:86:b7:23:4f:ad:b0:e6:5a: b7:c4:fb:50:e0:73:7f:7b:9c:5d:47:fe:a8:b5:0b:ea:2b:69: eb:35:11:db:62:ad:99:90:12:d2:0c:e7:a6:1b:e3:c3:52:fb: dc:a0:28:b4:e6:0c:51:6d:27:3f:d6:cf:98:71:50:9f:8b:72: 50:16:85:d6:16:9d:f6:a4:3c:40:8e:c7:3e:83:db:0a:4d:ec: 3e:b6:db:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vui65bzHEzfip2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDFiZDI3Y2UtZGI2My00NDNmLTkxZTUtMjFjMzE0ZDBiMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6tIAU61K9qwnllQttosZJXNEhSl8PqFJhN8 l6RXpHbwcLX+88x6SpYhSkZWGyDMwv6bOSfvH5go4ABo4BQQNsxoLqsvYGHgpY2A p5hPrQuGVuLiihEMmmLjVxI+f+HjNqQmoUAQeWP8Ha6LOr4PTDa7nfYLhRfa9Zc0 V8gcW3Hv4Y2B4x+1CDxjjozfoqcvESDscsLs5YB5Or+HVJ7p8u3pZKexhr+q+VSE 0qHlcHTdx11POaheKef8UiO9GMKTAWmDUW31Y45jYX5/GufMZsnkZvGOXdzJxkx8 Sny/NcmhjfvG1w10rdcyTDrgsyBYJEnEVeTNtFcRSVXmAi014wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw7uif+PjjSpK2YEnmvip1ykwg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjYyNGNkMDYtM2Y4MC0z M2RjLTkzMzYtNGNlNzNlM2ExM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErVc+XNZ5sazSz0bPhGsuhP1AY60hxhu/nWnITHT4fF2eFRK+bam3/C gUNSCCNyEzFO/22lDLhRpLmF4skUBtY/vE0SIQyFIdTBQSdZmasV6wk/IESWON7H fXLyQCHO23ryYBsWFQeIC381KhuU2RnBVSuAEO5o+CStJrS7HJKOJnjEHMyEM18H t1DMYlqBl1DyoazjrzSzDgsvq6kGu3mMfIwDlrK+MwuRQCiGtyNPrbDmWrfE+1Dg c397nF1H/qi1C+oraes1EdtirZmQEtIM56Yb48NS+9ygKLTmDFFtJz/Wz5hxUJ+L clAWhdYWnfakPECOxz6D2wpN7D622zU= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:59 2026 by rpki-client