$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa File: b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa (raw, json) Hash identifier: cH8r6Yd43Mhp5NnEN+2/bMzWllkV75LENeZziPzV60Q= Subject key identifier: D1:01:F1:6C:00:DE:AA:72:78:F7:80:C3:8A:51:7E:10:DB:45:D0:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D703FF122AC109E97A5754D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 7029 IP address blocks: 98.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f1:22:ac:10:9e:97:a5:75:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=4c0df153-7a1d-40b4-90d7-fafc7bdbc0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:e0:a8:41:20:cc:0d:75:7a:5b:95:40:8d: de:3d:df:81:90:24:7e:c2:ce:d8:2b:df:9c:09:45: ce:d8:e9:30:c8:d2:51:f9:3f:78:bf:57:8d:6a:6f: ac:83:5c:de:01:d1:f6:f8:f7:d6:d7:4c:48:88:bf: 92:dd:d9:f8:40:61:2e:f9:54:de:32:fc:f8:53:9b: e4:09:dd:0a:5d:00:6e:14:aa:f9:a0:3e:ab:fa:0c: f2:39:bc:1f:c8:eb:44:10:49:a5:e4:bb:be:70:4b: a5:2e:4b:31:7f:fc:e0:d7:93:50:85:6b:18:76:da: 1e:e9:52:10:a1:d5:53:7b:07:8c:50:fd:e0:8b:be: aa:e0:a4:43:ce:a3:55:3b:13:60:f3:cc:e2:0d:dd: cb:d6:57:30:34:57:31:81:78:a7:91:cf:70:66:45: 06:d8:52:19:37:8a:14:cd:59:72:fc:63:a6:d4:09: 81:fb:35:3e:aa:15:4d:d1:25:0a:c7:fd:10:75:19: be:b6:f2:f4:ee:d9:a2:10:1e:03:36:93:54:d2:98: 4b:5a:0e:64:dc:46:f8:06:48:3e:e6:1c:a5:b7:97: 68:aa:06:12:9b:52:bc:f0:83:a7:57:44:13:ac:96: 93:46:14:64:bd:e2:d1:d4:fc:d6:5f:b5:ce:da:08: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:01:F1:6C:00:DE:AA:72:78:F7:80:C3:8A:51:7E:10:DB:45:D0:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:dc:db:02:64:a2:41:b3:ca:7f:99:de:01:a0:88:10:20:f6: 72:29:64:0a:b7:9d:50:69:c9:89:80:72:ad:3c:04:18:a6:59: 0b:86:85:3e:01:55:24:e0:a8:c1:4c:de:b8:2b:c9:69:72:57: 2e:56:a4:4d:bd:3c:7e:7f:0c:59:b3:c3:ec:a4:24:e7:a5:bc: d2:6f:e8:0c:34:cb:0c:72:b5:ad:31:95:26:68:a8:7f:ed:19: c9:3b:a1:a9:79:09:d5:a4:aa:89:78:3f:60:d8:c6:08:65:7b: aa:85:11:dd:4f:a4:0d:1e:25:b1:a4:e3:19:42:85:ff:ce:e6: 1a:d1:bd:b2:ec:48:80:65:34:3b:90:3f:99:d5:a7:61:0f:c5: fd:e1:e7:43:cc:15:99:df:1a:c1:46:18:d5:e3:c3:73:35:3d: b4:e9:3b:84:88:f3:1e:b0:fa:b5:2a:75:3e:13:04:4d:c7:54: 9b:1d:20:d1:1d:f4:4b:c0:80:29:28:47:36:6f:11:e8:d3:13: 2b:a6:e2:ef:e3:01:05:fc:90:ad:f3:aa:0a:06:15:71:03:3a: db:f0:4e:e7:a4:66:df:c2:8c:ba:d8:55:c4:2f:9b:f1:8b:73: b2:9c:4c:0b:1e:87:09:53:36:d3:b2:e6:c0:a7:d9:f4:06:13: a8:72:d7:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/EirBCel6V1TWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NGMwZGYxNTMtN2ExZC00MGI0LTkwZDctZmFmYzdiZGJjMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFLgqEEgzA11eluVQI3ePd+BkCR+ws7YK9+c CUXO2OkwyNJR+T94v1eNam+sg1zeAdH2+PfW10xIiL+S3dn4QGEu+VTeMvz4U5vk Cd0KXQBuFKr5oD6r+gzyObwfyOtEEEml5Lu+cEulLksxf/zg15NQhWsYdtoe6VIQ odVTeweMUP3gi76q4KRDzqNVOxNg88ziDd3L1lcwNFcxgXinkc9wZkUG2FIZN4oU zVly/GOm1AmB+zU+qhVN0SUKx/0QdRm+tvL07tmiEB4DNpNU0phLWg5k3Eb4Bkg+ 5hylt5doqgYSm1K88IOnV0QTrJaTRhRkveLR1PzWX7XO2giejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEB8WwA3qpyePeAw4pRfhDbRdAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc5MTJlNTEtNmZhOS0z ZTQ0LTllNmMtMTNiYTljMzA3NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETc2wJkokGzyn+Z3gGgiBAg9nIpZAq3nVBpyYmAcq08BBimWQuGhT4B VSTgqMFM3rgryWlyVy5WpE29PH5/DFmzw+ykJOelvNJv6Aw0ywxyta0xlSZoqH/t Gck7oal5CdWkqol4P2DYxghle6qFEd1PpA0eJbGk4xlChf/O5hrRvbLsSIBlNDuQ P5nVp2EPxf3h50PMFZnfGsFGGNXjw3M1PbTpO4SI8x6w+rUqdT4TBE3HVJsdINEd 9EvAgCkoRzZvEejTEyum4u/jAQX8kK3zqgoGFXEDOtvwTuekZt/CjLrYVcQvm/GL c7KcTAsehwlTNtOy5sCn2fQGE6hy16Q= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:05 2026 by rpki-client