$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa File: d4d720d3-846d-3239-b157-4b6a59742d0f.roa (raw, json) Hash identifier: Zj2N8OSV0mIBAhpx8/tYFN3uqQyKam9utmcd1uydW9E= Subject key identifier: 55:2E:B7:58:07:88:FA:97:B7:A6:8F:BD:9E:06:7B:9B:1C:98:E4:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DF7A5DA11980AF50E0048E680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 7029 IP address blocks: 98.22.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:da:11:98:0a:f5:0e:00:48:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=af92b282-2708-48a9-86aa-cb657077e780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:65:36:e8:52:63:45:5b:c6:e7:33:6c:a8: 1a:78:2c:b2:ce:aa:d9:ca:6e:fb:07:e0:46:e4:06: 74:c0:73:96:8a:9f:92:45:8c:af:00:b9:45:e0:6c: 21:5b:0d:07:9e:da:61:01:84:43:4c:bf:38:e0:1b: 20:13:bd:ff:ac:a5:66:a2:5b:3b:c9:8c:52:b3:52: 64:2c:52:a8:94:f2:d2:86:8f:eb:85:8a:db:53:5e: ca:47:04:db:4c:60:f1:22:9f:ef:88:73:89:62:5f: c1:bd:bc:5a:88:67:fd:37:cd:e9:58:f0:9e:61:e1: 06:26:3d:5a:96:fe:81:f2:31:40:70:e7:f5:1c:cd: 27:97:0a:fe:78:c8:a2:e4:6a:02:b0:2c:a2:6f:90: fb:97:70:7f:40:9a:ee:79:b3:ef:ce:92:57:44:36: f3:3a:1a:6f:76:83:ec:86:8c:4b:18:39:33:93:50: da:5e:f0:c7:43:c3:dc:d9:89:39:bd:2c:08:8d:59: 62:71:0a:4d:df:44:b9:35:18:e5:4e:e9:96:fa:39: da:9c:b1:48:2f:bc:a6:21:28:aa:c5:e9:11:20:5a: 34:cb:27:20:3b:9c:36:d3:e4:b3:b5:83:2a:12:2f: 38:27:e2:56:d1:8c:ba:21:64:dc:59:d1:8b:6a:76: 8c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:B7:58:07:88:FA:97:B7:A6:8F:BD:9E:06:7B:9B:1C:98:E4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5c:1d:b8:7c:53:11:d0:13:25:e3:91:7e:d5:19:68:17:74: 53:8b:37:2d:06:b5:b3:0d:c8:92:75:ec:8d:39:d5:a0:2f:92: 3c:1a:a5:4c:9b:7f:23:72:69:47:84:41:6d:58:57:50:cb:40: 12:8d:86:76:d1:91:dc:7d:08:2b:be:1d:d1:e1:ad:d6:36:9a: ba:36:9d:a4:07:44:1f:f3:88:4b:f3:2c:73:d4:da:43:2a:5b: 6e:d5:30:1e:79:20:4b:78:b9:b2:84:c1:df:55:2c:8d:02:9f: 9e:02:be:c1:8a:64:5a:d9:24:5e:d3:7a:25:5d:d5:a9:77:59: 35:65:b2:d9:4e:2a:2a:cd:72:72:03:db:3a:ce:5f:50:ae:93: 8d:e7:1b:e0:5c:f7:f8:62:f8:05:a9:05:2c:9b:e1:69:59:d4: 04:63:ee:7d:66:d0:14:9a:6a:d2:70:e7:c1:02:5e:93:96:97: 1f:c6:c9:f2:34:af:a6:a4:94:6b:e3:7d:da:ad:03:52:fa:b2: 1a:5b:aa:e7:49:08:0a:78:9b:a9:ab:3e:9b:10:39:cb:0b:90: fc:72:74:0b:60:b7:b8:cc:5b:8e:98:28:96:3a:cd:45:03:57: bf:18:c7:d7:9d:dc:d4:f8:db:7c:79:d3:ca:42:1c:3d:b0:b0: 9a:f9:45:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pdoRmAr1DgBI5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk YWY5MmIyODItMjcwOC00OGE5LTg2YWEtY2I2NTcwNzdlNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinVlNuhSY0VbxuczbKgaeCyyzqrZym77B+BG 5AZ0wHOWip+SRYyvALlF4GwhWw0HntphAYRDTL844BsgE73/rKVmols7yYxSs1Jk LFKolPLSho/rhYrbU17KRwTbTGDxIp/viHOJYl/BvbxaiGf9N83pWPCeYeEGJj1a lv6B8jFAcOf1HM0nlwr+eMii5GoCsCyib5D7l3B/QJruebPvzpJXRDbzOhpvdoPs hoxLGDkzk1DaXvDHQ8Pc2Yk5vSwIjVlicQpN30S5NRjlTumW+jnanLFIL7ymISiq xekRIFo0yycgO5w20+SztYMqEi84J+JW0Yy6IWTcWdGLanaMUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUut1gHiPqXt6aPvZ4Ge5scmOSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkNzIwZDMtODQ2ZC0z MjM5LWIxNTctNGI2YTU5NzQyZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBcHbh8UxHQEyXjkX7VGWgXdFOLNy0GtbMNyJJ17I051aAvkjwapUyb fyNyaUeEQW1YV1DLQBKNhnbRkdx9CCu+HdHhrdY2mro2naQHRB/ziEvzLHPU2kMq W27VMB55IEt4ubKEwd9VLI0Cn54CvsGKZFrZJF7TeiVd1al3WTVlstlOKirNcnID 2zrOX1Cuk43nG+Bc9/hi+AWpBSyb4WlZ1ARj7n1m0BSaatJw58ECXpOWlx/GyfI0 r6aklGvjfdqtA1L6shpbqudJCAp4m6mrPpsQOcsLkPxydAtgt7jMW46YKJY6zUUD V78Yx9ed3NT423x508pCHD2wsJr5RSo= -----END CERTIFICATE-----Generated at Thu May 28 17:11:40 2026 by rpki-client