$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dae600cb-04b9-3d0c-91f9-b52c3720413e.roa File: dae600cb-04b9-3d0c-91f9-b52c3720413e.roa (raw, json) Hash identifier: +dGUdlgf7wwazjoiMPmGnnVl5gSJDHBNe33VzFI4iek= Subject key identifier: 4D:02:43:1B:0A:01:59:44:93:2B:BE:74:9B:C2:5E:6F:FD:05:C2:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD4C082D845FC16AFB74782C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dae600cb-04b9-3d0c-91f9-b52c3720413e.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 98.16.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:82:d8:45:fc:16:af:b7:47:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=6a387f6d-8e22-45a4-9f4a-287ff384a525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:56:e4:95:da:31:b3:02:63:67:01:22:b2: b2:19:45:4f:07:e3:1c:b3:a7:4e:ae:cc:0e:61:74: 24:38:82:32:32:94:7a:94:87:21:8e:e8:45:b5:8c: 52:fa:42:d3:d5:ba:4b:22:2b:1b:87:ea:54:4d:01: bf:44:98:eb:0e:2e:e1:e8:d7:80:1d:f1:03:ee:58: 38:cc:74:1e:6d:30:e8:44:17:0d:1c:19:00:fd:17: e3:34:16:f7:70:92:6e:c4:ad:2e:aa:f6:d5:3c:31: 51:ec:c2:a7:07:bd:91:b9:35:95:ed:7d:e4:72:ab: 37:07:7b:4c:91:ed:d2:4d:5b:86:6b:12:e6:0f:a0: e2:40:e9:95:5b:37:fa:91:41:e8:68:ff:a1:dc:12: 3f:62:6e:14:1b:56:b5:2f:7c:a0:ef:b5:7d:fd:e5: f0:df:95:b2:65:96:36:8d:01:69:95:25:5d:0f:72: 44:1d:16:37:08:fc:75:f3:cd:ad:35:11:fd:99:4a: 9e:e6:ae:4e:2d:3c:4b:48:96:fa:eb:26:25:97:dc: ac:32:9d:0b:c7:36:54:14:18:35:e4:08:e9:8b:81: 57:01:74:ab:3c:be:33:7f:cc:a8:d5:b5:aa:c0:b1: e9:60:92:0f:d4:34:e4:94:78:6b:71:b9:6a:b4:63: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:43:1B:0A:01:59:44:93:2B:BE:74:9B:C2:5E:6F:FD:05:C2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dae600cb-04b9-3d0c-91f9-b52c3720413e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a7:d8:82:a3:92:26:a0:28:10:0c:10:91:71:02:6c:b3:37: 00:ca:31:c5:82:93:37:49:79:6b:54:f0:71:03:00:89:9e:a7: 76:49:45:90:48:cc:26:a8:61:1c:a9:6e:2a:de:3c:50:13:57: bc:97:8f:55:44:74:f4:70:24:ac:1d:36:91:73:25:16:88:d7: 16:09:49:dd:d5:66:5d:3c:5a:fd:8b:06:c4:21:bf:60:2a:e5: f2:4c:f5:c8:75:6a:ae:69:99:c0:9e:7d:0c:fe:cb:21:2c:0e: a8:e2:e2:7f:1b:74:b9:f0:8f:1a:8c:73:e7:68:36:20:de:d7: 5e:97:d6:ef:9b:8d:a5:75:87:a8:e9:75:88:29:c8:d1:7d:4c: 3b:b2:ad:6a:fa:6f:07:b1:6d:4f:c4:b4:a2:40:6c:d2:b2:c6: ba:1d:84:0b:ef:d2:61:93:69:57:cd:51:ca:26:79:8f:53:ae: a2:bb:41:60:0f:94:8f:09:85:66:d3:dd:72:fc:77:3c:04:5c: 40:b4:bb:fe:2d:a4:e5:48:41:51:7f:57:9c:2c:ea:64:cf:58: d9:e0:cb:f0:cc:c9:c4:cf:1c:7e:76:2b:1e:18:fa:67:be:ae: a2:e1:bd:a6:3b:82:65:45:17:ef:b4:a0:61:2e:a2:09:da:27: fd:35:34:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwILYRfwWr7dHgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk NmEzODdmNmQtOGUyMi00NWE0LTlmNGEtMjg3ZmYzODRhNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuhW5JXaMbMCY2cBIrKyGUVPB+Mcs6dOrswO YXQkOIIyMpR6lIchjuhFtYxS+kLT1bpLIisbh+pUTQG/RJjrDi7h6NeAHfED7lg4 zHQebTDoRBcNHBkA/RfjNBb3cJJuxK0uqvbVPDFR7MKnB72RuTWV7X3kcqs3B3tM ke3STVuGaxLmD6DiQOmVWzf6kUHoaP+h3BI/Ym4UG1a1L3yg77V9/eXw35WyZZY2 jQFplSVdD3JEHRY3CPx1882tNRH9mUqe5q5OLTxLSJb66yYll9ysMp0LxzZUFBg1 5Ajpi4FXAXSrPL4zf8yo1bWqwLHpYJIP1DTklHhrcblqtGNrYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0CQxsKAVlEkyu+dJvCXm/9BcJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFlNjAwY2ItMDRiOS0z ZDBjLTkxZjktYjUyYzM3MjA0MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2n2IKjkiagKBAMEJFxAmyzNwDKMcWCkzdJeWtU8HEDAImep3ZJRZBI zCaoYRypbirePFATV7yXj1VEdPRwJKwdNpFzJRaI1xYJSd3VZl08Wv2LBsQhv2Aq 5fJM9ch1aq5pmcCefQz+yyEsDqji4n8bdLnwjxqMc+doNiDe116X1u+bjaV1h6jp dYgpyNF9TDuyrWr6bwexbU/EtKJAbNKyxrodhAvv0mGTaVfNUcomeY9TrqK7QWAP lI8JhWbT3XL8dzwEXEC0u/4tpOVIQVF/V5ws6mTPWNngy/DMycTPHH52Kx4Y+me+ rqLhvaY7gmVFF++0oGEuognaJ/01NOY= -----END CERTIFICATE-----Generated at Thu May 28 17:11:25 2026 by rpki-client