$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/183607ea-13b1-36fd-a114-d3d29f218355.roa File: 183607ea-13b1-36fd-a114-d3d29f218355.roa (raw, json) Hash identifier: OxW71V/PNqaqxWgpN5nDRoeKl/WwdOiuz+FtTmBkNA4= Subject key identifier: B1:94:58:6F:73:31:88:CF:89:81:9E:6E:B0:42:16:80:DD:9E:11:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D843097F25F8B64F726DAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/183607ea-13b1-36fd-a114-d3d29f218355.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.17.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:30:97:f2:5f:8b:64:f7:26:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=47724e32-aa45-4d30-a774-0cd635a350ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:48:8c:89:fe:d3:34:d3:8d:e6:b8:35:db: fc:36:ab:e1:f5:ef:b1:b9:97:9d:05:86:27:85:1c: 50:ee:a8:8f:09:39:72:88:ec:58:1b:29:e2:39:ce: 07:41:8f:3b:18:d3:62:8e:c7:93:99:f1:6b:86:a6: 9f:21:65:e9:7b:f4:1c:5b:3a:2b:62:a9:cf:b1:30: 38:b3:c0:55:56:09:99:e8:1b:82:28:43:9b:89:81: 07:fb:ca:61:76:1b:24:a6:42:7b:88:cc:48:56:f6: 90:1c:d3:c9:98:05:94:b6:03:08:2c:70:f6:18:b7: 04:0b:01:fb:aa:04:6d:c5:af:37:0b:8b:17:2c:89: 5a:c7:0e:55:44:74:68:30:0e:dc:3e:f3:5f:b1:b1: 8f:39:97:99:8e:63:14:73:76:94:10:45:54:56:40: ae:c4:69:5f:f0:fb:a8:64:eb:a6:96:08:92:da:20: 6a:27:2f:49:9a:ce:60:b4:ee:28:1b:2f:01:9c:29: 46:31:9c:6b:e1:4e:fa:66:8f:86:df:30:b9:36:f7: 85:33:96:ff:01:dc:c4:47:a3:66:e1:93:72:57:5f: f4:3f:79:3b:b8:a3:38:e5:63:45:25:bd:a1:52:f2: 11:05:db:39:a1:88:1f:15:2c:bc:62:27:59:0c:91: 27:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:58:6F:73:31:88:CF:89:81:9E:6E:B0:42:16:80:DD:9E:11:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/183607ea-13b1-36fd-a114-d3d29f218355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3c:37:cc:89:5c:80:e7:71:1f:3d:ce:b6:b9:2b:f9:72:ea: 1a:51:d3:83:65:9a:72:99:78:d2:c6:79:2d:ab:1c:a6:6a:57: bf:9e:2c:24:2d:48:4f:d4:a6:16:0a:b6:70:3c:dd:c0:32:4a: b7:0e:d9:bf:7e:64:7a:02:a4:da:bb:34:75:ad:48:ff:64:78: e4:10:8e:5e:00:2a:12:95:41:3a:58:c4:c4:9a:0d:b3:ac:84: cd:da:31:50:05:e1:85:e2:20:cb:9f:4c:7d:28:88:a8:94:b0: 96:5f:3e:74:5d:16:38:74:7c:9e:8a:e9:12:16:2d:91:92:09: 6b:56:3e:55:83:d1:08:9c:86:45:62:07:b3:2c:74:fd:c1:91: 9a:98:b7:cf:9c:7e:24:45:62:be:7c:d9:9c:56:73:08:c6:73: 89:01:60:90:48:1a:d2:93:8d:96:db:c8:0f:d6:28:03:40:f5: 05:9e:a3:9b:90:10:bc:5a:7e:1d:ea:5a:31:38:4a:e8:3e:16: 18:c5:97:ed:7f:53:c8:d7:c7:0e:e8:c7:b5:2a:11:c5:dd:66: af:88:63:d7:cf:28:35:b8:c8:2c:9a:43:cc:52:3d:c1:16:58: f1:6e:dc:74:8c:d1:87:bb:07:28:4b:b0:3d:50:fe:9a:02:81: ff:a4:8f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhDCX8l+LZPcm2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NDc3MjRlMzItYWE0NS00ZDMwLWE3NzQtMGNkNjM1YTM1MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv9IjIn+0zTTjea4Ndv8Nqvh9e+xuZedBYYn hRxQ7qiPCTlyiOxYGyniOc4HQY87GNNijseTmfFrhqafIWXpe/QcWzorYqnPsTA4 s8BVVgmZ6BuCKEObiYEH+8phdhskpkJ7iMxIVvaQHNPJmAWUtgMILHD2GLcECwH7 qgRtxa83C4sXLIlaxw5VRHRoMA7cPvNfsbGPOZeZjmMUc3aUEEVUVkCuxGlf8Puo ZOumlgiS2iBqJy9Jms5gtO4oGy8BnClGMZxr4U76Zo+G3zC5NveFM5b/AdzER6Nm 4ZNyV1/0P3k7uKM45WNFJb2hUvIRBds5oYgfFSy8YidZDJEn8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGUWG9zMYjPiYGebrBCFoDdnhGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTgzNjA3ZWEtMTNiMS0z NmZkLWExMTQtZDNkMjlmMjE4MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE88N8yJXIDncR89zra5K/ly6hpR04NlmnKZeNLGeS2rHKZqV7+eLCQt SE/UphYKtnA83cAySrcO2b9+ZHoCpNq7NHWtSP9keOQQjl4AKhKVQTpYxMSaDbOs hM3aMVAF4YXiIMufTH0oiKiUsJZfPnRdFjh0fJ6K6RIWLZGSCWtWPlWD0QichkVi B7MsdP3BkZqYt8+cfiRFYr582ZxWcwjGc4kBYJBIGtKTjZbbyA/WKANA9QWeo5uQ ELxafh3qWjE4Sug+FhjFl+1/U8jXxw7ox7UqEcXdZq+IY9fPKDW4yCyaQ8xSPcEW WPFu3HSM0Ye7ByhLsD1Q/poCgf+kjyQ= -----END CERTIFICATE-----Generated at Sat Jun 13 07:25:29 2026 by rpki-client