$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa File: 2a428851-c296-3ffd-83aa-596e36f896f0.roa (raw, json) Hash identifier: sJXlFiDlZRI4Zj6lgvX67yeBgAA0MrNNVU3j2uKJhYo= Subject key identifier: 6D:9F:E6:0C:D6:64:2F:91:40:21:41:A3:AE:E3:E9:F9:26:94:25:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF7C0D7118166ED36A880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f7:c0:d7:11:81:66:ed:36:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=7b28c936-c6ed-46b1-8735-12d8c5b74dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:ce:3f:4f:53:b6:88:e7:f4:a9:8d:15:b3: c1:54:bb:9b:ec:57:b1:22:c1:fc:5b:11:07:f7:19: 4b:2a:91:d0:61:2c:a7:12:51:5b:00:9f:fa:1b:6e: 1f:a5:8d:de:cd:ee:30:be:07:91:32:44:b4:e6:66: 92:b2:97:60:cd:45:1c:fb:3e:c4:fc:f2:58:d6:fd: 95:c5:80:c8:01:da:7a:fc:b2:40:80:79:33:a1:7f: 6f:94:63:80:a5:80:89:68:67:b3:2f:d0:cd:47:33: 74:a8:d0:2f:0e:81:cc:2e:38:79:05:d9:56:6c:65: 8b:d6:41:7d:3c:04:a7:27:bd:ac:d6:72:74:f1:49: b7:15:41:04:62:7d:95:d3:4d:98:47:bb:f0:2b:26: 8d:4b:1b:5d:e1:a0:94:08:45:bb:1a:97:c7:3e:1f: af:f9:f1:07:a9:29:eb:06:b8:ed:82:74:ee:df:73: 69:ba:79:2e:73:42:02:f5:84:da:65:fa:95:fa:ff: cd:51:8a:8c:d3:f2:62:72:5e:dc:1a:bc:5d:a0:93: c4:e5:d5:87:52:25:bf:17:69:1b:51:d7:de:74:27: af:18:58:83:50:10:6d:ab:c2:c2:86:23:a9:85:93: c4:34:64:96:41:d2:97:9f:23:d6:36:9b:b5:ac:31: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9F:E6:0C:D6:64:2F:91:40:21:41:A3:AE:E3:E9:F9:26:94:25:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2b:3f:1d:6b:59:75:31:96:22:67:cb:12:b6:86:73:fb:81: 6f:fb:24:6b:0e:23:c5:b8:36:2f:01:1f:8b:67:63:9b:8b:88: 51:ce:35:b7:e4:0e:00:3a:bd:9c:cb:25:76:f0:c9:a9:8c:cd: 01:66:bd:c5:e7:61:68:14:91:c1:59:1d:aa:33:e5:8e:41:5f: 32:18:28:60:90:45:6e:b5:78:b8:bd:4a:e4:40:ae:1b:52:e4: 78:f7:e4:4f:48:7f:b6:90:80:cd:9c:36:9f:b2:7f:41:60:70: e6:4e:42:c6:83:bc:6a:72:2c:e6:5b:b4:98:d3:98:6c:fd:84: dc:ad:a7:1d:a0:97:6e:58:96:d8:e6:1d:90:92:ea:7e:72:7f: f5:06:52:cc:65:e1:39:0c:4e:b7:3a:25:fb:df:c6:ad:f1:69: f3:db:6a:ab:75:cb:d1:2e:06:b7:4e:b1:51:9f:bf:32:72:d0: 35:50:9e:d0:c3:10:7f:47:24:26:ce:22:00:20:e5:b8:57:90: da:a6:f9:fc:42:5a:6b:d7:56:14:5a:30:ce:b1:db:1c:ac:bb: 48:4c:d7:7a:17:2c:8a:69:50:3e:e2:56:2f:1b:cb:3e:48:98: c1:d5:82:0e:22:a2:d0:32:66:96:7a:6a:ed:cb:99:0f:1d:01: aa:a5:a8:b0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4QTvfA1xGBZu02qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk N2IyOGM5MzYtYzZlZC00NmIxLTg3MzUtMTJkOGM1Yjc0ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkjOP09Ttojn9KmNFbPBVLub7FexIsH8WxEH 9xlLKpHQYSynElFbAJ/6G24fpY3eze4wvgeRMkS05maSspdgzUUc+z7E/PJY1v2V xYDIAdp6/LJAgHkzoX9vlGOApYCJaGezL9DNRzN0qNAvDoHMLjh5BdlWbGWL1kF9 PASnJ72s1nJ08Um3FUEEYn2V002YR7vwKyaNSxtd4aCUCEW7GpfHPh+v+fEHqSnr BrjtgnTu33Npunkuc0IC9YTaZfqV+v/NUYqM0/Jicl7cGrxdoJPE5dWHUiW/F2kb UdfedCevGFiDUBBtq8LChiOphZPENGSWQdKXnyPWNpu1rDFNMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG2f5gzWZC+RQCFBo67j6fkmlCWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0Mjg4NTEtYzI5Ni0z ZmZkLTgzYWEtNTk2ZTM2Zjg5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdys/HWtZdTGWImfLEraGc/uBb/skaw4jxbg2LwEfi2djm4uIUc41t+QO ADq9nMsldvDJqYzNAWa9xedhaBSRwVkdqjPljkFfMhgoYJBFbrV4uL1K5ECuG1Lk ePfkT0h/tpCAzZw2n7J/QWBw5k5CxoO8anIs5lu0mNOYbP2E3K2nHaCXbliW2OYd kJLqfnJ/9QZSzGXhOQxOtzol+9/GrfFp89tqq3XL0S4Gt06xUZ+/MnLQNVCe0MMQ f0ckJs4iACDluFeQ2qb5/EJaa9dWFFowzrHbHKy7SEzXehcsimlQPuJWLxvLPkiY wdWCDiKi0DJmlnpq7cuZDx0BqqWosA== -----END CERTIFICATE-----Generated at Sat Jun 13 06:02:07 2026 by rpki-client