$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa File: 2d12af04-2386-32b8-bb48-4b8966b6c222.roa (raw, json) Hash identifier: p3ffNgVp1AZlsrHrkuM+lp3jDPktSqNhNnpoR1Ew9/I= Subject key identifier: 3A:B0:D5:E8:5A:D3:20:55:6C:1C:D2:F4:49:BC:05:A5:95:00:57:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF7EDD695681FF52AF880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.18.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f7:ed:d6:95:68:1f:f5:2a:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=1e283e56-c3a0-4e3b-9dc8-3d0891b8aa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:1c:9c:dd:ef:61:62:1c:6c:9d:ad:ca:16: 6b:4c:fc:86:40:f8:55:76:fe:ea:f0:bf:78:22:69: 55:33:96:3d:fe:63:48:de:c1:1f:8c:29:f7:5f:0d: 01:81:63:77:99:a0:b2:7f:3c:da:c9:31:7c:d2:39: 26:7c:b1:e3:d7:95:22:df:96:eb:ed:33:2d:c8:79: fe:a5:34:23:a9:5b:33:33:69:77:00:b1:1d:75:f3: 6c:cf:10:7a:0a:18:29:df:13:db:79:9b:77:8a:81: ad:0e:f4:44:9a:0d:b0:01:48:63:c1:1e:be:67:b5: 07:5a:87:7e:1d:b1:9d:c5:54:ed:dd:0d:95:51:1d: 12:16:d5:f6:be:05:ba:39:ae:d1:83:d9:d1:8b:aa: 67:5d:94:75:f2:a4:d0:0f:87:b3:08:a7:de:fe:b6: c1:80:5b:b9:a9:47:d8:18:6c:53:28:70:1f:92:94: 62:46:06:ba:9b:3c:a9:b2:44:66:11:8c:a4:20:e2: 17:b7:01:69:45:dc:38:9e:1d:f9:15:d1:3a:1c:74: fd:b3:b5:9b:81:14:30:5f:48:66:9f:3d:2c:86:f0: 8e:af:3c:b1:0c:53:01:dd:f5:a1:a0:6c:07:84:8c: 0d:98:db:66:c7:40:ad:f4:2e:61:84:9c:1e:4b:26: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B0:D5:E8:5A:D3:20:55:6C:1C:D2:F4:49:BC:05:A5:95:00:57:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:25:98:19:a3:cc:a9:63:3c:13:bb:e2:ce:f5:17:90:22:bd: 5f:2a:56:dc:ee:7d:37:51:bf:90:e6:08:47:c7:3a:fa:ad:a9: a8:e5:3d:e1:89:9d:dc:4f:0e:76:27:82:e4:14:2c:b6:59:65: 12:78:c5:03:da:de:34:b4:22:46:45:ab:ef:4f:40:24:f5:b1: d3:8d:51:c7:02:d4:f8:b3:4b:45:fe:2d:9f:d8:85:e7:5a:99: e1:a7:12:3e:c5:f5:98:8c:ef:6a:e7:3c:d3:0b:8c:dd:8b:14: 24:9a:1f:04:0b:8f:b2:03:d0:12:ec:02:89:48:dd:81:80:0a: 13:4e:3d:15:db:55:9f:82:1a:40:48:85:88:22:25:c8:cb:7e: 8c:57:e4:59:35:03:f2:99:9f:87:16:1c:cb:9a:4a:74:2e:39: e4:47:da:12:11:9b:83:a1:a3:80:79:0e:83:20:6c:dc:88:bf: 58:49:86:f0:cb:eb:55:58:27:de:48:fa:e2:cc:6d:76:d6:9f: 52:e9:39:de:32:4d:94:34:98:e9:39:e3:d0:38:72:79:b9:95: f0:bc:aa:4d:90:6c:d5:2c:23:a6:c3:70:60:cc:0d:24:2d:2b: 06:34:a8:da:41:8a:b9:c0:e0:6e:56:52:5b:bc:9f:93:0b:b9: a2:25:e9:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvft1pVoH/Uq+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MWUyODNlNTYtYzNhMC00ZTNiLTlkYzgtM2QwODkxYjhhYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ccnN3vYWIcbJ2tyhZrTPyGQPhVdv7q8L94 ImlVM5Y9/mNI3sEfjCn3Xw0BgWN3maCyfzzayTF80jkmfLHj15Ui35br7TMtyHn+ pTQjqVszM2l3ALEddfNszxB6Chgp3xPbeZt3ioGtDvREmg2wAUhjwR6+Z7UHWod+ HbGdxVTt3Q2VUR0SFtX2vgW6Oa7Rg9nRi6pnXZR18qTQD4ezCKfe/rbBgFu5qUfY GGxTKHAfkpRiRga6mzypskRmEYykIOIXtwFpRdw4nh35FdE6HHT9s7WbgRQwX0hm nz0shvCOrzyxDFMB3fWhoGwHhIwNmNtmx0Ct9C5hhJweSybNXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqw1eha0yBVbBzS9Em8BaWVAFfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQxMmFmMDQtMjM4Ni0z MmI4LWJiNDgtNGI4OTY2YjZjMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFklmBmjzKljPBO74s71F5AivV8qVtzufTdRv5DmCEfHOvqtqajlPeGJ ndxPDnYnguQULLZZZRJ4xQPa3jS0IkZFq+9PQCT1sdONUccC1PizS0X+LZ/Yheda meGnEj7F9ZiM72rnPNMLjN2LFCSaHwQLj7ID0BLsAolI3YGAChNOPRXbVZ+CGkBI hYgiJcjLfoxX5Fk1A/KZn4cWHMuaSnQuOeRH2hIRm4Oho4B5DoMgbNyIv1hJhvDL 61VYJ95I+uLMbXbWn1LpOd4yTZQ0mOk549A4cnm5lfC8qk2QbNUsI6bDcGDMDSQt KwY0qNpBirnA4G5WUlu8n5MLuaIl6eY= -----END CERTIFICATE-----Generated at Sat Jun 13 20:27:10 2026 by rpki-client