$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa File: 2df1ec2d-c15c-37ee-9be8-f210775488b5.roa (raw, json) Hash identifier: tQEfE26l+/rO6LJq3oII7AY498Aq3MLIM/LvsJ6IIeI= Subject key identifier: DB:11:AB:05:34:8B:20:67:8B:C4:38:34:F4:42:4F:95:77:23:4E:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1E4492D563E643D5E61936A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.17.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:92:d5:63:e6:43:d5:e6:19:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=f04d819a-fa10-4ef4-91fa-9a8299587d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:3e:ff:9d:93:60:b7:57:76:62:3c:7a:15: 82:60:27:c0:99:51:39:af:27:42:a2:47:4d:18:e3: b4:14:48:bf:75:69:c2:e4:11:4d:44:f3:7b:8c:f4: 73:82:f1:5a:45:dc:4e:cd:1f:d3:92:f0:46:c8:1a: b8:5e:2f:f5:87:7a:f0:9c:75:c8:cc:70:63:dc:90: 85:a3:e8:e9:f0:42:03:a7:5c:e1:d8:12:28:bc:40: 5c:8d:84:9e:ea:cd:e1:c8:42:50:33:d7:5f:8d:5a: 43:12:41:32:fd:5c:8f:a0:3b:03:ac:8d:86:0d:36: ee:c8:96:dc:84:7a:57:f9:47:5e:10:88:dc:a7:3c: 98:6c:59:7a:20:76:4c:77:0b:0e:59:cc:a2:a4:ed: 86:fe:34:3b:6f:2e:12:30:49:2d:97:4a:a9:f7:1b: d1:aa:b6:d1:ac:24:64:b0:09:df:92:29:06:ae:21: 9b:52:2f:ae:1d:b7:c5:21:23:b8:9e:80:bd:5f:0f: f5:35:95:ca:9e:ef:dd:a5:98:7d:64:0b:a9:0b:e4: dd:7b:e4:37:5c:d9:0c:b2:27:6a:7a:fb:70:64:c4: b8:a9:9d:2d:7f:b1:de:25:c5:cd:75:d8:68:43:43: 6c:87:6b:bd:30:53:e2:d2:4e:e4:84:2d:6b:18:ec: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:AB:05:34:8B:20:67:8B:C4:38:34:F4:42:4F:95:77:23:4E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2f:ba:65:e3:60:bc:8e:0c:47:61:37:52:d9:04:f2:cc:d7: ca:4a:d8:eb:c5:f1:d1:85:68:d9:a6:24:91:2b:9c:c2:bb:a2: 76:2c:28:c5:aa:11:e8:bd:c6:93:3d:cc:fe:18:62:3a:4e:da: 1c:8a:91:b4:94:23:4a:73:a4:22:3c:9d:a5:89:bb:b4:45:2a: e5:ec:7f:d4:e4:19:e8:11:e1:29:07:6e:59:6d:ad:62:54:21: 97:21:c9:8d:48:48:c5:d7:b8:60:e9:c4:2a:6d:54:f8:bd:4c: c9:b4:8d:fe:79:7a:4a:81:37:8e:0e:93:2a:11:f8:08:af:44: f6:60:af:de:9c:6e:45:d0:df:22:8f:e3:17:89:38:00:ad:27: d8:65:de:93:d6:38:b3:07:0d:30:c3:d9:a6:67:5f:ce:88:41: b2:c1:a6:a5:9f:d0:5c:06:bc:5b:64:f1:40:45:4d:4e:87:48: a8:ab:a8:ed:c2:9e:e0:98:e0:fd:65:19:e2:7a:df:98:24:60: 49:6a:77:e3:66:7e:21:0d:99:bd:7c:c4:f6:d8:39:ec:61:47: bc:9d:72:00:e0:50:3c:ea:14:46:e4:9c:19:71:eb:5f:5f:f8: c5:1c:e9:74:4c:45:ad:fb:27:79:d3:24:8e:5a:15:c0:ec:b6: d6:6a:48:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJLVY+ZD1eYZNqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjA0ZDgxOWEtZmExMC00ZWY0LTkxZmEtOWE4Mjk5NTg3ZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcc+/52TYLdXdmI8ehWCYCfAmVE5rydCokdN GOO0FEi/dWnC5BFNRPN7jPRzgvFaRdxOzR/TkvBGyBq4Xi/1h3rwnHXIzHBj3JCF o+jp8EIDp1zh2BIovEBcjYSe6s3hyEJQM9dfjVpDEkEy/VyPoDsDrI2GDTbuyJbc hHpX+UdeEIjcpzyYbFl6IHZMdwsOWcyipO2G/jQ7by4SMEktl0qp9xvRqrbRrCRk sAnfkikGriGbUi+uHbfFISO4noC9Xw/1NZXKnu/dpZh9ZAupC+Tde+Q3XNkMsidq evtwZMS4qZ0tf7HeJcXNddhoQ0Nsh2u9MFPi0k7khC1rGOyBWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsRqwU0iyBni8Q4NPRCT5V3I07tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRmMWVjMmQtYzE1Yy0z N2VlLTliZTgtZjIxMDc3NTQ4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsvumXjYLyODEdhN1LZBPLM18pK2OvF8dGFaNmmJJErnMK7onYsKMWq Eei9xpM9zP4YYjpO2hyKkbSUI0pzpCI8naWJu7RFKuXsf9TkGegR4SkHblltrWJU IZchyY1ISMXXuGDpxCptVPi9TMm0jf55ekqBN44OkyoR+AivRPZgr96cbkXQ3yKP 4xeJOACtJ9hl3pPWOLMHDTDD2aZnX86IQbLBpqWf0FwGvFtk8UBFTU6HSKirqO3C nuCY4P1lGeJ635gkYElqd+NmfiENmb18xPbYOexhR7ydcgDgUDzqFEbknBlx619f +MUc6XRMRa37J3nTJI5aFcDsttZqSI0= -----END CERTIFICATE-----Generated at Sat Jun 13 07:27:08 2026 by rpki-client