$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json) Hash identifier: vUEnfwwh6FrEHab5fHQqHNlTCOVOaJScpPuqJLUfB9g= Subject key identifier: 63:DD:23:70:1A:D2:67:85:B5:9B:47:37:48:9A:42:34:B6:91:B3:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842FB5540851E4E0AF1B68 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.20.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2f:b5:54:08:51:e4:e0:af:1b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=e31d6f03-f69c-4916-b176-6efa137ace80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:2c:53:3f:db:e5:70:9e:7a:6f:9e:57:ce: cf:31:e2:1f:9a:28:77:51:b0:17:56:02:05:d1:c8: 69:45:62:84:0e:36:e8:0d:71:f2:8b:fe:16:2a:30: 37:b5:2f:db:3a:bd:99:ae:ce:11:49:24:60:2c:73: 35:3b:4a:f4:42:e1:3f:ce:f0:d0:38:0e:5b:ca:98: 41:37:8e:d0:3b:24:ad:5d:fc:68:59:65:d0:9b:34: 9c:47:27:e2:7b:63:a4:bb:28:85:08:db:a2:9f:2d: c3:8e:31:7e:10:55:aa:d9:4a:a5:3e:9a:52:57:40: 04:0f:cd:4a:75:74:ff:df:31:e2:5d:7c:9e:39:fa: c0:b5:ea:9d:6f:54:23:36:e3:23:38:c9:cf:b8:44: b8:4e:ae:85:fa:76:81:68:67:0f:eb:05:cc:48:c3: 04:b6:f4:db:99:98:28:f4:12:3e:1a:3b:ec:9c:b8: 56:ee:29:5c:dd:4d:a3:f9:60:7b:f9:f9:c3:7d:a3: 82:92:d5:5e:62:04:88:7a:f6:cc:d1:b4:1e:4b:17: 7b:55:47:4a:58:7a:db:73:8a:52:a6:4b:1b:20:02: 72:a3:27:83:58:7a:fb:9e:c3:de:2e:b7:5a:71:ba: c6:70:62:b5:ea:2e:62:ed:c2:75:8d:72:c4:d2:91: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DD:23:70:1A:D2:67:85:B5:9B:47:37:48:9A:42:34:B6:91:B3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b7:a7:eb:79:cb:ce:6c:2e:ad:e5:c4:0f:bf:65:4e:dd:c0: 22:c0:b0:e9:50:49:0a:6f:55:32:b5:68:6a:03:c0:b3:90:7b: 4a:54:05:ec:a6:99:58:76:9f:8b:62:aa:32:a5:b7:ae:a8:b0: f7:09:82:66:40:af:a4:e5:4e:e3:50:92:6b:4a:76:c0:f9:fa: 4b:2f:17:d7:37:31:b4:fa:32:32:0e:ed:68:6a:8f:b2:3a:01: 03:d8:c5:08:86:f5:4f:b4:ff:26:67:c9:93:c4:0b:9a:6f:4c: 0d:d5:e5:b8:62:48:05:aa:2e:af:00:29:f6:be:f6:de:50:f5: 66:bd:58:7c:52:7f:55:61:ac:98:cd:ca:e5:1f:1e:47:e7:b5: 83:09:b3:47:b9:cf:ed:4a:1c:0c:d4:54:22:46:d6:a3:88:7b: ff:b3:41:8d:aa:da:20:ff:3f:e1:60:01:24:1f:01:e6:10:a4: 15:87:cd:48:af:25:08:bc:c4:2b:79:c3:45:8f:ff:03:c9:98: da:6d:9c:ab:77:1e:51:d7:84:07:20:71:08:6e:37:30:0d:19: 16:70:f7:51:5f:15:4f:5e:9f:ee:af:d6:09:06:51:74:d8:dd: e9:fa:89:b9:82:63:22:13:ea:82:54:39:12:05:29:b5:e1:e6: a3:2f:7c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhC+1VAhR5OCvG2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZTMxZDZmMDMtZjY5Yy00OTE2LWIxNzYtNmVmYTEzN2FjZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMYsUz/b5XCeem+eV87PMeIfmih3UbAXVgIF 0chpRWKEDjboDXHyi/4WKjA3tS/bOr2Zrs4RSSRgLHM1O0r0QuE/zvDQOA5byphB N47QOyStXfxoWWXQmzScRyfie2OkuyiFCNuiny3DjjF+EFWq2UqlPppSV0AED81K dXT/3zHiXXyeOfrAteqdb1QjNuMjOMnPuES4Tq6F+naBaGcP6wXMSMMEtvTbmZgo 9BI+GjvsnLhW7ilc3U2j+WB7+fnDfaOCktVeYgSIevbM0bQeSxd7VUdKWHrbc4pS pksbIAJyoyeDWHr7nsPeLrdacbrGcGK16i5i7cJ1jXLE0pFpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPdI3Aa0meFtZtHN0iaQjS2kbNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE5NWFkMzMtYzNiMS0z NjE4LTg4NGQtMTc3MjUzMThhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe3p+t5y85sLq3lxA+/ZU7dwCLAsOlQSQpvVTK1aGoDwLOQe0pUBeym mVh2n4tiqjKlt66osPcJgmZAr6TlTuNQkmtKdsD5+ksvF9c3MbT6MjIO7Whqj7I6 AQPYxQiG9U+0/yZnyZPEC5pvTA3V5bhiSAWqLq8AKfa+9t5Q9Wa9WHxSf1VhrJjN yuUfHkfntYMJs0e5z+1KHAzUVCJG1qOIe/+zQY2q2iD/P+FgASQfAeYQpBWHzUiv JQi8xCt5w0WP/wPJmNptnKt3HlHXhAcgcQhuNzANGRZw91FfFU9en+6v1gkGUXTY 3en6ibmCYyIT6oJUORIFKbXh5qMvfJI= -----END CERTIFICATE-----Generated at Sat Jun 13 07:34:42 2026 by rpki-client