$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa File: 3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa (raw, json) Hash identifier: vErBXHntNzOj/FPgb4vi/X3UQv0WLMb/3gIdvUqgCkQ= Subject key identifier: 3F:03:38:7A:C9:5A:4E:7D:D1:2C:A4:54:55:A7:9B:7E:73:A9:5A:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF85BDA4558260D228DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.23.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f8:5b:da:45:58:26:0d:22:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=a7a58f4d-d76c-4534-9e1b-fc56046135ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:e7:17:31:d6:d0:74:6e:33:62:ed:8f:ad: da:0c:63:42:a8:a1:c7:b9:21:ad:b1:d5:2f:34:66: 82:ff:c0:ba:af:08:1c:9d:56:60:a2:b9:4f:28:98: 44:ca:5c:44:42:9a:c7:91:84:f9:59:4f:38:bd:02: a4:40:e5:aa:65:84:e6:1e:6e:29:c5:22:ff:5c:24: c6:d2:28:e4:aa:34:41:aa:1e:d0:cb:1b:93:93:73: 9d:d8:ac:6c:5a:21:44:b5:f1:14:25:68:6c:26:27: eb:89:20:b5:4e:68:98:db:39:d1:2c:ee:4c:1c:ea: 40:c0:15:b3:41:5a:43:2f:6c:16:77:6a:b0:82:a3: e4:08:20:e5:ee:63:90:e8:87:e0:1d:37:47:80:32: 44:33:cf:cb:e1:d7:fd:09:df:d0:94:b7:e1:4f:34: 2b:5b:eb:3f:84:b9:32:44:45:f2:c1:5e:26:f5:97: e2:c6:6a:dd:8e:d6:99:e6:d8:b7:e5:47:ad:c7:bf: b5:80:04:f2:46:62:1d:3b:31:53:f3:0f:3f:c5:14: 63:5d:c0:dc:21:ba:d6:32:e5:d2:a2:d3:cd:26:5c: 33:e8:0f:41:31:b6:59:05:ea:7b:a4:06:34:a8:9c: 2e:3b:4c:a6:8f:3f:fe:24:e9:45:7b:dc:57:f4:95: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:38:7A:C9:5A:4E:7D:D1:2C:A4:54:55:A7:9B:7E:73:A9:5A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:66:61:87:b6:9b:bb:ac:27:6c:d2:d6:35:6b:a0:76:ab:67: fc:70:11:0b:fc:ee:bd:67:c3:a6:58:53:98:70:a4:5d:dd:9d: 62:20:e4:8a:64:b8:36:6a:fe:7a:9e:4d:2b:1f:9d:df:07:d8: ee:50:47:c5:2e:b0:7c:7c:00:84:4d:de:8e:da:ff:41:99:4b: 62:37:ac:38:60:65:ab:76:a1:51:75:91:42:60:4d:27:0a:a7: 65:7f:89:12:99:13:c7:62:c3:6a:f1:4b:36:17:61:d5:de:44: 51:76:32:0e:c2:b6:fd:f5:20:0e:43:e3:3b:db:6c:7d:f1:1a: 9b:be:32:3b:a9:0d:bd:0e:ed:b8:b7:a4:ec:45:d1:a4:d7:54: ad:a7:d7:4a:3d:26:97:48:b1:4a:83:4f:a5:f0:68:37:72:fc: 13:9c:c2:19:88:83:da:5e:d8:9d:b6:ee:29:4e:2b:f7:56:a8: 99:d3:bc:21:ca:67:2f:10:a9:94:22:56:33:43:bb:04:45:57: 45:7f:68:6f:7d:6b:9a:b2:21:12:dc:1d:95:05:cb:b0:00:0e: f3:81:c3:d4:c8:6d:e5:0f:07:60:b3:e6:b2:02:7c:8d:6d:59: 42:43:2c:39:28:cc:a5:6c:6e:8f:00:7f:a9:a4:fb:68:b4:8c: 3e:1d:a5:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvhb2kVYJg0ijcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YTdhNThmNGQtZDc2Yy00NTM0LTllMWItZmM1NjA0NjEzNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPTnFzHW0HRuM2Ltj63aDGNCqKHHuSGtsdUv NGaC/8C6rwgcnVZgorlPKJhEylxEQprHkYT5WU84vQKkQOWqZYTmHm4pxSL/XCTG 0ijkqjRBqh7QyxuTk3Od2KxsWiFEtfEUJWhsJifriSC1TmiY2znRLO5MHOpAwBWz QVpDL2wWd2qwgqPkCCDl7mOQ6IfgHTdHgDJEM8/L4df9Cd/QlLfhTzQrW+s/hLky REXywV4m9ZfixmrdjtaZ5ti35Uetx7+1gATyRmIdOzFT8w8/xRRjXcDcIbrWMuXS otPNJlwz6A9BMbZZBep7pAY0qJwuO0ymjz/+JOlFe9xX9JWIewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8DOHrJWk590SykVFWnm35zqVr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JiOWQ4MmEtM2FmZi0z MjExLTk2Y2ItYTQ2M2U2Yjg1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9mYYe2m7usJ2zS1jVroHarZ/xwEQv87r1nw6ZYU5hwpF3dnWIg5Ipk uDZq/nqeTSsfnd8H2O5QR8UusHx8AIRN3o7a/0GZS2I3rDhgZat2oVF1kUJgTScK p2V/iRKZE8diw2rxSzYXYdXeRFF2Mg7Ctv31IA5D4zvbbH3xGpu+MjupDb0O7bi3 pOxF0aTXVK2n10o9JpdIsUqDT6XwaDdy/BOcwhmIg9pe2J227ilOK/dWqJnTvCHK Zy8QqZQiVjNDuwRFV0V/aG99a5qyIRLcHZUFy7AADvOBw9TIbeUPB2Cz5rICfI1t WUJDLDkozKVsbo8Af6mk+2i0jD4dpeE= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:12 2026 by rpki-client