$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa File: 521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa (raw, json) Hash identifier: WuOMcd3tgfdzJjw4iySsVzZOHjsJgfnvLvI5esAQY9Y= Subject key identifier: 63:83:FC:10:89:C2:8C:BA:C3:03:97:C2:8E:56:BD:2A:B1:55:C7:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0006044F0F2C04DE26AB7780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 7029 IP address blocks: 98.22.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:04:4f:0f:2c:04:de:26:ab:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=23ceeb68-edce-4130-82e5-4b930979506e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:f1:71:f1:bd:70:bb:56:0a:8a:59:a2:85: 25:bc:08:fb:5b:b4:da:8a:47:7f:22:5f:a0:9c:a2: 6d:69:f1:4e:84:29:7c:96:c2:ad:59:53:71:01:08: 11:a9:41:ed:34:88:c9:0b:59:a6:16:a6:93:c3:2d: 52:06:b6:aa:40:f6:79:82:5a:d0:8a:dd:cd:f0:26: fa:30:aa:53:c5:35:4c:f5:08:96:2d:2c:6b:54:84: 3e:b8:a1:2b:ce:cd:66:8d:99:ce:c8:ad:b2:09:53: 2a:95:bd:c0:2c:2a:38:0f:6b:49:ac:d0:cf:96:d6: 36:2e:e4:4f:68:4f:7c:d5:7f:d9:5f:98:53:6a:ab: 84:0d:3d:1c:de:fb:5a:63:2e:8c:e7:06:c7:0d:bd: 4e:ec:d4:dd:4a:6c:31:bc:13:1d:89:51:87:b4:82: 1a:bc:95:3c:f1:d2:85:2d:c0:f9:c3:f4:ba:19:30: c6:ec:da:32:f2:55:bd:c8:48:0d:ab:54:22:26:cd: 12:3f:76:74:58:54:a6:f3:1c:0b:85:4e:01:be:92: 19:29:5c:1f:91:b5:f0:d7:03:4c:39:74:9f:0d:fd: 96:2a:1c:9e:a4:2a:3d:95:9c:d9:d9:05:9c:30:5c: 4f:96:05:96:2b:17:51:9b:2c:8a:4a:be:cf:eb:f5: f7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:83:FC:10:89:C2:8C:BA:C3:03:97:C2:8E:56:BD:2A:B1:55:C7:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:53:d1:61:54:68:0d:2e:3e:36:d4:57:2b:6f:44:cd:b3:d0: f0:8d:bf:fb:31:96:e9:40:50:37:ef:04:07:44:93:56:bf:e9: ee:ea:e0:45:f0:19:ff:2c:ed:98:69:36:e8:c8:f8:54:db:04: 34:10:f7:d2:e3:14:ad:f9:9d:c4:73:e5:c1:4d:e0:2b:7a:d7: 87:27:59:3e:34:ad:fe:24:a1:7f:73:81:92:c4:18:f1:41:21: c8:8a:59:83:aa:63:9d:6e:2e:19:3f:15:29:e6:28:41:49:a9: 6f:1a:65:91:d3:9d:f4:67:ec:ae:eb:66:90:a5:8f:90:e8:eb: ee:ab:47:15:a0:69:03:8d:ce:b5:8a:ed:68:a3:fa:82:60:e3: af:1b:7c:8d:59:1c:c8:08:1f:32:44:b2:1e:89:b5:02:83:60: eb:82:f7:76:83:36:1c:ac:4c:3d:84:86:86:0c:e2:13:25:e1: ae:0b:11:cb:28:23:2c:7f:a7:65:63:be:ff:c2:95:ac:cf:61: 9d:2f:30:ce:9b:84:a5:cc:42:4f:6e:b8:aa:de:27:e9:c7:2f: bb:6c:38:fe:7c:40:c7:75:08:8d:bf:19:71:ec:db:af:92:d0: 92:df:45:0f:42:aa:3a:3f:17:f2:06:13:fd:bb:f6:25:74:04: 01:a4:79:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABgRPDywE3iard4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MjNjZWViNjgtZWRjZS00MTMwLTgyZTUtNGI5MzA5Nzk1MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIvxcfG9cLtWCopZooUlvAj7W7Taikd/Il+g nKJtafFOhCl8lsKtWVNxAQgRqUHtNIjJC1mmFqaTwy1SBraqQPZ5glrQit3N8Cb6 MKpTxTVM9QiWLSxrVIQ+uKErzs1mjZnOyK2yCVMqlb3ALCo4D2tJrNDPltY2LuRP aE981X/ZX5hTaquEDT0c3vtaYy6M5wbHDb1O7NTdSmwxvBMdiVGHtIIavJU88dKF LcD5w/S6GTDG7Noy8lW9yEgNq1QiJs0SP3Z0WFSm8xwLhU4BvpIZKVwfkbXw1wNM OXSfDf2WKhyepCo9lZzZ2QWcMFxPlgWWKxdRmyyKSr7P6/X3eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOD/BCJwoy6wwOXwo5WvSqxVcfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIxZGJhYWYtYWI1NC0z OWRhLThhMzAtZWMxMTljMmZkNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRT0WFUaA0uPjbUVytvRM2z0PCNv/sxlulAUDfvBAdEk1a/6e7q4EXw Gf8s7ZhpNujI+FTbBDQQ99LjFK35ncRz5cFN4Ct614cnWT40rf4koX9zgZLEGPFB IciKWYOqY51uLhk/FSnmKEFJqW8aZZHTnfRn7K7rZpClj5Do6+6rRxWgaQONzrWK 7Wij+oJg468bfI1ZHMgIHzJEsh6JtQKDYOuC93aDNhysTD2EhoYM4hMl4a4LEcso Iyx/p2Vjvv/ClazPYZ0vMM6bhKXMQk9uuKreJ+nHL7tsOP58QMd1CI2/GXHs26+S 0JLfRQ9Cqjo/F/IGE/279iV0BAGkeeM= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:47 2026 by rpki-client