$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa File: 5c4d4390-cf6b-3694-845f-b3f976f482a7.roa (raw, json) Hash identifier: mkf857NZpWu4TVVIPkcVvR0JU1tJxqxgAe8Yic498tg= Subject key identifier: 38:A5:EB:85:91:AC:BF:23:5E:DE:4A:34:B3:D6:E1:67:5D:2C:AD:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF8122947D38E2EC59700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.20.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f8:12:29:47:d3:8e:2e:c5:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=5f6ea051-096f-479f-8283-69989c463641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:1e:6e:d8:6d:12:b2:c7:a9:24:79:22:b1: 6c:2a:cd:cd:ae:26:50:a0:43:c7:be:bc:8b:bd:91: 79:e9:7f:11:44:68:66:b2:2f:07:48:5e:c9:52:e3: 6c:c6:ea:09:eb:31:46:a1:b1:4b:95:c3:4e:d8:ea: 44:ba:07:e4:7d:4b:a9:9e:50:e6:15:e9:7c:a6:e7: a5:1c:59:80:2b:53:0d:3c:de:d9:75:6f:f5:4b:64: 50:b6:fe:f4:e1:46:6b:f1:aa:19:37:9a:db:5f:8b: 71:65:56:c8:d4:f4:79:c3:98:cb:a7:cf:e3:6c:ae: 3c:fa:57:c4:d0:d4:1c:3e:fe:33:aa:de:86:5e:ff: 22:d5:9b:94:e2:d5:fb:f5:6c:3e:fa:a0:a8:81:43: 92:7d:fe:e6:54:b4:8b:13:17:69:5a:b4:92:e8:ff: 68:77:96:16:9d:4c:6b:f2:cb:f8:de:fa:29:70:d1: 7d:1a:85:9b:63:68:ea:25:e8:94:91:7e:7c:dd:d8: 12:ec:ef:36:b2:c8:de:28:f1:dc:09:4c:0c:17:f9: f9:80:55:5f:43:d3:ef:7f:74:f8:ab:ac:f8:da:ed: 0e:37:57:42:24:05:7a:21:0e:03:9d:bb:4d:f0:47: cd:0a:e2:f2:29:1d:02:6b:e2:4a:f1:61:46:69:35: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A5:EB:85:91:AC:BF:23:5E:DE:4A:34:B3:D6:E1:67:5D:2C:AD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:70:c0:a7:38:e8:45:46:30:d5:3a:c2:e3:7b:b7:fa:10:53: 1b:af:8d:eb:3f:b5:59:d3:c3:2c:b3:cf:ae:ac:ff:04:9b:1d: a4:f9:39:52:9d:90:2b:53:c4:b8:9a:61:94:1a:86:f5:a4:5c: 33:ac:53:b2:18:2b:43:44:60:d7:ac:90:a6:8a:e5:81:82:7d: b5:a0:2c:74:71:4e:e5:ba:c2:d8:e7:e1:72:b5:cb:b6:7f:76: 5c:1a:31:43:f2:58:c4:17:20:f3:c9:dd:68:a4:98:ad:3e:a4: 6f:10:06:3a:ae:18:a4:cf:82:83:66:d6:6d:0d:0c:da:a5:3c: f9:76:b7:54:98:cc:72:80:14:e8:f0:aa:67:08:98:fa:ff:16: df:f5:cc:8d:f2:f2:72:fe:b5:f8:50:59:8c:7a:5b:d0:ca:6a: 3e:a4:a2:d5:17:93:97:e5:5f:4e:c6:fc:34:d3:1f:3b:19:77: 93:38:49:4f:b3:89:85:bb:8f:dd:4a:04:00:f2:63:91:d4:37: e8:36:30:64:30:5e:14:92:80:d0:9d:22:fb:39:f9:68:c7:c4: 1f:db:e7:43:7f:41:60:47:2d:ae:c2:4b:6f:d9:88:b4:6b:58: 27:e0:fd:56:71:18:93:3f:0f:93:e4:36:4e:ad:4a:9e:09:2d: 01:13:42:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvgSKUfTji7FlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NWY2ZWEwNTEtMDk2Zi00NzlmLTgyODMtNjk5ODljNDYzNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB0ebthtErLHqSR5IrFsKs3NriZQoEPHvryL vZF56X8RRGhmsi8HSF7JUuNsxuoJ6zFGobFLlcNO2OpEugfkfUupnlDmFel8puel HFmAK1MNPN7ZdW/1S2RQtv704UZr8aoZN5rbX4txZVbI1PR5w5jLp8/jbK48+lfE 0NQcPv4zqt6GXv8i1ZuU4tX79Ww++qCogUOSff7mVLSLExdpWrSS6P9od5YWnUxr 8sv43vopcNF9GoWbY2jqJeiUkX583dgS7O82ssjeKPHcCUwMF/n5gFVfQ9Pvf3T4 q6z42u0ON1dCJAV6IQ4DnbtN8EfNCuLyKR0Ca+JK8WFGaTVVowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDil64WRrL8jXt5KNLPW4WddLK2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM0ZDQzOTAtY2Y2Yi0z Njk0LTg0NWYtYjNmOTc2ZjQ4MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZwwKc46EVGMNU6wuN7t/oQUxuvjes/tVnTwyyzz66s/wSbHaT5OVKd kCtTxLiaYZQahvWkXDOsU7IYK0NEYNeskKaK5YGCfbWgLHRxTuW6wtjn4XK1y7Z/ dlwaMUPyWMQXIPPJ3WikmK0+pG8QBjquGKTPgoNm1m0NDNqlPPl2t1SYzHKAFOjw qmcImPr/Ft/1zI3y8nL+tfhQWYx6W9DKaj6kotUXk5flX07G/DTTHzsZd5M4SU+z iYW7j91KBADyY5HUN+g2MGQwXhSSgNCdIvs5+WjHxB/b50N/QWBHLa7CS2/ZiLRr WCfg/VZxGJM/D5PkNk6tSp4JLQETQu0= -----END CERTIFICATE-----Generated at Sat Jun 13 07:25:38 2026 by rpki-client