$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa File: 942824f6-6070-3132-8cee-ad290f982789.roa (raw, json) Hash identifier: yME6Om+fXjDefSfPvV8YA2ev7+tyMrmjaMhWzcH6PvM= Subject key identifier: 54:0D:33:25:34:DC:48:71:F4:01:90:23:80:43:E7:35:00:C8:C9:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A997A09CBB5759A2F8080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.17.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:99:7a:09:cb:b5:75:9a:2f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=0c101802-fb83-413d-b6b1-fed56961968f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:20:8b:79:31:80:e8:08:e4:ef:50:6e:75: e1:cc:ed:61:5b:ee:8f:ee:b8:7a:50:91:2d:ef:49: 21:1c:e6:9a:f4:75:bd:8f:3e:71:df:98:dd:4d:1b: 75:78:0d:4c:93:68:af:6c:d5:8e:f6:bc:f7:b8:45: 79:19:dd:90:bc:af:06:75:d9:75:d0:b0:8a:8a:45: 95:ec:81:b6:1d:bc:e8:d2:b7:e3:81:48:3a:9b:aa: dd:36:61:9c:f8:25:d9:85:ea:e1:13:db:38:f3:4c: ee:76:1e:2b:e6:21:a9:ac:da:43:d2:e4:0b:3f:df: ea:28:f8:86:e7:e0:e3:c3:04:96:2c:67:ed:6b:ab: e0:04:f9:51:28:e8:64:0d:81:80:55:9d:2a:ca:3a: fa:52:ac:14:b7:cf:a0:f0:d4:b3:f1:0d:fd:f0:8b: ec:69:46:5f:90:85:de:96:0c:4a:43:98:95:2a:bb: c9:2e:78:63:a9:7e:f3:16:8d:5d:3f:cc:f5:1b:c4: 21:61:06:48:cf:36:f9:93:9c:a2:43:87:b4:00:d7: 17:01:4a:50:ea:d4:40:e0:c9:f9:7e:e5:07:80:8a: cd:f5:60:6b:20:de:42:a5:89:b4:5d:1c:e4:b1:e0: 1f:91:6d:14:92:ee:c5:66:a7:24:79:06:77:f4:ae: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:33:25:34:DC:48:71:F4:01:90:23:80:43:E7:35:00:C8:C9:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:76:23:1d:e0:d3:ea:e2:5e:a0:4b:46:53:98:0f:2f:0a:78: 02:78:f0:ee:09:e8:6e:d8:7b:12:ee:2d:4d:d6:5e:7d:80:0c: 4d:1d:76:d3:9c:90:4d:8e:39:51:44:af:54:e4:d0:03:8f:a4: da:d0:cc:04:2f:7f:16:ec:d4:68:f7:e9:b5:4c:d3:04:ab:b9: 3b:17:d9:0a:56:3a:30:82:4a:10:5b:c6:be:2b:8a:e0:f1:b5: 44:13:1d:f1:eb:f6:2f:29:5d:e1:5a:30:47:35:0f:53:29:13: fa:fc:a6:a5:3a:1a:3e:f1:02:63:7d:8b:5d:23:4f:09:d4:2d: eb:44:80:28:9d:6d:52:69:ba:ca:7a:ae:ab:b8:d4:34:b7:06: 22:a9:9b:1b:fc:df:71:4f:19:16:2c:c3:64:7a:42:de:d7:3e: 81:e6:21:e5:ce:28:4d:25:6e:5e:83:ed:9f:88:b8:d9:76:fd: 94:67:55:13:93:c3:55:63:e7:ae:f8:5d:15:07:3e:93:67:05: f9:b8:a7:00:99:0c:94:fc:7d:5e:c8:4d:52:da:70:2d:13:51: 79:7c:34:4a:65:d8:e9:55:3b:e4:a4:10:7a:8c:22:a7:78:66: fa:df:45:af:34:12:07:bd:a1:0f:48:d2:06:22:3f:58:1c:0f: cb:7d:37:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpl6Ccu1dZovgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MGMxMDE4MDItZmI4My00MTNkLWI2YjEtZmVkNTY5NjE5NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqMgi3kxgOgI5O9QbnXhzO1hW+6P7rh6UJEt 70khHOaa9HW9jz5x35jdTRt1eA1Mk2ivbNWO9rz3uEV5Gd2QvK8Gddl10LCKikWV 7IG2Hbzo0rfjgUg6m6rdNmGc+CXZherhE9s480zudh4r5iGprNpD0uQLP9/qKPiG 5+DjwwSWLGfta6vgBPlRKOhkDYGAVZ0qyjr6UqwUt8+g8NSz8Q398IvsaUZfkIXe lgxKQ5iVKrvJLnhjqX7zFo1dP8z1G8QhYQZIzzb5k5yiQ4e0ANcXAUpQ6tRA4Mn5 fuUHgIrN9WBrIN5CpYm0XRzkseAfkW0Uku7FZqckeQZ39K58tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQNMyU03Ehx9AGQI4BD5zUAyMnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyODI0ZjYtNjA3MC0z MTMyLThjZWUtYWQyOTBmOTgyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR2Ix3g0+riXqBLRlOYDy8KeAJ48O4J6G7YexLuLU3WXn2ADE0ddtOc kE2OOVFEr1Tk0AOPpNrQzAQvfxbs1Gj36bVM0wSruTsX2QpWOjCCShBbxr4riuDx tUQTHfHr9i8pXeFaMEc1D1MpE/r8pqU6Gj7xAmN9i10jTwnULetEgCidbVJpusp6 rqu41DS3BiKpmxv833FPGRYsw2R6Qt7XPoHmIeXOKE0lbl6D7Z+IuNl2/ZRnVROT w1Vj5674XRUHPpNnBfm4pwCZDJT8fV7ITVLacC0TUXl8NEpl2OlVO+SkEHqMIqd4 ZvrfRa80Ege9oQ9I0gYiP1gcD8t9N5I= -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:17 2026 by rpki-client