$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa File: 9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa (raw, json) Hash identifier: by3Eyjl9Kc11+mnfOo54qUSfi6tNKmOcy5AbzL80/04= Subject key identifier: 54:D4:AC:00:D3:F1:A3:59:21:C7:74:47:CD:56:7C:03:ED:C7:76:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A92DF3E94BC46EA49EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.18.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:92:df:3e:94:bc:46:ea:49:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=3754ded1-8aa0-4dcf-92c9-7d4d1bdd0be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:3d:10:32:74:d1:38:dd:ec:6e:5d:b9:30: f6:49:c7:f6:8a:72:ad:33:3e:2a:dd:a9:c2:1d:13: 23:ba:3f:a9:51:7b:8d:cb:09:ee:5f:86:59:90:a5: 5a:ad:a8:4a:af:1e:5e:ec:6b:2d:e6:bc:ef:a6:0f: 6d:52:94:d8:93:20:88:04:1f:1b:92:9f:37:a4:f3: 36:89:8a:cd:22:58:07:7c:2e:9d:b9:0c:3f:c3:20: 31:d1:d2:9b:17:70:1e:7c:99:dd:26:af:7f:ec:6a: cc:3d:e9:87:e3:00:29:8f:53:9d:a6:fd:88:4a:88: 96:e1:ab:44:d8:8f:3d:3a:b5:17:18:6e:c7:62:21: b4:32:a1:6a:46:f5:4d:7f:d1:ed:46:2b:ab:4d:38: 09:42:ef:b1:de:5f:57:29:bb:71:c8:86:12:72:c3: 77:a4:e2:cd:c0:ef:7d:fb:31:d2:c1:58:5d:c4:19: 16:c2:8b:3c:46:59:fe:d4:6e:a0:47:73:a2:0f:91: 2f:ab:fd:27:ff:cc:ef:06:da:1c:c8:b9:76:bb:38: f3:2d:91:32:b5:d1:69:1c:3c:cc:a8:13:42:19:64: d0:49:27:76:8a:31:d8:0c:b9:9d:aa:53:bd:ab:71: 36:f1:24:49:ce:79:f7:c6:2b:ee:1b:f0:ab:6b:bd: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D4:AC:00:D3:F1:A3:59:21:C7:74:47:CD:56:7C:03:ED:C7:76:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:82:ed:34:5b:e1:51:dd:18:1d:ca:7f:25:4b:f1:30:af:90: d8:3e:58:e9:b8:08:92:aa:a6:b2:03:fa:db:6f:82:61:f4:83: 29:9f:9a:4f:8d:87:81:08:2c:a7:d9:c2:b9:6d:41:15:79:86: 55:71:da:9f:52:c4:d1:77:14:02:b1:83:ed:7d:41:7e:3c:2d: 74:bc:74:78:b2:89:b2:e4:fb:7d:06:f6:47:8d:eb:1d:de:9c: b2:00:f1:fc:fe:65:c6:b5:b8:a5:ac:a1:89:04:d0:fd:54:f3: 9e:82:e8:8d:6a:7f:ea:3f:64:b9:d8:d0:6b:7a:01:42:d5:67: 91:cf:60:b7:b2:f9:3a:8f:fb:2f:3f:f1:b7:d4:b9:a8:50:f4: 1c:5f:5b:ce:2f:11:f8:54:27:33:f1:e9:50:9e:94:67:4e:01: e0:90:3f:30:ec:5d:e3:30:06:fa:97:86:05:94:23:96:ea:d2: bd:5b:91:41:61:b7:f3:97:06:b4:d7:9c:08:7f:5b:5c:49:9e: 2a:d3:4c:5d:12:29:2d:be:a3:fb:14:95:e2:9e:4c:77:ab:ca: 3a:41:22:b1:ed:45:74:6d:cf:31:a6:95:92:9c:f4:f6:bc:ef: ab:82:cf:a7:aa:05:d0:02:79:6b:c1:44:b0:7d:1e:c8:d9:88: f2:c9:cd:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpLfPpS8RupJ6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk Mzc1NGRlZDEtOGFhMC00ZGNmLTkyYzktN2Q0ZDFiZGQwYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/I9EDJ00Tjd7G5duTD2Scf2inKtMz4q3anC HRMjuj+pUXuNywnuX4ZZkKVarahKrx5e7Gst5rzvpg9tUpTYkyCIBB8bkp83pPM2 iYrNIlgHfC6duQw/wyAx0dKbF3AefJndJq9/7GrMPemH4wApj1Odpv2ISoiW4atE 2I89OrUXGG7HYiG0MqFqRvVNf9HtRiurTTgJQu+x3l9XKbtxyIYScsN3pOLNwO99 +zHSwVhdxBkWwos8Rln+1G6gR3OiD5Evq/0n/8zvBtocyLl2uzjzLZEytdFpHDzM qBNCGWTQSSd2ijHYDLmdqlO9q3E28SRJznn3xivuG/Cra71nZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTUrADT8aNZIcd0R81WfAPtx3ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxY2Q0YjEtOGM3OS0z MmY3LThkYWMtNjhkOGZjYjczZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKC7TRb4VHdGB3KfyVL8TCvkNg+WOm4CJKqprID+ttvgmH0gymfmk+N h4EILKfZwrltQRV5hlVx2p9SxNF3FAKxg+19QX48LXS8dHiyibLk+30G9keN6x3e nLIA8fz+Zca1uKWsoYkE0P1U856C6I1qf+o/ZLnY0Gt6AULVZ5HPYLey+TqP+y8/ 8bfUuahQ9BxfW84vEfhUJzPx6VCelGdOAeCQPzDsXeMwBvqXhgWUI5bq0r1bkUFh t/OXBrTXnAh/W1xJnirTTF0SKS2+o/sUleKeTHeryjpBIrHtRXRtzzGmlZKc9Pa8 76uCz6eqBdACeWvBRLB9HsjZiPLJzco= -----END CERTIFICATE-----Generated at Fri Apr 17 11:16:01 2026 by rpki-client