$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa File: a428fefd-e21b-3a06-93e8-83dbc2a71707.roa (raw, json) Hash identifier: Sd6hMuRdPZsvsqAGpLjHAzO42V/SiGEl2QFNbGnY2eo= Subject key identifier: 6E:21:E1:FF:F2:13:97:61:D8:F9:FE:D9:CE:AE:A9:C2:D2:16:C8:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A939D849BD53D165B1080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.16.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:93:9d:84:9b:d5:3d:16:5b:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=73ef50a4-dc37-4d41-8238-f1ed5f1294c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:fe:46:7e:a1:ac:5d:ef:84:24:4e:fd:2c: f4:1c:5b:5f:cd:1f:67:c2:96:d6:c5:a8:c6:94:1d: e2:b1:eb:6f:18:09:cd:74:27:fc:25:91:88:7d:84: e7:74:bc:a6:0a:f9:7b:9d:0d:3e:63:d4:e3:85:30: d4:bc:23:2a:a3:f0:90:9a:77:5c:99:34:1b:67:c7: b0:5b:b5:4d:06:59:70:f7:53:d1:80:ce:14:38:cd: 6e:74:87:73:cd:b9:0d:a9:a6:43:b9:72:90:34:60: 7e:1f:9f:fd:f9:89:37:ae:1c:4e:b0:3c:6c:6f:08: 9e:d9:fa:31:8b:1c:7a:d0:9e:97:80:77:6e:3c:a7: 4e:b7:8f:1a:1d:69:32:4d:cf:f0:d6:84:83:f3:d6: 08:6c:7b:b8:10:c5:10:34:70:37:bd:a6:1c:86:8e: 25:90:20:5e:99:cf:93:48:24:55:e7:80:13:6f:94: 60:8f:74:98:59:c9:df:7f:8a:7d:71:de:65:ad:65: cf:71:e3:43:c7:6c:4e:80:13:67:53:ba:d7:ae:ac: 03:a9:94:72:ee:f3:c3:6d:9d:bd:2d:9d:7c:ab:f6: 8b:60:63:82:5c:bf:de:37:9a:7c:8d:22:e6:a1:69: a3:2c:ba:05:11:50:40:be:26:cc:33:4a:a0:22:c4: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:21:E1:FF:F2:13:97:61:D8:F9:FE:D9:CE:AE:A9:C2:D2:16:C8:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0a:20:c1:ea:d3:a1:a9:5e:d7:bd:c1:8e:64:78:30:95:fe: 62:27:d1:ff:b9:c0:39:38:87:34:88:75:90:9c:fa:3d:9b:35: 46:a4:1a:a5:6b:fe:8b:e1:5c:28:d3:db:cd:c9:1c:35:88:e6: 78:c5:bf:0d:04:b0:8a:8c:aa:9b:d6:1e:33:63:f2:09:bb:1f: 8d:4a:63:a6:ce:2f:15:dd:ae:61:da:46:13:39:09:dd:33:69: e7:78:b4:60:ed:89:81:ce:dd:6c:10:a6:42:5c:04:64:b4:4c: fc:44:d0:3c:c6:68:67:25:29:07:09:a6:15:18:42:d9:4d:be: 6e:62:32:de:68:44:15:4d:5b:7e:52:35:2f:a9:53:56:49:c9: 27:e2:12:07:71:64:bb:87:77:b3:5c:e3:24:25:c9:92:ba:b8: 9a:89:b5:ce:1c:12:1c:5f:1b:c3:96:77:f2:02:cd:ca:8b:42: 4d:79:71:43:e1:d4:b1:6c:9f:d1:ff:aa:87:cc:cd:6e:fe:df: e8:bb:76:b6:3c:0f:ca:16:c1:aa:f9:df:fc:3a:82:49:db:6e: f4:8c:53:7f:d2:b5:60:15:d9:fd:2c:9a:77:cd:00:94:ed:18: 6f:7b:0c:ba:33:94:d6:c6:28:69:7f:cc:3d:f9:83:3b:de:09: e5:9f:dc:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpOdhJvVPRZbEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NzNlZjUwYTQtZGMzNy00ZDQxLTgyMzgtZjFlZDVmMTI5NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB7+Rn6hrF3vhCRO/Sz0HFtfzR9nwpbWxajG lB3isetvGAnNdCf8JZGIfYTndLymCvl7nQ0+Y9TjhTDUvCMqo/CQmndcmTQbZ8ew W7VNBllw91PRgM4UOM1udIdzzbkNqaZDuXKQNGB+H5/9+Yk3rhxOsDxsbwie2fox ixx60J6XgHduPKdOt48aHWkyTc/w1oSD89YIbHu4EMUQNHA3vaYcho4lkCBemc+T SCRV54ATb5Rgj3SYWcnff4p9cd5lrWXPceNDx2xOgBNnU7rXrqwDqZRy7vPDbZ29 LZ18q/aLYGOCXL/eN5p8jSLmoWmjLLoFEVBAvibMM0qgIsRo5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4h4f/yE5dh2Pn+2c6uqcLSFsiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQyOGZlZmQtZTIxYi0z YTA2LTkzZTgtODNkYmMyYTcxNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4KIMHq06GpXte9wY5keDCV/mIn0f+5wDk4hzSIdZCc+j2bNUakGqVr /ovhXCjT283JHDWI5njFvw0EsIqMqpvWHjNj8gm7H41KY6bOLxXdrmHaRhM5Cd0z aed4tGDtiYHO3WwQpkJcBGS0TPxE0DzGaGclKQcJphUYQtlNvm5iMt5oRBVNW35S NS+pU1ZJySfiEgdxZLuHd7Nc4yQlyZK6uJqJtc4cEhxfG8OWd/ICzcqLQk15cUPh 1LFsn9H/qofMzW7+3+i7drY8D8oWwar53/w6gknbbvSMU3/StWAV2f0smnfNAJTt GG97DLozlNbGKGl/zD35gzveCeWf3DY= -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:13 2026 by rpki-client