$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa File: aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa (raw, json) Hash identifier: rectt+CiP+0+C0zLMaGxrju9aTrGqG7I3gdWJCwV0S4= Subject key identifier: 92:3B:31:31:59:42:A9:72:BF:B5:C3:C7:7B:E2:77:F3:EE:D7:9F:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A989F9018D43FE1790E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 98.22.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:98:9f:90:18:d4:3f:e1:79:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=fa281f19-346f-462d-8b49-46a67da49652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:80:7d:8e:67:73:93:83:71:67:0b:71:80:da: b7:e0:d9:0f:ec:59:49:e6:61:b3:2a:d8:0c:62:28: 54:73:fa:2c:5a:01:73:04:3a:51:fa:2c:fd:c5:47: 62:b8:2c:5a:1e:7a:2c:2b:42:91:0e:70:e4:92:0f: d2:95:4b:44:ac:77:f0:85:af:8a:23:80:52:de:bf: 73:d4:30:6a:fe:d3:08:99:da:88:61:0f:ec:1e:ef: 4b:36:e8:20:47:ff:8f:22:3c:7d:7b:b6:90:30:4e: 02:58:db:4e:a4:c1:7c:e3:e3:95:55:84:97:21:73: 28:43:ec:d4:32:47:d8:67:63:40:87:cf:ab:c4:a0: da:f7:9f:f0:59:32:e6:db:4b:d8:6f:cb:45:dd:41: 89:c0:4c:04:da:fc:cd:14:0d:44:32:fb:bb:e5:cd: 2e:8d:63:60:c8:e5:ff:e7:4b:a1:78:eb:3c:a7:c8: be:97:e3:82:18:4d:ee:3d:c5:51:69:10:15:0c:4a: e9:4e:92:6f:46:3a:56:4e:23:0d:5f:52:de:3b:7e: 1e:1c:3e:9d:42:fe:1b:4c:7d:93:9e:88:64:4c:44: 3c:36:6d:49:33:b9:9c:47:03:9d:2b:68:9c:3b:91: 4f:49:d4:36:22:08:fe:4c:3e:dd:67:28:10:3e:01: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:31:31:59:42:A9:72:BF:B5:C3:C7:7B:E2:77:F3:EE:D7:9F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fb:05:1a:27:f6:33:a9:46:c4:65:59:94:b8:cd:da:b7:64: b6:4f:eb:00:a4:28:0e:c5:8f:7f:d2:bd:43:3d:97:d5:4c:34: 5d:1f:b0:46:60:4c:04:c2:81:17:d3:ad:e4:3c:57:ec:76:c9: 10:9f:4d:14:3e:48:1b:94:f9:b6:f3:a2:19:29:aa:ff:8f:0e: 3f:b6:29:2a:dd:37:6d:04:e9:a9:dd:31:12:ce:7b:16:41:b1: 42:a7:ca:6c:b0:0e:6a:9a:e6:a4:33:71:62:34:f0:35:20:46: fe:00:7f:ee:e3:e4:13:92:ad:c6:d5:58:90:f2:d7:dc:55:3b: 98:0c:9b:82:fc:47:a8:c6:a3:35:bc:79:f5:1b:f5:0a:d8:29: 82:49:d2:02:1c:4d:a2:88:17:b1:88:9f:fb:eb:ec:e1:fa:b6: 78:6b:3b:d5:62:da:82:17:fa:ee:a5:f9:81:8a:08:f0:a6:f7: ec:1d:11:91:df:4d:d9:90:18:3d:5d:26:8a:17:c6:b2:4b:3f: 7c:90:f3:aa:a9:f6:d1:e1:69:04:41:c4:27:28:a6:cd:ca:78: 60:11:f8:d1:ea:be:43:8e:7d:fd:08:5e:df:98:3b:9d:7d:6d: 47:66:43:f6:f7:16:4e:da:7e:4a:c6:fe:78:fc:92:64:4d:87: 21:72:54:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpifkBjUP+F5DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmEyODFmMTktMzQ2Zi00NjJkLThiNDktNDZhNjdkYTQ5NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYB9jmdzk4NxZwtxgNq34NkP7FlJ5mGzKtgM YihUc/osWgFzBDpR+iz9xUdiuCxaHnosK0KRDnDkkg/SlUtErHfwha+KI4BS3r9z 1DBq/tMImdqIYQ/sHu9LNuggR/+PIjx9e7aQME4CWNtOpMF84+OVVYSXIXMoQ+zU MkfYZ2NAh8+rxKDa95/wWTLm20vYb8tF3UGJwEwE2vzNFA1EMvu75c0ujWNgyOX/ 50uheOs8p8i+l+OCGE3uPcVRaRAVDErpTpJvRjpWTiMNX1LeO34eHD6dQv4bTH2T nohkTEQ8Nm1JM7mcRwOdK2icO5FPSdQ2Igj+TD7dZygQPgE3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI7MTFZQqlyv7XDx3vid/Pu15+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEzZWYxMDEtNjdkMC0z ZDU0LTkwYWUtMmY5NGNmNmFjNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv7BRon9jOpRsRlWZS4zdq3ZLZP6wCkKA7Fj3/SvUM9l9VMNF0fsEZg TATCgRfTreQ8V+x2yRCfTRQ+SBuU+bbzohkpqv+PDj+2KSrdN20E6andMRLOexZB sUKnymywDmqa5qQzcWI08DUgRv4Af+7j5BOSrcbVWJDy19xVO5gMm4L8R6jGozW8 efUb9QrYKYJJ0gIcTaKIF7GIn/vr7OH6tnhrO9Vi2oIX+u6l+YGKCPCm9+wdEZHf TdmQGD1dJooXxrJLP3yQ86qp9tHhaQRBxCcops3KeGAR+NHqvkOOff0IXt+YO519 bUdmQ/b3Fk7afkrG/nj8kmRNhyFyVAU= -----END CERTIFICATE-----Generated at Fri Apr 17 10:34:51 2026 by rpki-client