$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa File: aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa (raw, json) Hash identifier: 84imQ+XfcPv0VBsCkRJnDr94jwUD8kCVJbFkveYwmcY= Subject key identifier: DC:24:64:EC:BB:87:4B:AA:53:7A:AA:E4:58:CE:2B:1B:FF:46:08:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E000604361C811A981A0ECA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 7029 IP address blocks: 98.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:04:36:1c:81:1a:98:1a:0e:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=ed0de424-17f4-46ef-bedc-8a532f13e440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:dc:1f:4b:af:69:b4:d3:91:55:64:be:21: 60:97:d4:da:ec:04:e4:eb:34:9c:e2:e1:0e:6b:73: ab:2d:de:df:ba:75:ec:bf:19:97:22:17:80:89:54: 27:de:bb:7a:b8:55:26:af:60:4e:7c:7a:78:c6:97: c9:e2:b4:de:5a:41:f5:b4:71:e4:75:0d:8d:d5:d3: b2:8b:18:bc:e8:13:dc:8b:7d:ec:c4:04:6a:46:5e: 8d:c3:c7:66:4b:4c:66:a1:25:e8:df:db:c4:4a:e1: 90:72:a0:6f:40:f8:10:90:ea:24:c0:44:91:13:26: 10:0f:95:80:3f:49:4f:1e:18:58:22:41:83:d1:19: 2c:78:7a:c7:1c:3e:da:9a:34:25:43:46:f1:77:74: a1:43:d7:e3:99:df:e0:c7:8a:6e:87:86:2a:6c:11: 81:4a:ff:28:9c:64:6b:90:b5:19:c0:3f:e4:0f:14: 09:24:1b:d2:82:83:c1:d9:60:72:84:2b:aa:c5:6e: 56:08:c0:36:b2:80:e1:a3:bf:e8:b2:1f:1b:f5:83: fa:8c:2c:0e:c3:7b:2b:c6:3f:64:1d:ee:e5:4d:8f: 6a:ae:91:d8:39:8a:ac:7e:ff:52:1b:61:a7:7c:fd: 36:c6:03:96:89:26:d3:a4:40:b8:f2:8d:c9:75:3e: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:24:64:EC:BB:87:4B:AA:53:7A:AA:E4:58:CE:2B:1B:FF:46:08:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:07:4d:0c:04:d0:10:eb:77:18:87:01:77:67:06:14:af:28: ef:78:a7:29:c3:f4:f2:49:88:69:cc:c5:d7:01:ad:6c:13:aa: ef:8b:8b:93:af:3d:22:f2:e0:e5:a6:f8:0d:e3:e9:1e:ab:c2: 88:5f:1f:01:6a:c6:d8:54:23:e8:c9:2f:f6:b4:97:2f:42:2a: 41:0d:8e:12:1a:88:2c:cd:28:d0:4c:1e:a9:61:68:df:c8:ea: aa:a4:bc:dc:68:9f:24:9f:6d:b2:df:20:8f:3e:2b:00:86:a5: 01:36:69:6b:bf:0f:ec:c4:9e:23:b9:d8:bf:e5:72:af:38:c8: 86:a5:c6:4b:58:3e:84:56:d5:20:d1:1b:ca:d3:bf:14:d1:9a: e6:3c:86:5b:49:85:63:8f:dd:4d:6b:3b:1d:5f:57:c9:e8:6d: 30:e5:3f:c3:38:f4:85:45:8c:0e:bb:14:f6:5c:07:f7:1d:f1: cd:53:4e:67:24:5c:66:6f:7d:6b:33:4d:c1:c1:44:b3:6e:64: a7:92:8e:b1:26:18:e5:6a:98:7e:d1:3d:7a:58:01:b6:2a:92: 6d:9a:a5:a8:95:8d:1f:18:88:85:74:70:7e:a5:4f:57:31:1b: df:38:12:05:f2:a7:69:74:76:f4:ff:e0:3d:c4:18:18:8d:aa: 8b:cb:39:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABgQ2HIEamBoOykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk ZWQwZGU0MjQtMTdmNC00NmVmLWJlZGMtOGE1MzJmMTNlNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJDcH0uvabTTkVVkviFgl9Ta7ATk6zSc4uEO a3OrLd7funXsvxmXIheAiVQn3rt6uFUmr2BOfHp4xpfJ4rTeWkH1tHHkdQ2N1dOy ixi86BPci33sxARqRl6Nw8dmS0xmoSXo39vESuGQcqBvQPgQkOokwESREyYQD5WA P0lPHhhYIkGD0RkseHrHHD7amjQlQ0bxd3ShQ9fjmd/gx4puh4YqbBGBSv8onGRr kLUZwD/kDxQJJBvSgoPB2WByhCuqxW5WCMA2soDho7/osh8b9YP6jCwOw3srxj9k He7lTY9qrpHYOYqsfv9SG2GnfP02xgOWiSbTpEC48o3JdT4m6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwkZOy7h0uqU3qq5FjOKxv/RgiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWFjYzNmMjMtZGRjZC0z NjhlLTg5YTgtY2Q0ODMxZmQxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4HTQwE0BDrdxiHAXdnBhSvKO94pynD9PJJiGnMxdcBrWwTqu+Li5Ov PSLy4OWm+A3j6R6rwohfHwFqxthUI+jJL/a0ly9CKkENjhIaiCzNKNBMHqlhaN/I 6qqkvNxonySfbbLfII8+KwCGpQE2aWu/D+zEniO52L/lcq84yIalxktYPoRW1SDR G8rTvxTRmuY8hltJhWOP3U1rOx1fV8nobTDlP8M49IVFjA67FPZcB/cd8c1TTmck XGZvfWszTcHBRLNuZKeSjrEmGOVqmH7RPXpYAbYqkm2apaiVjR8YiIV0cH6lT1cx G984EgXyp2l0dvT/4D3EGBiNqovLOWA= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:43 2026 by rpki-client