$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa File: b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa (raw, json) Hash identifier: H44zjHv/m9UN0F8b4sqxuXfbkhT1p2RbMFPmnqQh+tg= Subject key identifier: 36:C3:68:68:E2:73:58:07:58:F1:C1:4A:68:96:29:D6:D9:5D:65:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F17A4582C04D410A45380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.20.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:17:a4:58:2c:04:d4:10:a4:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=6afcfca0-0298-4f1d-9d7c-dea3efcb936a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:1b:26:fb:80:4c:eb:30:bf:ba:b9:c5:0f: 40:8b:91:36:ab:4c:5d:84:5c:c2:37:47:e3:1e:3e: ee:5a:35:db:3d:21:6b:ff:45:28:28:84:22:53:7e: 05:63:f2:d2:53:9b:61:e1:86:03:33:95:7a:69:56: 0f:03:30:9f:cb:cf:1f:b5:7b:6f:0c:38:4c:c7:2b: cf:a1:a6:1e:67:c3:f1:96:e8:3c:86:52:45:24:51: 62:37:d8:55:d5:0e:65:8b:60:41:76:00:cd:44:be: 53:8e:cc:d8:61:04:ef:3a:52:e3:84:91:0f:30:33: 4c:91:ce:65:67:8a:2d:b6:58:c3:8c:7c:7d:00:0b: 32:38:e5:bd:f7:81:06:74:e6:bb:a6:9d:fd:36:12: 4f:cd:95:d1:88:73:e3:50:ed:29:66:13:88:11:ab: f7:82:2d:27:d3:1e:7b:41:85:66:43:b2:39:a9:78: df:99:55:24:7e:65:38:b4:f4:92:91:61:65:b9:45: 93:45:c2:91:2b:e0:05:b8:75:2b:32:8f:16:2a:4a: 80:a4:d4:14:db:8f:76:90:2a:6f:be:86:c8:c4:5c: 74:bd:66:ff:42:ec:1f:c6:1c:70:d9:df:55:ea:82: 4a:74:9b:be:96:43:c4:7b:aa:a5:cf:30:a8:94:46: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C3:68:68:E2:73:58:07:58:F1:C1:4A:68:96:29:D6:D9:5D:65:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5c:77:32:33:5f:cf:62:bd:4b:79:5f:cc:8b:5f:bf:f9:dd: 01:9c:48:55:73:5b:3e:a1:4f:4f:33:02:bd:1f:42:c8:23:4c: d1:cd:d0:e9:47:03:6b:16:82:e4:87:1a:2d:71:e4:e5:93:01: d3:55:d1:d3:ad:c4:bf:a0:e7:4e:36:1f:07:4f:22:28:af:35: 38:0b:74:77:a4:d2:dd:e7:93:f9:1a:e6:56:b6:e9:ad:1a:0c: b1:1a:eb:2c:ba:fd:95:63:fd:9b:c9:e9:6e:93:66:d9:e4:bf: 6d:95:8a:fc:d9:d8:62:b5:f7:c0:8f:fd:57:06:0d:c7:30:55: 51:88:80:27:27:0a:cf:c8:5e:2e:91:10:b0:01:c0:33:88:a9: c7:dc:32:b6:31:95:0c:63:c8:2c:d3:bb:61:85:d6:e8:2a:07: 85:5b:b4:78:fb:ae:f6:6e:4e:80:57:04:f3:68:ff:aa:f8:12: 54:3d:2f:87:e5:58:c1:f5:0e:85:e8:85:bd:9b:65:f9:00:8d: bd:be:cf:f5:4b:ba:0b:c0:ec:66:ef:9b:59:c2:95:0e:14:c6: 8c:0f:3e:94:ed:46:87:f4:da:dd:ad:f5:09:dc:2a:50:73:43: 14:22:72:6d:b4:25:eb:bb:8a:7c:75:71:e9:b8:e6:f2:6a:d1: e7:9d:51:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxekWCwE1BCkU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NmFmY2ZjYTAtMDI5OC00ZjFkLTlkN2MtZGVhM2VmY2I5MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzMbJvuATOswv7q5xQ9Ai5E2q0xdhFzCN0fj Hj7uWjXbPSFr/0UoKIQiU34FY/LSU5th4YYDM5V6aVYPAzCfy88ftXtvDDhMxyvP oaYeZ8Pxlug8hlJFJFFiN9hV1Q5li2BBdgDNRL5TjszYYQTvOlLjhJEPMDNMkc5l Z4ottljDjHx9AAsyOOW994EGdOa7pp39NhJPzZXRiHPjUO0pZhOIEav3gi0n0x57 QYVmQ7I5qXjfmVUkfmU4tPSSkWFluUWTRcKRK+AFuHUrMo8WKkqApNQU2492kCpv vobIxFx0vWb/Quwfxhxw2d9V6oJKdJu+lkPEe6qlzzColEYPtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbDaGjic1gHWPHBSmiWKdbZXWVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA2MzNlYjMtOGU1MS0z ZmZjLThhZjctZTBhNjVmMDBmODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNcdzIzX89ivUt5X8yLX7/53QGcSFVzWz6hT08zAr0fQsgjTNHN0OlH A2sWguSHGi1x5OWTAdNV0dOtxL+g5042HwdPIiivNTgLdHek0t3nk/ka5la26a0a DLEa6yy6/ZVj/ZvJ6W6TZtnkv22VivzZ2GK198CP/VcGDccwVVGIgCcnCs/IXi6R ELABwDOIqcfcMrYxlQxjyCzTu2GF1ugqB4VbtHj7rvZuToBXBPNo/6r4ElQ9L4fl WMH1DoXohb2bZfkAjb2+z/VLugvA7Gbvm1nClQ4UxowPPpTtRof02t2t9QncKlBz QxQicm20Jeu7inx1cem45vJq0eedUWQ= -----END CERTIFICATE-----Generated at Sat Jun 13 05:57:25 2026 by rpki-client