$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa File: b9c73bea-e693-3d79-b258-a76ffb3f2510.roa (raw, json) Hash identifier: sSo0h2dBcMm1nhGDRdZE2NVzPas78cy32aMP2HxM+vg= Subject key identifier: 59:25:E8:5B:2D:E9:44:05:1E:CF:A9:B0:65:09:BC:B4:90:E8:1E:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842B592CA7BB44ACFD2500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.16.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2b:59:2c:a7:bb:44:ac:fd:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=ef907bda-55ef-4c80-9044-38efa41af9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:b2:05:28:36:81:b1:f8:fe:3e:4b:33:0e: 76:32:69:c8:1e:56:f8:eb:f0:14:db:36:67:5e:ca: 70:f3:c5:44:17:93:18:a7:f6:a5:c9:51:19:c1:23: 05:46:8a:76:b7:4f:c3:7b:9f:b8:48:a5:09:e1:3a: 9b:61:74:2b:35:77:f8:07:92:6b:f7:5a:a5:7d:03: 05:1d:cc:79:2b:84:6b:0e:d5:32:f6:c9:0b:53:ea: a2:47:f7:84:63:bc:71:d3:9d:ef:c8:b1:25:78:81: c4:04:da:dd:20:37:00:90:00:ec:59:59:9d:71:a5: ac:ec:b4:b6:e6:a7:cd:cf:09:90:05:e3:22:43:bc: f9:7c:00:cc:75:b0:42:c9:13:93:22:59:3c:1d:f2: 9b:33:a8:7b:3a:9d:b3:3c:74:06:85:b6:40:ff:a5: 7b:cb:69:fd:91:5a:fc:58:cc:66:b0:16:1e:94:31: f0:89:06:97:03:2b:12:3b:ed:6a:ec:03:49:65:b6: 86:92:99:4d:fb:29:16:fe:31:a2:dd:d0:cb:3f:b8: 7f:ad:9b:e3:ec:60:2e:c0:85:63:7f:9c:e5:10:4a: 5d:9d:d0:2c:1e:9a:ec:ba:6b:34:6f:b7:21:67:3c: e1:01:af:19:e3:63:92:29:45:e4:78:9b:a5:c8:5f: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:25:E8:5B:2D:E9:44:05:1E:CF:A9:B0:65:09:BC:B4:90:E8:1E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ed:69:0a:30:08:66:05:99:3a:ae:63:d4:e0:55:b1:97:45: e1:02:b0:c2:c6:ea:a9:36:3f:47:0d:f5:d4:52:2b:6b:65:d7: 7b:64:fe:84:ac:f0:14:5c:da:1e:7c:83:02:23:ba:3c:5d:4d: 76:2b:b5:fd:5f:fc:02:09:f3:ea:6d:8b:c8:34:c4:1f:69:75: 7f:ec:b8:5c:9b:cf:da:59:b8:0d:9f:b1:ff:38:87:da:76:5f: 17:f5:3e:46:92:b5:21:14:99:66:de:c3:29:04:89:b6:a1:9d: ab:a5:69:c4:05:fe:d9:a1:17:81:30:5a:db:18:46:d1:8a:30: 86:89:9e:98:62:f7:c9:75:c5:02:fa:04:a2:d7:0f:3d:83:73: ed:65:09:ab:5e:0d:e1:5e:f3:51:a4:8b:3a:49:85:6d:be:55: 07:f4:9b:f6:ea:87:a6:08:95:ef:b6:21:9c:71:64:e7:d0:ac: cd:3a:a5:01:88:d7:3d:96:4a:92:75:72:25:f6:a9:9c:ae:19: 10:92:33:8e:54:b4:f1:18:40:93:eb:5d:7a:8d:2f:d9:ef:7a: 85:cb:b4:3d:6a:88:6d:35:e4:0e:78:d6:c3:cb:bb:97:a1:91: 7a:ee:fc:28:b7:f9:78:7b:13:c5:36:46:7c:8e:54:3e:0c:88: 32:79:d3:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCtZLKe7RKz9JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZWY5MDdiZGEtNTVlZi00YzgwLTkwNDQtMzhlZmE0MWFmOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8iyBSg2gbH4/j5LMw52MmnIHlb46/AU2zZn Xspw88VEF5MYp/alyVEZwSMFRop2t0/De5+4SKUJ4TqbYXQrNXf4B5Jr91qlfQMF Hcx5K4RrDtUy9skLU+qiR/eEY7xx053vyLEleIHEBNrdIDcAkADsWVmdcaWs7LS2 5qfNzwmQBeMiQ7z5fADMdbBCyROTIlk8HfKbM6h7Op2zPHQGhbZA/6V7y2n9kVr8 WMxmsBYelDHwiQaXAysSO+1q7ANJZbaGkplN+ykW/jGi3dDLP7h/rZvj7GAuwIVj f5zlEEpdndAsHprsums0b7chZzzhAa8Z42OSKUXkeJulyF+MuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkl6Fst6UQFHs+psGUJvLSQ6B4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjljNzNiZWEtZTY5My0z ZDc5LWIyNTgtYTc2ZmZiM2YyNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvtaQowCGYFmTquY9TgVbGXReECsMLG6qk2P0cN9dRSK2tl13tk/oSs 8BRc2h58gwIjujxdTXYrtf1f/AIJ8+pti8g0xB9pdX/suFybz9pZuA2fsf84h9p2 Xxf1PkaStSEUmWbewykEibahnaulacQF/tmhF4EwWtsYRtGKMIaJnphi98l1xQL6 BKLXDz2Dc+1lCateDeFe81GkizpJhW2+VQf0m/bqh6YIle+2IZxxZOfQrM06pQGI 1z2WSpJ1ciX2qZyuGRCSM45UtPEYQJPrXXqNL9nveoXLtD1qiG015A541sPLu5eh kXru/Ci3+Xh7E8U2RnyOVD4MiDJ50w8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:48:47 2026 by rpki-client