$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfaab904-115f-365e-97be-f8c6cb0fec85.roa File: dfaab904-115f-365e-97be-f8c6cb0fec85.roa (raw, json) Hash identifier: 9JSnWrLMMyXdvnPjUxykSm1I8h5xaZporhDtYN0nnFc= Subject key identifier: FA:BF:3C:E2:11:45:EA:9D:FC:DD:CE:10:4B:86:9B:28:BA:12:01:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1ECA0727B65CDFAE1A0480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfaab904-115f-365e-97be-f8c6cb0fec85.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 98.23.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ca:07:27:b6:5c:df:ae:1a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=04486f94-50f5-414c-bf5f-f3d2d745dda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:30:2c:2c:67:e1:8a:1c:06:01:96:3a:23: 5a:d6:94:0b:f9:b7:72:d4:3e:0d:6b:96:49:20:b5: 0f:78:86:5a:e1:0c:a0:85:26:55:42:ff:7c:9f:9f: 03:43:22:45:d0:3e:77:62:5f:e4:9b:a9:ab:80:11: 27:aa:ff:f3:2e:a2:26:11:2c:1d:f9:5c:7c:61:92: 48:98:8f:37:05:9f:62:28:a5:12:28:55:e9:f0:95: 5f:f3:2e:8a:75:f5:f9:62:23:1b:8a:ea:1d:34:68: 37:10:3c:87:53:a5:8e:58:4c:65:82:de:1f:69:46: e1:6f:d5:1a:81:bb:07:68:5c:87:1f:e5:9c:f3:8c: 9f:51:12:8a:12:f1:b3:06:dc:07:c0:d5:70:4f:4e: 6e:7d:de:a9:9d:c5:c2:e9:98:57:2f:8f:b0:43:ef: da:49:13:ca:8b:9a:39:c3:a8:02:20:e5:98:b5:99: 5e:3f:ad:3e:25:5b:28:ed:fe:35:bb:5e:57:fc:8c: b0:ac:2f:de:6d:e9:fb:fe:ff:fc:35:03:de:38:9e: 10:3c:c8:24:90:e3:09:97:f2:d4:a0:fe:68:a4:91: 10:3b:a9:cc:d7:13:45:7d:75:9e:11:f1:d0:89:13: d3:47:db:f8:e6:b1:65:e1:5f:49:4d:ed:6b:ce:53: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:3C:E2:11:45:EA:9D:FC:DD:CE:10:4B:86:9B:28:BA:12:01:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfaab904-115f-365e-97be-f8c6cb0fec85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c8:31:20:60:89:0f:f7:07:9a:69:6c:b7:13:72:42:b4:4c: b0:95:41:b5:bf:21:47:95:28:31:19:2e:2a:2b:82:ee:e7:39: 77:c8:2e:2b:a5:c7:73:5e:30:1c:04:6c:89:e7:a4:7e:eb:44: b9:96:ad:2a:da:b0:62:9e:4d:b7:d0:ef:fc:a0:ce:5b:b4:38: 9e:25:f5:e2:75:83:2e:73:9b:2f:f9:b7:37:62:59:32:a8:55: 3b:a5:b5:8f:d6:2f:1f:cf:6d:83:ef:15:fc:7d:26:08:d6:a9: 28:6c:a6:87:44:20:20:93:6d:34:58:34:ba:27:0f:3c:e0:89: 8b:bb:b6:ea:3e:42:46:4e:15:00:17:1f:4a:a0:98:d8:85:c6: 0c:87:79:07:e7:db:6d:c0:64:dd:b3:f1:4c:b4:ab:6f:c1:d0: 7c:f2:1d:e4:e9:c5:ee:47:d7:01:74:c1:cb:bb:82:aa:27:db: 27:49:99:df:73:65:8c:86:ea:0f:6b:1b:4b:04:f4:76:f2:04: 63:a7:47:77:01:10:c5:42:9a:3c:52:7c:30:cb:a7:64:71:62: 32:93:3f:33:d9:97:6a:d8:b5:92:c7:00:71:86:ef:fd:04:ba: f6:cf:13:2e:03:ce:55:02:dc:46:32:40:fd:3f:8c:4f:2a:f7: dd:6b:84:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsoHJ7Zc364aBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MDQ0ODZmOTQtNTBmNS00MTRjLWJmNWYtZjNkMmQ3NDVkZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4gwLCxn4YocBgGWOiNa1pQL+bdy1D4Na5ZJ ILUPeIZa4QyghSZVQv98n58DQyJF0D53Yl/km6mrgBEnqv/zLqImESwd+Vx8YZJI mI83BZ9iKKUSKFXp8JVf8y6KdfX5YiMbiuodNGg3EDyHU6WOWExlgt4faUbhb9Ua gbsHaFyHH+Wc84yfURKKEvGzBtwHwNVwT05ufd6pncXC6ZhXL4+wQ+/aSRPKi5o5 w6gCIOWYtZleP60+JVso7f41u15X/IywrC/eben7/v/8NQPeOJ4QPMgkkOMJl/LU oP5opJEQO6nM1xNFfXWeEfHQiRPTR9v45rFl4V9JTe1rzlPQbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq/POIRReqd/N3OEEuGmyi6EgFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhYWI5MDQtMTE1Zi0z NjVlLTk3YmUtZjhjNmNiMGZlYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYheQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfIMSBgiQ/3B5ppbLcTckK0TLCVQbW/IUeVKDEZLiorgu7nOXfILiul x3NeMBwEbInnpH7rRLmWrSrasGKeTbfQ7/ygzlu0OJ4l9eJ1gy5zmy/5tzdiWTKo VTultY/WLx/PbYPvFfx9JgjWqShspodEICCTbTRYNLonDzzgiYu7tuo+QkZOFQAX H0qgmNiFxgyHeQfn223AZN2z8Uy0q2/B0HzyHeTpxe5H1wF0wcu7gqon2ydJmd9z ZYyG6g9rG0sE9HbyBGOnR3cBEMVCmjxSfDDLp2RxYjKTPzPZl2rYtZLHAHGG7/0E uvbPEy4DzlUC3EYyQP0/jE8q991rhJo= -----END CERTIFICATE-----Generated at Sun Jun 14 00:50:33 2026 by rpki-client