$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa File: f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa (raw, json) Hash identifier: vT/kXMAsL2gUZkbS03P9NpeUj2s6QIwRpSgYqIxpSwQ= Subject key identifier: 79:DF:62:FA:21:A7:25:88:18:97:D9:8D:59:F5:11:F8:0C:F0:A3:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E000603B3FD6CBCA04CE36160 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 7029 IP address blocks: 98.17.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:03:b3:fd:6c:bc:a0:4c:e3:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=8f0f58c3-1969-4eaf-85ea-53149427f2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:1d:7f:12:4e:71:80:16:cb:17:43:4e:29: 90:ba:9f:b9:69:ef:82:c7:e5:84:8e:a2:07:94:1a: a8:12:65:fd:20:42:e7:aa:af:35:4d:cd:7f:ef:03: af:91:b8:4b:76:52:05:41:e4:61:f3:4b:de:3b:06: b1:99:13:78:7b:6e:d0:60:86:c9:78:2c:f8:5b:74: 83:9e:06:8b:7e:02:e2:92:68:96:7c:3e:3c:45:20: 05:ad:3f:79:29:87:84:20:4f:1d:34:46:1c:c6:80: 33:94:33:42:5e:23:67:ae:64:f3:c4:f2:db:6a:8e: cc:a9:62:b0:f4:71:2d:64:df:01:f9:b0:0d:de:08: 0f:e0:a2:03:e2:15:7c:75:5c:be:ca:55:34:13:62: 63:92:7f:a0:4f:8f:65:08:18:bb:1e:e8:03:89:ff: c3:00:af:2f:52:bd:58:b7:51:52:55:e2:d5:f9:f3: ca:29:d5:ac:93:96:dc:fb:64:97:bb:58:a3:33:f1: 3d:57:d3:1c:dd:7f:e9:9a:66:3c:c3:12:9f:93:9e: 19:aa:59:94:d1:5e:99:60:26:c0:33:a7:68:1a:e7: 20:a2:52:5d:be:d0:c1:a7:1e:44:02:e5:0c:da:e4: 30:88:17:80:3f:2f:c0:e8:83:03:9f:87:2a:51:78: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:62:FA:21:A7:25:88:18:97:D9:8D:59:F5:11:F8:0C:F0:A3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:25:0f:70:b9:87:d8:9f:72:9a:f9:f1:d2:a5:8a:cb:fe:0d: c3:47:79:9b:bc:0b:4b:2f:32:6d:b1:a7:e0:6b:be:e1:ce:10: 02:f0:4e:c2:40:4d:c4:bf:ac:27:db:52:e1:10:8d:fa:a2:b6: 6a:f8:ae:5c:bf:a6:4d:d2:4e:e0:99:e4:3c:6f:ba:cc:59:23: 97:68:ea:b7:b6:24:5e:4a:97:bb:a4:72:11:ba:3a:59:c7:1f: 8a:ca:2e:c0:b9:fc:87:7f:08:cc:ac:c8:bf:86:7b:da:c5:75: 97:02:67:00:37:fc:c7:a9:7c:26:0a:cf:4b:e9:f5:03:e2:d8: 25:8b:03:82:bd:c6:38:09:7f:5b:ad:d9:97:8d:b5:95:0b:f8: 0f:f3:0b:97:8b:82:06:4b:39:59:7f:da:e2:5b:0e:57:51:3b: 14:fb:01:5d:c8:ae:50:48:1a:3e:9b:58:26:6f:b8:2e:d6:67: cb:dc:a7:3d:11:81:d1:86:18:63:d7:a3:98:c3:e9:27:14:e1: 38:f3:d7:7c:69:91:fc:39:90:de:21:f0:b4:32:39:fc:47:ca: ac:79:c7:4f:c5:38:2e:55:36:0a:af:0c:5f:bd:73:64:77:c2: dc:ee:ca:15:b2:9a:ca:9d:56:57:0e:5a:40:31:e8:5e:0f:cd: 84:cc:37:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABgOz/Wy8oEzjYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OGYwZjU4YzMtMTk2OS00ZWFmLTg1ZWEtNTMxNDk0MjdmMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlYdfxJOcYAWyxdDTimQup+5ae+Cx+WEjqIH lBqoEmX9IELnqq81Tc1/7wOvkbhLdlIFQeRh80veOwaxmRN4e27QYIbJeCz4W3SD ngaLfgLikmiWfD48RSAFrT95KYeEIE8dNEYcxoAzlDNCXiNnrmTzxPLbao7MqWKw 9HEtZN8B+bAN3ggP4KID4hV8dVy+ylU0E2Jjkn+gT49lCBi7HugDif/DAK8vUr1Y t1FSVeLV+fPKKdWsk5bc+2SXu1ijM/E9V9Mc3X/pmmY8wxKfk54ZqlmU0V6ZYCbA M6doGucgolJdvtDBpx5EAuUM2uQwiBeAPy/A6IMDn4cqUXhY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnfYvohpyWIGJfZjVn1EfgM8KM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhjNzU5NTMtYzllZC0z ZGNiLTkwMmMtYjkzZjM0ZDRhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEolD3C5h9ifcpr58dKlisv+DcNHeZu8C0svMm2xp+BrvuHOEALwTsJA TcS/rCfbUuEQjfqitmr4rly/pk3STuCZ5DxvusxZI5do6re2JF5Kl7ukchG6OlnH H4rKLsC5/Id/CMysyL+Ge9rFdZcCZwA3/MepfCYKz0vp9QPi2CWLA4K9xjgJf1ut 2ZeNtZUL+A/zC5eLggZLOVl/2uJbDldROxT7AV3IrlBIGj6bWCZvuC7WZ8vcpz0R gdGGGGPXo5jD6ScU4Tjz13xpkfw5kN4h8LQyOfxHyqx5x0/FOC5VNgqvDF+9c2R3 wtzuyhWymsqdVlcOWkAx6F4PzYTMN64= -----END CERTIFICATE-----Generated at Sat Jun 13 10:13:17 2026 by rpki-client