$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff772112-d3cd-3241-91b9-30e8e4708939.roa File: ff772112-d3cd-3241-91b9-30e8e4708939.roa (raw, json) Hash identifier: b8CvIVFgfdHAb0bNWu8d9HsdeszZYdB6kfAZM9iCU0g= Subject key identifier: 9C:5A:97:3D:F7:B7:CE:9C:64:8B:6D:6A:21:D9:FB:D2:9D:64:FF:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1EEE97179B8735504E4E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff772112-d3cd-3241-91b9-30e8e4708939.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 98.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ee:97:17:9b:87:35:50:4e:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=a91847b0-98e5-4239-90a7-3047128b3ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:8d:7b:cb:92:74:8b:e9:39:02:7b:5d:b5: 4f:45:a3:83:c7:43:03:70:65:8d:27:d0:52:ff:58: de:20:d7:ab:f1:38:5c:36:24:88:cd:ef:7a:e0:1e: 63:cb:6e:a7:79:fa:93:3d:79:5a:1e:aa:f6:a5:74: e1:61:ac:65:19:5c:9c:cb:e6:79:9c:fb:f9:c3:84: bc:7f:11:37:79:ba:d9:1d:80:f4:46:df:b0:cb:dd: 26:01:43:20:2a:2d:65:99:57:2d:75:51:74:0c:d6: 5d:fb:5b:94:dd:44:83:5f:c2:80:ed:c7:40:6b:0a: 73:d0:23:5f:9d:5d:71:9b:79:04:4d:4a:9b:ed:ee: cb:c5:2a:f1:ac:e9:87:44:1b:d8:aa:e3:8e:c3:37: 92:d7:fc:f1:cb:02:fd:d0:59:9a:a4:c7:c3:63:9e: f7:21:ac:15:5a:37:97:6f:40:41:72:d4:b0:da:9b: 0a:4b:d3:a4:d8:a0:c3:f3:4c:6d:34:a4:56:f4:73: b4:92:96:a3:61:6a:02:90:a5:91:7a:56:c5:c0:73: 01:5b:28:76:1e:81:6d:e0:82:34:d0:fd:eb:5e:2f: c6:87:e7:5e:4d:53:29:15:f2:08:b1:09:3e:e5:8b: 6b:2e:37:43:9c:7e:9d:c6:e7:91:a1:3e:cc:58:3b: 29:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5A:97:3D:F7:B7:CE:9C:64:8B:6D:6A:21:D9:FB:D2:9D:64:FF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff772112-d3cd-3241-91b9-30e8e4708939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c4:e8:a2:02:6c:4b:92:d9:6e:2a:72:f0:90:be:0e:89:ce: ea:d8:fa:ea:48:ce:b6:2e:6f:b7:fd:79:4a:a6:28:e9:fe:28: 46:dd:f7:01:cf:a4:9a:6d:fd:01:c1:0c:21:90:a9:c7:7a:0c: 5b:8e:c1:92:32:e7:71:2d:17:52:48:dc:11:6d:f5:d9:f5:e4: b9:bf:a8:ea:6f:8a:53:79:bc:2b:d4:e4:d4:65:e1:05:ab:2e: 8c:aa:ea:e3:f2:f4:17:8a:3e:a6:b8:ee:2f:c5:4d:84:ab:95: be:6e:a7:fe:b8:7b:69:61:44:39:29:c2:f1:1a:b0:85:cd:17: 98:57:61:65:8d:15:f0:1c:41:51:fa:0e:37:76:10:81:d7:18: 38:6f:d3:b9:97:35:ed:31:f4:fd:0c:91:dc:1b:b4:8f:cf:ef: a4:4e:ca:e3:48:f2:d0:dd:60:1f:83:4d:8d:d0:0d:be:1e:12: f0:0d:63:a3:4e:8f:47:7f:ad:4c:3f:65:f4:49:36:cd:a4:c1: 8b:16:a7:32:00:23:88:21:2f:bb:17:29:fd:fd:56:92:ee:da: aa:49:1a:ee:a8:fd:76:f4:78:db:6f:7f:54:43:a6:57:0d:94: 41:2f:f0:71:f2:6b:a1:06:79:15:18:68:24:e2:ef:ce:0f:aa: 5a:21:08:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu6XF5uHNVBOTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YTkxODQ3YjAtOThlNS00MjM5LTkwYTctMzA0NzEyOGIzZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeONe8uSdIvpOQJ7XbVPRaODx0MDcGWNJ9BS /1jeINer8ThcNiSIze964B5jy26nefqTPXlaHqr2pXThYaxlGVycy+Z5nPv5w4S8 fxE3ebrZHYD0Rt+wy90mAUMgKi1lmVctdVF0DNZd+1uU3USDX8KA7cdAawpz0CNf nV1xm3kETUqb7e7LxSrxrOmHRBvYquOOwzeS1/zxywL90FmapMfDY573IawVWjeX b0BBctSw2psKS9Ok2KDD80xtNKRW9HO0kpajYWoCkKWRelbFwHMBWyh2HoFt4II0 0P3rXi/Gh+deTVMpFfIIsQk+5YtrLjdDnH6dxueRoT7MWDspDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxalz33t86cZIttaiHZ+9KdZP+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY3NzIxMTItZDNjZC0z MjQxLTkxYjktMzBlOGU0NzA4OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjE6KICbEuS2W4qcvCQvg6JzurY+upIzrYub7f9eUqmKOn+KEbd9wHP pJpt/QHBDCGQqcd6DFuOwZIy53EtF1JI3BFt9dn15Lm/qOpvilN5vCvU5NRl4QWr Loyq6uPy9BeKPqa47i/FTYSrlb5up/64e2lhRDkpwvEasIXNF5hXYWWNFfAcQVH6 Djd2EIHXGDhv07mXNe0x9P0MkdwbtI/P76ROyuNI8tDdYB+DTY3QDb4eEvANY6NO j0d/rUw/ZfRJNs2kwYsWpzIAI4ghL7sXKf39VpLu2qpJGu6o/Xb0eNtvf1RDplcN lEEv8HHya6EGeRUYaCTi784PqlohCBM= -----END CERTIFICATE-----Generated at Sat Jun 13 18:57:50 2026 by rpki-client