$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03d8e77b-9fea-37c1-897b-87889c4e560e.roa File: 03d8e77b-9fea-37c1-897b-87889c4e560e.roa (raw, json) Hash identifier: Cmb73t9GaIw2/KNC1/K7jmr1SQSvumTUKTbEDHqFqe4= Subject key identifier: F2:58:6B:34:0E:C8:58:06:39:46:6D:83:E1:5A:3C:25:F5:CF:D1:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F90F8AEF8E7846DC83C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03d8e77b-9fea-37c1-897b-87889c4e560e.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.19.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:90:f8:ae:f8:e7:84:6d:c8:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8defd78b-328e-40dc-b066-c3a3ff2a6f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:a0:84:e9:f6:a8:b0:86:83:05:7c:25:59: fa:79:04:0c:6a:1c:d1:44:6c:15:2a:c6:17:7a:4c: fb:00:2a:1f:71:fe:18:58:6c:ad:fa:a7:c0:58:be: 8f:d4:c1:60:de:09:8c:11:2b:2a:f8:65:9c:5e:b5: 19:ea:7e:6c:8b:e3:7b:b5:2f:f2:09:3a:ae:d7:97: 75:1d:5e:1c:b6:53:d3:83:49:48:2e:50:ce:0a:a6: 90:a4:30:1c:a9:e5:ce:d9:df:1e:32:b5:ac:bc:7b: 17:bd:0d:c7:f7:78:36:70:0b:af:48:04:c6:54:4d: 66:f4:a7:40:9d:c4:09:d0:b0:3e:85:87:3b:38:79: 8f:17:ce:4c:d6:22:a1:a4:51:37:32:b0:83:86:05: 42:07:a9:72:4e:1e:28:c5:67:1b:b5:2e:53:99:91: a9:40:3e:29:b6:37:e2:2d:25:4e:70:fb:70:c1:ff: 5d:9a:05:15:96:47:ed:ad:1a:fd:67:3c:9d:23:af: 9b:b1:8b:cd:d7:b8:39:a3:68:1e:ec:64:ef:53:9b: 0c:a4:fa:7c:82:e3:c4:04:f0:f4:6a:7e:59:36:9b: d4:39:68:63:b5:fc:b7:31:60:bb:14:04:73:f1:a8: 7b:1a:89:8f:b4:b0:14:c0:88:77:0b:43:26:00:6a: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:58:6B:34:0E:C8:58:06:39:46:6D:83:E1:5A:3C:25:F5:CF:D1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03d8e77b-9fea-37c1-897b-87889c4e560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b2:cb:2c:a3:df:c6:9e:fa:54:98:22:7f:8c:a1:3e:91:25: 65:63:41:3d:88:18:59:28:1f:95:f3:8c:ab:fd:72:0b:74:11: 6c:95:de:86:e0:aa:21:09:28:3b:00:5c:70:6a:50:84:d9:c9: dc:ac:c2:d2:65:2f:bb:30:40:ff:fe:6d:84:da:0f:10:a9:73: 27:f2:dd:47:f5:0f:95:f3:56:92:7e:d3:98:7b:25:e1:b5:c4: f3:19:85:07:c5:ba:81:67:3a:d4:17:c1:15:7e:21:a4:2b:36: f8:90:a8:22:1e:f2:b9:34:48:4e:88:2d:81:15:82:8f:31:e1: b9:6e:4e:a9:09:72:4f:5c:cd:bb:25:02:f5:59:44:fb:7f:e3: 10:c6:24:12:ab:bd:9b:8b:40:37:06:b9:32:73:c5:90:2b:62: 66:f6:e6:33:58:09:83:5a:b6:53:38:2e:c8:5a:b2:f8:a2:5f: f3:e4:68:ab:ac:c5:22:8e:61:21:86:4d:95:c8:0a:e0:e1:3f: 2d:f6:b1:b3:a5:c0:fe:eb:64:0e:a7:d5:d8:af:ee:39:c7:5b: f4:59:fe:49:7e:e4:76:ea:e9:6e:2b:06:0e:cc:32:c6:b3:03: 53:66:43:9c:9b:46:99:ed:98:11:5d:bf:9d:dc:d9:ad:5f:db: 7c:cc:af:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5D4rvjnhG3IPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGRlZmQ3OGItMzI4ZS00MGRjLWIwNjYtYzNhM2ZmMmE2ZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz+ghOn2qLCGgwV8JVn6eQQMahzRRGwVKsYX ekz7ACofcf4YWGyt+qfAWL6P1MFg3gmMESsq+GWcXrUZ6n5si+N7tS/yCTqu15d1 HV4ctlPTg0lILlDOCqaQpDAcqeXO2d8eMrWsvHsXvQ3H93g2cAuvSATGVE1m9KdA ncQJ0LA+hYc7OHmPF85M1iKhpFE3MrCDhgVCB6lyTh4oxWcbtS5TmZGpQD4ptjfi LSVOcPtwwf9dmgUVlkftrRr9ZzydI6+bsYvN17g5o2ge7GTvU5sMpPp8guPEBPD0 an5ZNpvUOWhjtfy3MWC7FARz8ah7GomPtLAUwIh3C0MmAGo/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJYazQOyFgGOUZtg+FaPCX1z9H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDNkOGU3N2ItOWZlYS0z N2MxLTg5N2ItODc4ODljNGU1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWyyyyj38ae+lSYIn+MoT6RJWVjQT2IGFkoH5XzjKv9cgt0EWyV3obg qiEJKDsAXHBqUITZydyswtJlL7swQP/+bYTaDxCpcyfy3Uf1D5XzVpJ+05h7JeG1 xPMZhQfFuoFnOtQXwRV+IaQrNviQqCIe8rk0SE6ILYEVgo8x4bluTqkJck9czbsl AvVZRPt/4xDGJBKrvZuLQDcGuTJzxZArYmb25jNYCYNatlM4LshasviiX/PkaKus xSKOYSGGTZXICuDhPy32sbOlwP7rZA6n1div7jnHW/RZ/kl+5Hbq6W4rBg7MMsaz A1NmQ5ybRpntmBFdv53c2a1f23zMr1Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:48 2026 by rpki-client