$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa File: 040f0daa-4901-3c20-af2f-533b29edcc22.roa (raw, json) Hash identifier: 9vB7feMPeYqaBoGIoV9Q0Jtj/A7byjUyeMIw/q2d8Ek= Subject key identifier: B0:D7:44:5A:02:77:73:9A:C7:B8:2B:FF:0A:24:13:1A:C8:14:82:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8963F47AC7BB4FE91D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.16.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:89:63:f4:7a:c7:bb:4f:e9:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=fffe49fd-062f-441f-993b-c8bd885e067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:a6:f7:5b:72:b1:7c:ad:c7:78:14:0e:d0: a7:74:27:0b:cd:5d:a8:94:bc:d3:ca:1c:e9:9b:ea: fb:be:b1:65:2d:0c:26:65:85:e8:49:19:35:8b:d6: 3e:64:92:1a:83:bc:64:11:09:de:59:54:d3:e5:8d: 94:cb:6f:40:1a:d8:a0:1a:3b:cf:2d:17:32:8f:be: cc:c0:ee:e5:df:9a:10:13:f5:41:ee:74:7d:bb:9b: e1:6c:57:79:a2:78:9a:39:d8:ec:06:03:b4:9d:4a: d3:98:e8:ae:57:6d:55:ff:98:5b:22:94:12:17:b2: 31:8f:d4:65:37:23:f8:e5:02:fa:bd:2f:a2:dc:34: d1:95:db:57:20:b8:9e:be:3a:99:aa:c5:6c:9d:32: 7e:73:c4:ec:86:05:42:e9:10:77:b0:d4:8b:1b:7a: 54:64:27:38:a7:66:e6:80:4f:c8:f7:d6:a8:50:14: 64:1d:0e:a4:cf:c4:ef:1f:46:6e:12:bc:6d:cf:19: 23:85:f4:d2:50:42:b4:50:cf:95:53:c7:8b:75:cc: 37:87:c3:03:5f:b7:f9:1c:d1:c9:c7:23:d8:71:6f: 33:d5:d6:39:19:d0:c3:4e:51:2c:99:63:d3:e0:1f: 1e:56:40:2e:81:48:8b:a2:f5:77:31:96:04:58:32: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D7:44:5A:02:77:73:9A:C7:B8:2B:FF:0A:24:13:1A:C8:14:82:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ee:eb:2a:68:94:e2:d6:ac:22:e5:c7:00:84:c9:d5:87:3e: 00:7b:56:fe:ac:4b:16:6a:c5:1c:f2:07:fe:2c:6e:88:51:c1: 90:28:35:cb:f9:2e:d0:9d:20:f9:e2:2d:27:38:74:bc:b6:53: e1:db:af:68:cd:32:cb:4e:82:79:45:a8:e1:8b:98:1f:33:07: c3:74:8d:46:30:63:4e:18:c7:34:43:7b:25:64:ce:f2:7c:e8: 0f:80:e6:c8:da:9b:70:36:d7:80:1a:5c:fb:a3:29:8a:1e:55: f9:fd:e3:48:59:a9:30:56:23:e2:16:5a:f9:78:fb:84:0c:0c: 34:9c:e8:ea:35:87:a7:ef:17:07:0f:55:df:3b:cd:b7:e1:8c: 96:98:40:83:ee:74:45:35:48:34:b9:04:ae:ee:89:7a:c6:7a: 09:a3:8d:1f:bc:82:60:60:37:b1:5c:a4:f1:73:4e:bc:00:94: 8d:2f:94:82:a3:c6:a9:1c:79:6f:f9:ea:8f:23:c5:3e:f1:29: 82:30:89:1e:a7:63:3f:23:82:a9:b9:c6:c2:ed:dc:dc:b9:2a: cd:ce:0e:c2:68:2c:e8:23:3a:c0:7b:05:8b:5c:4f:d9:96:ce: b9:86:b6:cd:06:53:28:a8:45:d6:1a:f4:c1:64:c5:ce:d3:30: 45:d7:d4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4lj9HrHu0/pHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZmZmZTQ5ZmQtMDYyZi00NDFmLTk5M2ItYzhiZDg4NWUwNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxGm91tysXytx3gUDtCndCcLzV2olLzTyhzp m+r7vrFlLQwmZYXoSRk1i9Y+ZJIag7xkEQneWVTT5Y2Uy29AGtigGjvPLRcyj77M wO7l35oQE/VB7nR9u5vhbFd5oniaOdjsBgO0nUrTmOiuV21V/5hbIpQSF7Ixj9Rl NyP45QL6vS+i3DTRldtXILievjqZqsVsnTJ+c8TshgVC6RB3sNSLG3pUZCc4p2bm gE/I99aoUBRkHQ6kz8TvH0ZuErxtzxkjhfTSUEK0UM+VU8eLdcw3h8MDX7f5HNHJ xyPYcW8z1dY5GdDDTlEsmWPT4B8eVkAugUiLovV3MZYEWDKJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDXRFoCd3Oax7gr/wokExrIFILhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQwZjBkYWEtNDkwMS0z YzIwLWFmMmYtNTMzYjI5ZWRjYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXu6ypolOLWrCLlxwCEydWHPgB7Vv6sSxZqxRzyB/4sbohRwZAoNcv5 LtCdIPniLSc4dLy2U+Hbr2jNMstOgnlFqOGLmB8zB8N0jUYwY04YxzRDeyVkzvJ8 6A+A5sjam3A214AaXPujKYoeVfn940hZqTBWI+IWWvl4+4QMDDSc6Oo1h6fvFwcP Vd87zbfhjJaYQIPudEU1SDS5BK7uiXrGegmjjR+8gmBgN7FcpPFzTrwAlI0vlIKj xqkceW/56o8jxT7xKYIwiR6nYz8jgqm5xsLt3Ny5Ks3ODsJoLOgjOsB7BYtcT9mW zrmGts0GUyioRdYa9MFkxc7TMEXX1Dc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:28 2026 by rpki-client