$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa File: 05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa (raw, json) Hash identifier: 98xeiR/ALzS4HQ1xQcE2GjYkeBuzRBnUKCg7OPJ5rHE= Subject key identifier: 7E:1B:BD:31:21:44:E6:42:98:F9:D1:2D:C9:21:37:57:AF:22:70:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A994B16DCEE602A4E9D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.20.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:99:4b:16:dc:ee:60:2a:4e:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b794d21b-7220-4100-bf10-72a0c35a9f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:fe:92:73:2e:1c:4c:ff:45:e2:5c:fd:37: 33:ec:ea:45:d1:09:47:2b:6d:77:81:17:db:e7:b1: ca:5c:85:16:78:52:30:c8:a4:60:e5:b8:8c:b8:2c: 3f:97:f4:cb:27:b5:21:60:44:85:a1:e2:1e:24:d0: 90:fa:b6:f2:cd:bf:38:92:85:19:66:9a:67:f2:b6: c2:90:04:95:c1:69:17:df:48:5b:72:92:b9:da:12: 99:b1:58:82:bd:02:df:2c:75:7e:44:2b:31:fd:34: 6e:b7:6b:e8:5f:72:36:13:7d:78:c2:d7:6f:6c:0c: 68:cb:61:1c:fb:45:a6:6a:1a:ff:e3:0a:87:18:d0: 33:e6:44:c8:60:fe:bc:8c:84:19:a6:a3:53:e0:86: 59:84:c3:1e:95:e7:27:d3:73:30:78:4c:b8:c3:50: f2:e0:52:6a:90:25:9b:68:3f:95:a5:ed:c7:87:36: cf:98:a0:b0:0e:b6:80:fe:5b:63:c8:b5:f6:8c:83: d7:7b:ea:48:f1:41:6a:41:53:a4:89:77:cb:7a:f1: 7a:7d:5a:28:44:41:3a:01:de:78:e0:e8:9e:86:05: d9:56:62:f8:52:60:13:1d:6a:38:57:19:30:ae:be: 34:76:2d:c5:f2:24:23:8d:37:e7:99:fb:61:3d:be: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:BD:31:21:44:E6:42:98:F9:D1:2D:C9:21:37:57:AF:22:70:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b5:27:a1:70:c9:1f:64:4f:88:85:70:8f:ba:e5:0d:ff:50: 25:fa:ea:4e:8c:58:41:13:f4:6f:af:6b:aa:f1:0c:8b:b2:18: 29:8d:d0:49:19:7a:29:7c:5e:e9:b9:84:d4:b8:47:0c:64:30: d0:f2:5f:9c:03:d0:58:ab:ef:b5:26:da:5b:15:ee:59:8f:97: db:26:82:61:6d:4e:52:18:bb:9a:6f:12:1c:e8:61:cc:28:64: 3d:47:fc:77:10:a6:2c:c3:53:f4:e1:af:59:a8:33:7e:19:f1: 67:db:3b:cc:3d:f4:f2:d0:ce:49:1c:ef:0a:d0:87:48:fe:bc: 81:2b:ad:0b:fc:fa:f5:10:4d:d1:0c:53:63:bf:71:92:e9:7c: 9a:5a:19:01:2a:b3:2a:4c:e9:e5:00:43:41:b3:6e:b6:0d:7f: fb:83:47:df:7f:00:06:75:12:0c:36:96:fc:64:14:00:97:23: 50:f3:6d:f2:ad:9f:5a:5e:51:91:c9:68:86:76:99:64:90:fa: b7:65:42:aa:2a:b8:0c:0c:2f:fd:7a:a2:0e:f7:96:7b:c5:d3: e9:a8:82:f3:ad:00:79:06:ac:00:10:ce:2e:41:1e:df:80:2f: f1:82:13:79:06:ba:9c:54:30:6e:6d:b6:9b:1c:4d:57:82:73: 05:3d:89:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCplLFtzuYCpOnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Yjc5NGQyMWItNzIyMC00MTAwLWJmMTAtNzJhMGMzNWE5ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuT+knMuHEz/ReJc/Tcz7OpF0QlHK213gRfb 57HKXIUWeFIwyKRg5biMuCw/l/TLJ7UhYESFoeIeJNCQ+rbyzb84koUZZppn8rbC kASVwWkX30hbcpK52hKZsViCvQLfLHV+RCsx/TRut2voX3I2E314wtdvbAxoy2Ec +0Wmahr/4wqHGNAz5kTIYP68jIQZpqNT4IZZhMMelecn03MweEy4w1Dy4FJqkCWb aD+Vpe3HhzbPmKCwDraA/ltjyLX2jIPXe+pI8UFqQVOkiXfLevF6fVooREE6Ad54 4OiehgXZVmL4UmATHWo4Vxkwrr40di3F8iQjjTfnmfthPb5tFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4bvTEhROZCmPnRLckhN1evInAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDU3NzllMzgtZTE1Yi0z ZjU2LWJiODgtYjRmODI0ZGZiZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe1J6FwyR9kT4iFcI+65Q3/UCX66k6MWEET9G+va6rxDIuyGCmN0EkZ eil8Xum5hNS4RwxkMNDyX5wD0Fir77Um2lsV7lmPl9smgmFtTlIYu5pvEhzoYcwo ZD1H/HcQpizDU/Thr1moM34Z8WfbO8w99PLQzkkc7wrQh0j+vIErrQv8+vUQTdEM U2O/cZLpfJpaGQEqsypM6eUAQ0GzbrYNf/uDR99/AAZ1Egw2lvxkFACXI1DzbfKt n1peUZHJaIZ2mWSQ+rdlQqoquAwML/16og73lnvF0+mogvOtAHkGrAAQzi5BHt+A L/GCE3kGupxUMG5ttpscTVeCcwU9iYM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:07 2026 by rpki-client