$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa File: 0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa (raw, json) Hash identifier: bWL69utdkKaCsGXsEwnl5e5KIhQQQrPFKtqfZSCrYpo= Subject key identifier: 2A:E1:75:4B:56:0A:F2:D0:CC:5E:0D:E8:E2:06:35:21:A5:E8:CE:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A62A18D14CCABE4AF9280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.17.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:62:a1:8d:14:cc:ab:e4:af:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e38a3e5d-2f44-4239-9993-a2e6581a31a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:5b:0e:cf:59:fe:7d:4b:a4:34:f0:d4:9a: d9:45:4a:b8:95:8c:c7:62:fa:58:7c:0f:df:1c:66: 4b:bd:29:e0:fe:42:a0:82:7a:af:38:9b:24:3a:5f: 94:bf:5d:d6:b9:af:2d:4f:aa:97:1b:fa:a0:f4:64: 11:db:c6:19:c2:4f:4c:70:a2:a0:cb:d7:6a:8e:a9: 56:f2:01:72:32:d0:f9:d4:95:13:43:c5:bc:05:61: 82:07:82:b1:79:09:13:3b:e2:55:bb:c1:0b:46:49: 31:7d:57:8c:8e:33:1c:01:60:f3:50:f9:4b:c0:d6: 26:43:08:cd:b1:6b:db:1c:ab:32:54:7f:9e:50:a1: 2f:89:fa:7f:09:1e:6d:08:90:ac:75:73:7f:66:96: c7:bf:d1:9b:4a:7d:66:60:d0:d8:9a:b2:f0:82:04: 1f:3f:6d:2b:6b:dd:b2:90:c0:8f:e5:fb:e4:36:fb: cf:80:95:45:7a:5a:dc:19:df:4c:db:26:2f:0f:4b: 47:a2:d4:0f:d5:a3:b3:bb:0f:c0:af:61:77:de:ff: ca:5f:eb:57:31:7b:e3:c2:2f:cb:5e:02:f6:26:28: d2:c2:a5:e2:e9:85:b1:dd:b0:0e:c2:5c:79:76:a9: 70:16:8d:5b:17:13:c5:fe:29:25:a4:09:31:75:77: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E1:75:4B:56:0A:F2:D0:CC:5E:0D:E8:E2:06:35:21:A5:E8:CE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4e:ff:16:2e:47:21:e5:a3:99:93:98:d9:09:a6:6d:d6:37: cb:2e:be:9d:f6:10:de:22:a4:7d:c1:39:48:b3:7c:2c:eb:8d: d4:ca:bc:63:7c:09:8c:00:af:df:ee:c1:b1:9b:97:19:10:a3: 32:39:8e:83:54:9f:f8:a8:07:1a:79:4c:3a:b1:0d:d8:a1:dd: 0a:22:ef:9d:8d:b3:aa:54:2d:20:94:53:47:ab:0b:a6:89:ca: c4:d1:3c:29:a3:eb:8e:2a:a0:16:46:34:40:e8:c4:fd:8e:41: f5:a5:0e:2c:f6:19:8c:be:c2:b6:ac:6e:b4:94:e1:39:0e:53: ca:75:a0:30:b0:72:dc:b2:be:f2:0a:a1:2e:1e:be:d4:3c:ae: a2:3f:41:32:6d:ac:5b:45:23:5a:e0:ce:18:30:fe:c9:02:29: 12:33:39:70:05:6d:ca:cc:5d:c9:c2:09:0b:23:dd:4f:6f:5a: 40:a2:eb:ff:32:a0:58:ec:3b:19:cf:af:d4:be:f8:24:ac:02: 97:04:32:54:d1:f8:01:41:21:d4:69:79:5c:24:7c:05:22:85: d8:a0:68:47:aa:bc:80:79:e4:ba:a2:12:f1:28:b7:9f:84:1f: bf:bc:9a:81:59:60:7f:bc:fc:12:5a:10:91:2e:97:54:fb:1e: 0b:0b:b5:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmKhjRTMq+SvkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTM4YTNlNWQtMmY0NC00MjM5LTk5OTMtYTJlNjU4MWEzMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoNbDs9Z/n1LpDTw1JrZRUq4lYzHYvpYfA/f HGZLvSng/kKggnqvOJskOl+Uv13Wua8tT6qXG/qg9GQR28YZwk9McKKgy9dqjqlW 8gFyMtD51JUTQ8W8BWGCB4KxeQkTO+JVu8ELRkkxfVeMjjMcAWDzUPlLwNYmQwjN sWvbHKsyVH+eUKEvifp/CR5tCJCsdXN/ZpbHv9GbSn1mYNDYmrLwggQfP20ra92y kMCP5fvkNvvPgJVFelrcGd9M2yYvD0tHotQP1aOzuw/Ar2F33v/KX+tXMXvjwi/L XgL2JijSwqXi6YWx3bAOwlx5dqlwFo1bFxPF/iklpAkxdXd7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrhdUtWCvLQzF4N6OIGNSGl6M5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRmOWI4MTktMWFhNy0z Yzc5LTk0ZTItN2YyN2ZhOWVjMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItO/xYuRyHlo5mTmNkJpm3WN8suvp32EN4ipH3BOUizfCzrjdTKvGN8 CYwAr9/uwbGblxkQozI5joNUn/ioBxp5TDqxDdih3Qoi752Ns6pULSCUU0erC6aJ ysTRPCmj644qoBZGNEDoxP2OQfWlDiz2GYy+wrasbrSU4TkOU8p1oDCwctyyvvIK oS4evtQ8rqI/QTJtrFtFI1rgzhgw/skCKRIzOXAFbcrMXcnCCQsj3U9vWkCi6/8y oFjsOxnPr9S++CSsApcEMlTR+AFBIdRpeVwkfAUihdigaEeqvIB55LqiEvEot5+E H7+8moFZYH+8/BJaEJEul1T7HgsLtWw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:37 2026 by rpki-client