$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa File: 1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa (raw, json) Hash identifier: 7H2pWsrJxnWyQJaUX8k+RKh5hb9vSOIreX7XpzsxBrI= Subject key identifier: A8:0D:6C:B2:42:BC:04:3B:88:0A:CE:A4:1C:E5:2C:B4:4E:03:B9:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8F818E6D514F30707F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.20.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8f:81:8e:6d:51:4f:30:70:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=221ba2c5-2ced-497b-9cd1-b744b6f2a093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:09:24:c2:0c:f0:1d:33:26:36:22:9d:d6:f9: 5f:8d:5d:06:9f:ee:b5:73:d2:7d:40:4d:58:84:f1: 42:71:7f:ae:7b:34:d1:a2:9e:ee:8e:1a:6d:d3:47: 10:09:5e:1b:7b:2d:ac:bf:f0:40:72:9d:62:32:c9: b6:ea:6b:f0:fa:b7:4d:99:92:7b:27:4c:a0:7e:b7: 97:c5:e6:d3:f5:99:2c:24:02:40:61:9a:6d:ca:ce: 4b:a9:22:8b:1e:f8:21:22:40:af:b7:b4:66:23:1c: ff:82:2d:c6:30:77:58:ba:e8:bb:17:35:c8:cc:b6: cc:90:8f:27:f9:83:e2:e1:35:94:b2:57:96:db:97: 31:37:80:c0:fb:c1:1e:05:4e:d0:d2:71:14:ee:e8: e9:38:75:54:12:bd:ec:96:13:76:e1:85:bf:e3:38: 36:cd:37:f7:fd:23:32:b2:84:57:3e:7c:6d:cf:f0: a7:5a:f9:93:64:35:54:c6:44:08:36:29:bc:89:07: cc:8d:7d:f1:c9:91:a6:b3:83:28:ce:2d:0d:f4:eb: a1:03:cd:49:58:69:af:6b:f9:08:08:bd:3a:76:9b: d1:5b:fe:3f:c8:76:7a:ad:e6:d5:97:0f:7a:37:83: 66:f1:3a:4a:4b:8b:e5:5a:4e:af:8c:4c:e6:d0:ee: 10:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0D:6C:B2:42:BC:04:3B:88:0A:CE:A4:1C:E5:2C:B4:4E:03:B9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1b:f0:b6:eb:9e:ab:bc:da:1b:0d:93:29:09:c0:63:a6:87: 87:d3:13:da:ed:67:82:a3:72:61:a0:fc:77:7e:42:de:d4:1a: 81:0f:c4:df:c4:dd:b5:d9:d0:1f:13:d4:83:5e:f7:82:d6:1a: 23:69:9d:7c:55:34:36:d4:51:8e:63:98:d2:06:18:8a:65:15: 27:ff:d0:cf:a1:fc:36:04:ef:b9:06:91:83:20:ba:5e:ec:93: df:4c:9d:e1:72:30:80:db:ac:21:ba:94:74:54:4c:93:8d:d6: 5b:7e:e0:56:aa:38:34:f0:b6:0a:b8:6c:8a:0f:29:89:ce:23: b7:85:6a:4d:33:75:bb:fe:ad:d4:04:81:6d:b4:3c:37:5c:23: d8:ca:fe:11:64:1c:0b:04:17:1f:79:aa:12:ab:b3:6a:3a:f0: 29:25:d2:ea:39:77:79:21:d3:e1:19:38:3f:78:2c:ce:ac:03: 2e:25:74:4f:27:fc:2e:96:f5:f1:d1:02:6c:35:42:d2:d4:fa: ae:eb:37:d8:13:98:22:d9:fc:c7:64:7f:9c:9b:4f:a2:60:06: f1:0d:29:b2:b5:23:b8:b2:9b:a3:8e:2b:66:4f:13:d8:e0:3d: 8f:24:ef:b3:c9:7e:fb:b9:37:7c:9f:3c:c4:03:99:14:f7:da: 07:af:3f:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4+Bjm1RTzBwfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MjIxYmEyYzUtMmNlZC00OTdiLTljZDEtYjc0NGI2ZjJhMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQkkwgzwHTMmNiKd1vlfjV0Gn+61c9J9QE1Y hPFCcX+uezTRop7ujhpt00cQCV4bey2sv/BAcp1iMsm26mvw+rdNmZJ7J0ygfreX xebT9ZksJAJAYZptys5LqSKLHvghIkCvt7RmIxz/gi3GMHdYuui7FzXIzLbMkI8n +YPi4TWUsleW25cxN4DA+8EeBU7Q0nEU7ujpOHVUEr3slhN24YW/4zg2zTf3/SMy soRXPnxtz/CnWvmTZDVUxkQINim8iQfMjX3xyZGms4Mozi0N9OuhA81JWGmva/kI CL06dpvRW/4/yHZ6rebVlw96N4Nm8TpKS4vlWk6vjEzm0O4QgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgNbLJCvAQ7iArOpBzlLLROA7knMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWExODk0ZDQtMjZlMS0z YmZkLTk0MTUtMGEzYTRhMWEyZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMb8Lbrnqu82hsNkykJwGOmh4fTE9rtZ4KjcmGg/Hd+Qt7UGoEPxN/E 3bXZ0B8T1INe94LWGiNpnXxVNDbUUY5jmNIGGIplFSf/0M+h/DYE77kGkYMgul7s k99MneFyMIDbrCG6lHRUTJON1lt+4FaqODTwtgq4bIoPKYnOI7eFak0zdbv+rdQE gW20PDdcI9jK/hFkHAsEFx95qhKrs2o68Ckl0uo5d3kh0+EZOD94LM6sAy4ldE8n /C6W9fHRAmw1QtLU+q7rN9gTmCLZ/Mdkf5ybT6JgBvENKbK1I7iym6OOK2ZPE9jg PY8k77PJfvu5N3yfPMQDmRT32gevP/4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:44 2026 by rpki-client