$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa File: 1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa (raw, json) Hash identifier: GuxmxRjQYtCnG9QfPHY/g3u6X5/OEJCIjOPG1bXamvs= Subject key identifier: 6E:66:BA:FF:F4:D4:15:87:D9:A0:38:49:93:C0:F4:05:4B:5E:AD:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA35FCA2751C833B918C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 98.17.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:35:fc:a2:75:1c:83:3b:91:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=af1b055e-60d5-4d0e-8b3c-f096c52df50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:de:4d:e2:be:87:18:22:63:ec:4b:78:d6:0a: 7c:a9:1b:8f:c0:b8:cd:0a:61:fc:d7:a5:2f:dc:73: a3:6c:e0:e3:47:df:87:56:f3:00:0e:55:66:f8:b3: 68:e3:e2:07:8f:c4:c3:c9:12:a6:d6:64:f7:a5:6e: 0f:c2:a6:04:01:a5:5d:53:ba:a3:94:8b:a7:fc:0c: 39:e2:da:8f:13:f2:68:57:e5:55:21:66:2c:d9:b9: a8:d0:9d:6c:d5:e0:e9:27:f4:27:4c:c4:2f:da:84: ae:55:aa:d8:94:33:ee:fd:88:59:90:e8:0e:e7:88: 9b:91:1f:b6:24:f5:50:85:8c:24:af:03:18:8b:1b: f8:cf:76:21:85:5c:df:79:57:fe:ad:44:9f:2a:11: 55:cb:ef:98:3e:66:86:79:fd:b3:6b:a5:95:97:89: 53:89:f0:0f:00:e0:6a:1b:7e:20:8d:0e:49:b9:f6: bc:82:b9:c7:6a:d0:35:30:dc:6f:05:4a:d3:4b:cf: 6f:a2:e2:ae:5d:04:5d:d0:53:ca:15:a5:20:9b:47: 87:95:da:a5:4f:e7:ad:13:df:95:72:6c:7e:02:6b: 4a:42:03:6c:d5:77:f2:32:f6:e1:e7:1e:84:8b:9a: 13:05:ed:dd:ef:df:9a:14:20:83:de:c1:8e:c1:02: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:BA:FF:F4:D4:15:87:D9:A0:38:49:93:C0:F4:05:4B:5E:AD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:96:1c:ae:4b:3d:2e:b8:26:c9:5f:b2:bb:68:f4:3c:4a:ba: 90:37:2d:78:d3:30:22:ff:a7:74:dd:ff:52:dc:a8:0d:ce:44: 9e:80:6a:92:95:97:ba:66:8b:20:55:5f:14:48:a7:9d:ad:3b: 30:1b:8b:c1:62:72:c9:1c:67:a1:6a:3f:b7:44:d2:a8:58:89: e6:da:01:82:a4:7c:7f:18:ee:38:b4:8b:c6:cc:7d:10:cc:7f: 50:4f:77:c5:5e:0c:ae:13:83:75:e8:1a:17:70:e5:93:de:4d: e2:ac:32:80:cf:e8:54:e0:59:d6:29:6c:c5:8a:68:92:f1:ee: dd:ee:67:e0:c5:f8:2a:fb:0e:c8:15:08:c6:55:ab:1b:cf:1e: 24:92:71:7a:1f:31:9b:0b:b2:66:ab:91:d5:ca:1c:76:9c:06: 52:95:d7:f9:2a:c9:de:64:7f:75:6d:d2:4b:c7:0c:be:ce:e2: d7:61:af:f7:b4:8b:28:41:b3:5e:f5:fc:18:7e:76:6b:a2:ac: 6f:75:08:2f:e0:73:64:9b:1d:ca:4f:f2:68:be:9c:db:c5:be: 4d:a5:34:23:81:c8:4f:0b:e1:f8:b0:d8:cf:49:ff:a3:06:50: b4:19:ba:b9:9a:2f:d1:e5:ca:06:3a:0f:4b:1d:65:19:2c:6f: d8:b0:cf:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jX8onUcgzuRjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YWYxYjA1NWUtNjBkNS00ZDBlLThiM2MtZjA5NmM1MmRmNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN5N4r6HGCJj7Et41gp8qRuPwLjNCmH816Uv 3HOjbODjR9+HVvMADlVm+LNo4+IHj8TDyRKm1mT3pW4PwqYEAaVdU7qjlIun/Aw5 4tqPE/JoV+VVIWYs2bmo0J1s1eDpJ/QnTMQv2oSuVarYlDPu/YhZkOgO54ibkR+2 JPVQhYwkrwMYixv4z3YhhVzfeVf+rUSfKhFVy++YPmaGef2za6WVl4lTifAPAOBq G34gjQ5Jufa8grnHatA1MNxvBUrTS89vouKuXQRd0FPKFaUgm0eHldqlT+etE9+V cmx+AmtKQgNs1XfyMvbh5x6Ei5oTBe3d79+aFCCD3sGOwQLp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5muv/01BWH2aA4SZPA9AVLXq0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMzNjRhZTYtMzg5NS0z ZjkxLThlMDctYjMzZTJiYmQ3ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSWHK5LPS64Jslfsrto9DxKupA3LXjTMCL/p3Td/1LcqA3ORJ6AapKV l7pmiyBVXxRIp52tOzAbi8FicskcZ6FqP7dE0qhYiebaAYKkfH8Y7ji0i8bMfRDM f1BPd8VeDK4Tg3XoGhdw5ZPeTeKsMoDP6FTgWdYpbMWKaJLx7t3uZ+DF+Cr7DsgV CMZVqxvPHiSScXofMZsLsmarkdXKHHacBlKV1/kqyd5kf3Vt0kvHDL7O4tdhr/e0 iyhBs171/Bh+dmuirG91CC/gc2SbHcpP8mi+nNvFvk2lNCOByE8L4fiw2M9J/6MG ULQZurmaL9HlygY6D0sdZRksb9iwz5g= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:45 2026 by rpki-client