$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24f62640-1c12-3294-a31d-e907d7b53f05.roa File: 24f62640-1c12-3294-a31d-e907d7b53f05.roa (raw, json) Hash identifier: WRr/zSdFpC2Y4jzbDfS/PDgzlEggO83jy1uM6My9ov0= Subject key identifier: 02:E8:40:65:4B:CD:76:15:D6:0A:AD:03:C2:02:3E:9A:31:F8:2D:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8DFCDB4BC2F395E34F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24f62640-1c12-3294-a31d-e907d7b53f05.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.21.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8d:fc:db:4b:c2:f3:95:e3:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=f0af042b-96aa-46e7-8e1d-61962551beb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:50:df:cd:9b:68:be:e2:5b:d2:99:17:f5: fc:5f:f8:5f:01:15:7f:57:5b:6c:f3:77:46:ad:14: a4:b3:c0:82:6b:a5:6a:7b:84:d1:40:2c:23:d2:43: 31:e3:96:47:d2:3a:de:84:3f:30:4b:8d:6c:8d:b8: 21:91:a4:a2:be:f9:fe:83:83:e4:6f:4a:07:d1:dd: 43:5f:c9:82:17:48:b0:1c:df:6c:6f:3b:d1:7d:3b: b8:84:f1:89:89:fb:c4:f2:f0:7d:b0:91:d9:8a:f1: f0:d4:89:f5:48:b4:40:df:cd:9a:4d:d2:b7:14:0f: c4:d1:c9:47:6d:23:1c:08:7b:95:ac:0b:2d:35:1c: c0:ca:b0:d7:14:16:3b:32:a6:ba:ee:e3:53:a6:f3: 86:8e:6f:04:d0:41:b0:dd:5f:43:aa:fe:ee:0c:c2: d4:3a:35:c3:75:18:c7:ef:77:44:05:bb:6c:bd:63: 73:d7:f8:e7:c2:2f:8c:45:14:ae:39:6b:ca:b3:36: ec:e6:f3:8d:27:06:53:6b:e3:02:84:f0:0e:ce:06: 11:1b:16:55:94:ca:65:8b:01:9a:04:d1:ae:4d:34: 9f:0b:34:f4:1b:f6:7c:90:67:d8:52:d7:25:8d:87: 24:a4:4a:5c:1b:ef:55:52:cd:a5:9c:51:ad:f8:17: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:40:65:4B:CD:76:15:D6:0A:AD:03:C2:02:3E:9A:31:F8:2D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24f62640-1c12-3294-a31d-e907d7b53f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2f:a4:2d:bf:b2:58:4c:07:94:8f:d0:76:fa:cc:8d:13:59: 6d:11:48:a2:8b:7d:13:78:0d:ea:d4:e6:72:58:fb:ce:3d:c1: c2:d3:7f:06:43:cc:ed:d9:d3:df:76:10:c5:83:7d:f3:71:61: db:f7:75:8b:9b:7f:fe:73:5b:8a:a2:7b:fa:fe:e0:d3:66:9d: 2b:94:be:69:7b:83:28:9d:2a:98:da:a7:56:24:51:df:03:8c: 1e:e1:71:70:87:2c:9e:7f:4c:54:45:2e:c9:5a:f0:88:b3:a8: f6:12:d6:bd:52:a9:b0:92:78:ed:72:7e:7c:99:3b:f1:cd:99: de:0f:4a:a2:fb:2f:14:6e:ef:cd:2e:8c:03:b6:44:92:3b:47: 70:ec:c3:3b:0c:43:fb:42:c8:7e:04:9e:d8:ce:d6:20:23:f0: 69:f2:0c:d1:0e:55:2e:c0:4b:81:94:b0:89:b1:9c:fb:46:da: 25:17:b5:78:56:78:07:c7:bf:b3:19:3a:19:86:e7:38:19:e1: 6a:3d:be:1c:9f:da:49:5c:2d:51:bd:d3:8c:42:ba:8a:18:59: 04:bb:72:2b:c3:42:98:aa:bc:89:92:72:c0:f9:28:ec:fe:d4: 4b:e5:8a:6e:a0:5a:9a:23:78:9e:c6:ef:01:32:d9:79:d5:fd: bb:cb:20:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP43820vC85XjT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjBhZjA0MmItOTZhYS00NmU3LThlMWQtNjE5NjI1NTFiZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY9Q382baL7iW9KZF/X8X/hfARV/V1ts83dG rRSks8CCa6Vqe4TRQCwj0kMx45ZH0jrehD8wS41sjbghkaSivvn+g4Pkb0oH0d1D X8mCF0iwHN9sbzvRfTu4hPGJifvE8vB9sJHZivHw1In1SLRA382aTdK3FA/E0clH bSMcCHuVrAstNRzAyrDXFBY7Mqa67uNTpvOGjm8E0EGw3V9Dqv7uDMLUOjXDdRjH 73dEBbtsvWNz1/jnwi+MRRSuOWvKszbs5vONJwZTa+MChPAOzgYRGxZVlMpliwGa BNGuTTSfCzT0G/Z8kGfYUtcljYckpEpcG+9VUs2lnFGt+BfBxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALoQGVLzXYV1gqtA8ICPpox+C0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjRmNjI2NDAtMWMxMi0z Mjk0LWEzMWQtZTkwN2Q3YjUzZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0vpC2/slhMB5SP0Hb6zI0TWW0RSKKLfRN4DerU5nJY+849wcLTfwZD zO3Z0992EMWDffNxYdv3dYubf/5zW4qie/r+4NNmnSuUvml7gyidKpjap1YkUd8D jB7hcXCHLJ5/TFRFLsla8IizqPYS1r1SqbCSeO1yfnyZO/HNmd4PSqL7LxRu780u jAO2RJI7R3DswzsMQ/tCyH4EntjO1iAj8GnyDNEOVS7AS4GUsImxnPtG2iUXtXhW eAfHv7MZOhmG5zgZ4Wo9vhyf2klcLVG904xCuooYWQS7civDQpiqvImScsD5KOz+ 1Evlim6gWpojeJ7G7wEy2XnV/bvLINw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:37 2026 by rpki-client