$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa File: 27ecab0b-5c88-329e-97d6-822207593d90.roa (raw, json) Hash identifier: PvbDmdB+kI9y9n2CJXjnsCfC10JYkDI0Je+YbYIB9nk= Subject key identifier: 72:64:10:05:73:13:CB:49:41:24:E4:D4:26:66:AB:98:EA:21:BC:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F877D2B697AD6CF20DE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.18.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:87:7d:2b:69:7a:d6:cf:20:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=c971fcd2-ca3c-47e6-a354-eba7e174fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:12:a4:37:cb:14:91:02:55:43:53:04:db: bd:ed:17:dc:a0:fd:29:00:86:ee:d6:2b:86:d8:c9: 66:f6:0c:d2:ff:de:ce:3d:2a:86:a4:04:fa:2d:63: 92:fe:3d:34:cb:58:6d:9f:67:1d:3f:11:03:ee:c5: b9:b6:9d:c1:21:86:a5:6c:33:3d:f7:b3:dc:a5:39: a8:2b:74:79:e0:cc:8a:ea:a1:b9:57:4e:b3:30:5d: f0:0c:f3:20:9f:4b:f9:f6:ed:02:60:38:bf:35:20: 8a:7a:f4:4e:6a:bd:ca:34:e8:c2:ce:17:b9:dc:c4: 2c:cb:29:64:48:ce:3a:a1:d0:0a:1d:0c:ba:96:7b: be:9b:b6:af:15:36:11:af:00:bb:01:2d:18:7a:96: ac:ec:51:c2:10:32:c1:d0:73:c5:ce:aa:73:73:cc: 26:fe:b3:9a:97:0e:9b:ec:67:84:80:f5:0e:0c:85: cc:7e:ad:51:c3:9f:4a:45:da:3c:0a:cb:4c:b1:97: d4:3d:28:09:a7:b9:ef:76:b4:b2:27:8d:72:38:1d: 64:cf:83:83:0f:e6:0e:b5:06:95:6c:2f:6b:0c:25: 50:a0:f2:50:71:26:c8:f5:2c:6e:1e:8b:ed:a0:8d: 63:99:af:ca:48:82:3f:9d:80:94:54:66:df:cd:67: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:10:05:73:13:CB:49:41:24:E4:D4:26:66:AB:98:EA:21:BC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b3:d3:d2:9e:60:2b:32:c9:cb:eb:a9:97:3b:89:15:16:c7: a1:84:55:2d:0d:8d:e9:b9:80:27:89:e3:9b:fa:e8:7a:25:1b: 87:4f:ae:99:e1:1d:93:d0:b3:2b:79:49:9e:76:eb:2d:8e:42: 50:d2:c2:d0:fa:0c:ce:3e:45:09:61:87:84:c3:59:f7:7e:ad: 43:6e:aa:fd:57:a8:ed:22:13:c4:6d:93:14:30:76:11:ce:d6: b3:79:8f:09:1a:58:89:27:7b:d9:6d:ee:bf:d3:4d:b3:57:c4: b2:14:2a:06:44:e9:c4:23:ef:5d:59:8f:22:85:25:6e:ec:7b: a6:d6:8d:c4:31:55:5d:45:e6:00:d4:2a:e7:08:de:1e:44:13: 0d:42:d5:1f:59:92:4b:46:fd:b1:6c:c2:cd:02:bc:5c:ef:04: c0:56:62:16:7d:3d:12:aa:27:a3:58:1f:db:e3:9d:ba:87:80: 49:ff:41:11:26:7c:1d:dd:f8:32:29:c1:34:d7:e5:3e:d0:ee: 94:f3:12:e9:01:c0:a3:c0:9c:09:87:45:38:68:0c:8b:24:e1: 60:ef:f3:47:72:eb:f8:74:65:f7:9b:42:0e:79:6e:c5:53:be: bf:89:18:ca:ee:54:78:40:60:06:45:fa:70:7a:e3:a9:79:aa: 4d:4e:7c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4d9K2l61s8g3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk Yzk3MWZjZDItY2EzYy00N2U2LWEzNTQtZWJhN2UxNzRmZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJwSpDfLFJECVUNTBNu97RfcoP0pAIbu1iuG 2Mlm9gzS/97OPSqGpAT6LWOS/j00y1htn2cdPxED7sW5tp3BIYalbDM997PcpTmo K3R54MyK6qG5V06zMF3wDPMgn0v59u0CYDi/NSCKevROar3KNOjCzhe53MQsyylk SM46odAKHQy6lnu+m7avFTYRrwC7AS0Yepas7FHCEDLB0HPFzqpzc8wm/rOalw6b 7GeEgPUODIXMfq1Rw59KRdo8CstMsZfUPSgJp7nvdrSyJ41yOB1kz4ODD+YOtQaV bC9rDCVQoPJQcSbI9SxuHovtoI1jma/KSII/nYCUVGbfzWdvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJkEAVzE8tJQSTk1CZmq5jqIbymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdlY2FiMGItNWM4OC0z MjllLTk3ZDYtODIyMjA3NTkzZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOz09KeYCsyycvrqZc7iRUWx6GEVS0Njem5gCeJ45v66HolG4dPrpnh HZPQsyt5SZ526y2OQlDSwtD6DM4+RQlhh4TDWfd+rUNuqv1XqO0iE8RtkxQwdhHO 1rN5jwkaWIkne9lt7r/TTbNXxLIUKgZE6cQj711ZjyKFJW7se6bWjcQxVV1F5gDU KucI3h5EEw1C1R9ZkktG/bFsws0CvFzvBMBWYhZ9PRKqJ6NYH9vjnbqHgEn/QREm fB3d+DIpwTTX5T7Q7pTzEukBwKPAnAmHRThoDIsk4WDv80dy6/h0ZfebQg55bsVT vr+JGMruVHhAYAZF+nB646l5qk1OfCs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:45:03 2026 by rpki-client