$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa File: 2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa (raw, json) Hash identifier: dSFQwBIDcJhf5g+wlmMFLueT8b7SAB3vxPm3X5BRdzM= Subject key identifier: 3F:0C:49:D4:A7:B4:FB:01:0A:8D:81:F8:D2:FE:58:C3:AD:B0:54:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6C8F32D5F536F210E400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.140.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6c:8f:32:d5:f5:36:f2:10:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6ca9594d-41e2-4065-a41e-a1aa25c47be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:6c:d0:7c:ab:39:17:00:a0:9b:23:2b:18: 8a:e5:f5:e9:be:39:41:a2:e6:5e:d2:1d:ff:24:26: 81:38:56:6d:8b:78:0e:ed:ec:4e:ba:4d:b4:80:e1: 2b:46:fd:7c:af:39:4a:8d:0c:8a:85:5c:dd:d8:6b: 02:a9:a1:bc:bd:3c:1d:8f:29:02:1d:32:e1:b3:6d: 3b:03:d1:f9:4b:1f:cf:97:a7:6b:c3:94:f1:89:96: 91:72:f4:7f:d1:d0:ca:3a:c6:0e:2b:98:9f:24:9c: 11:15:ca:2d:8e:aa:59:70:1a:54:00:ca:ed:89:b6: 09:12:be:74:29:e8:5c:36:3c:c7:ac:c2:41:2c:a8: 4f:2f:02:97:e6:36:0b:5e:da:8e:58:52:6d:c4:e9: ef:be:fd:89:db:5d:22:a7:4d:57:49:2a:93:90:e1: 5f:ef:6b:cc:b3:fc:b1:a4:0b:12:00:b0:13:c3:d6: 5a:99:65:f7:1c:49:d1:bd:b5:b4:7b:1d:ab:fe:6e: a0:41:43:f6:e6:7a:e7:22:ba:ae:cd:64:a1:71:97: 6f:c0:30:bf:2c:08:4f:87:d7:bb:5c:ad:8b:38:e9: e3:b1:36:6d:c8:ce:0d:64:f0:d3:0b:d6:dd:20:41: 70:95:ca:37:cf:db:17:99:8a:18:b0:e8:5a:3c:33: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0C:49:D4:A7:B4:FB:01:0A:8D:81:F8:D2:FE:58:C3:AD:B0:54:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2999dd29-f2ea-33da-9d78-3f4ba1bc9180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.140.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c8:a0:82:f2:a8:1c:16:b5:37:a8:aa:29:83:29:2b:64:7a: d3:a0:73:fa:93:d1:8e:8e:9e:3d:5a:7a:2b:7f:01:0c:97:9b: db:43:de:18:c0:d6:3e:5f:bf:03:15:ea:97:b5:37:f3:69:29: a2:2f:6b:7c:f6:57:34:f9:42:6a:f2:1d:2d:24:ff:2f:a8:7d: bd:11:5d:15:6e:ed:0a:ba:7e:5a:6c:46:f6:ec:66:fc:bb:d5: 5e:f1:0d:20:17:96:3c:71:f1:fe:13:22:55:ba:cc:4c:32:f3: 91:95:ad:46:10:0b:bf:e8:4d:da:3f:e0:a4:4f:99:73:5a:1a: 9e:f4:07:a9:a5:0b:86:18:03:68:3c:fc:2e:00:f8:e6:d0:0e: a4:f0:ae:83:6c:61:9c:9b:d6:86:89:10:c1:1e:bd:ae:b5:ff: 55:e3:68:1c:3c:41:ec:f3:b8:e4:3a:8e:d4:e4:d0:6b:96:af: 7f:ad:f8:95:1e:ea:a6:25:11:e1:52:2b:19:30:0b:e4:7f:bd: 57:50:65:99:93:ae:85:ce:86:9e:04:17:4e:0a:fc:95:af:9d: d8:8c:ce:19:91:f8:29:5e:19:a2:73:2b:e9:17:27:2d:42:26: 62:a4:4e:e5:55:e5:71:cd:73:34:7e:ac:2e:f5:82:b6:3c:7f: 27:d9:d3:92 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCmyPMtX1NvIQ5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmNhOTU5NGQtNDFlMi00MDY1LWE0MWUtYTFhYTI1YzQ3YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpZs0HyrORcAoJsjKxiK5fXpvjlBouZe0h3/ JCaBOFZti3gO7exOuk20gOErRv18rzlKjQyKhVzd2GsCqaG8vTwdjykCHTLhs207 A9H5Sx/Pl6drw5TxiZaRcvR/0dDKOsYOK5ifJJwRFcotjqpZcBpUAMrtibYJEr50 KehcNjzHrMJBLKhPLwKX5jYLXtqOWFJtxOnvvv2J210ip01XSSqTkOFf72vMs/yx pAsSALATw9ZamWX3HEnRvbW0ex2r/m6gQUP25nrnIrquzWShcZdvwDC/LAhPh9e7 XK2LOOnjsTZtyM4NZPDTC9bdIEFwlco3z9sXmYoYsOhaPDNjMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD8MSdSntPsBCo2B+NL+WMOtsFQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjk5OWRkMjktZjJlYS0z M2RhLTlkNzgtM2Y0YmExYmM5MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYowwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAF8iggvKoHBa1N6iqKYMpK2R606Bz+pPRjo6ePVp6K38BDJeb20PeGMDW Pl+/AxXql7U382kpoi9rfPZXNPlCavIdLST/L6h9vRFdFW7tCrp+WmxG9uxm/LvV XvENIBeWPHHx/hMiVbrMTDLzkZWtRhALv+hN2j/gpE+Zc1oanvQHqaULhhgDaDz8 LgD45tAOpPCug2xhnJvWhokQwR69rrX/VeNoHDxB7PO45DqO1OTQa5avf634lR7q piUR4VIrGTAL5H+9V1BlmZOuhc6GngQXTgr8la+d2IzOGZH4KV4ZonMr6RcnLUIm YqRO5VXlcc1zNH6sLvWCtjx/J9nTkg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:51 2026 by rpki-client