$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa File: 2a428851-c296-3ffd-83aa-596e36f896f0.roa (raw, json) Hash identifier: pjbVt05gOjrsEdiu8ocdaUYkJBPaZMx5ukyZWhJwO5g= Subject key identifier: E1:73:BC:CA:75:95:BD:5E:E3:E6:B1:D6:38:9F:5A:99:B7:BF:A2:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6BAB863BAB4DBC5FC000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6b:ab:86:3b:ab:4d:bc:5f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f58b66a1-bfae-40e5-8cc5-ca338581810f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:38:79:9d:5f:99:e6:6b:39:28:9c:38:5e: 37:2a:80:85:a6:f8:c2:01:53:c6:2b:0a:74:b8:d8: e4:cd:22:5b:5f:5d:6f:16:de:3d:55:12:f9:cc:19: 96:56:f2:d0:62:95:e9:1b:a5:90:a4:d3:80:8e:83: a4:d6:1a:d0:60:3d:44:1a:06:a8:e4:eb:1d:fa:45: 47:53:7c:83:89:a9:a5:d2:53:bc:9d:dd:ba:8d:8d: 72:7a:14:1b:6b:bf:3d:b7:e5:fc:db:5b:69:f9:92: 02:3f:ad:5d:b8:54:c1:1e:2c:16:f1:d1:9f:fb:99: 8d:f2:96:1d:84:ee:7f:ce:d0:f6:85:03:a3:0b:81: a3:95:c3:fa:b2:d2:43:57:fe:84:a0:e4:55:98:3c: 7c:5a:57:2c:cc:92:66:c8:8d:bc:54:4c:a5:eb:2c: cb:d5:0a:ef:92:31:17:55:62:c6:47:d0:da:fa:16: 9f:83:7c:71:e7:b6:2e:a9:57:29:d4:78:18:ac:24: 0b:d0:9f:20:81:d5:b8:04:bd:34:a5:98:c1:4e:5b: d8:b1:4b:a7:5f:9f:9c:38:b7:e0:0e:99:6a:56:9c: 92:5d:e0:3b:7c:5a:ef:02:d9:bc:c5:a5:05:cd:8e: 64:50:bb:5c:aa:e5:78:3b:fa:05:70:de:60:be:3e: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:73:BC:CA:75:95:BD:5E:E3:E6:B1:D6:38:9F:5A:99:B7:BF:A2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:df:55:eb:2c:0a:0b:3d:1f:bc:6c:d4:dc:f9:96:82:cc:bb: 7c:8a:fc:44:f9:e9:92:be:67:95:31:37:52:2b:cb:cb:c8:a4: fe:af:53:36:05:43:43:83:d3:e5:75:04:9b:36:ea:c7:b6:22: 1a:54:80:32:92:7e:d2:da:b0:17:54:ba:e5:a7:4c:f9:bc:63: 52:cf:7f:c3:47:41:d0:5f:b6:20:fd:6b:4b:98:32:a6:30:56: 9d:3e:fc:1c:db:ce:92:e0:d6:35:cd:80:45:e0:2b:d7:35:66: cc:48:4b:d0:e3:ad:db:78:92:d4:d0:38:85:a6:15:dd:5c:65: c8:32:ca:e0:21:59:1b:87:61:ac:b3:d7:ab:52:19:c5:23:c9: a1:36:2d:1f:27:7f:e4:88:71:3b:6c:74:38:e4:0f:c7:a4:b7: d7:2d:55:22:1c:f8:38:d4:c4:65:c6:ec:dd:7e:51:db:b4:d2: 4d:18:07:55:2b:e5:ec:36:d9:77:ce:67:66:1c:8c:3b:bd:db: e4:02:86:23:cf:af:1e:3e:a6:9b:a0:07:6f:e4:af:ce:e0:c1: 92:6c:3c:ac:6d:69:57:f8:a6:51:cf:83:02:2b:8f:b7:6f:19: 27:a2:e8:8a:3b:46:6f:a9:34:ce:b7:1b:85:59:ca:af:01:15: 5c:dd:45:8c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0wCmurhjurTbxfwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjU4YjY2YTEtYmZhZS00MGU1LThjYzUtY2EzMzg1ODE4MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP44eZ1fmeZrOSicOF43KoCFpvjCAVPGKwp0 uNjkzSJbX11vFt49VRL5zBmWVvLQYpXpG6WQpNOAjoOk1hrQYD1EGgao5Osd+kVH U3yDiaml0lO8nd26jY1yehQba789t+X821tp+ZICP61duFTBHiwW8dGf+5mN8pYd hO5/ztD2hQOjC4GjlcP6stJDV/6EoORVmDx8WlcszJJmyI28VEyl6yzL1QrvkjEX VWLGR9Da+hafg3xx57YuqVcp1HgYrCQL0J8ggdW4BL00pZjBTlvYsUunX5+cOLfg DplqVpySXeA7fFrvAtm8xaUFzY5kULtcquV4O/oFcN5gvj6iqQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOFzvMp1lb1e4+ax1jifWpm3v6KLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0Mjg4NTEtYzI5Ni0z ZmZkLTgzYWEtNTk2ZTM2Zjg5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAB99V6ywKCz0fvGzU3PmWgsy7fIr8RPnpkr5nlTE3UivLy8ik/q9TNgVD Q4PT5XUEmzbqx7YiGlSAMpJ+0tqwF1S65adM+bxjUs9/w0dB0F+2IP1rS5gypjBW nT78HNvOkuDWNc2AReAr1zVmzEhL0OOt23iS1NA4haYV3VxlyDLK4CFZG4dhrLPX q1IZxSPJoTYtHyd/5IhxO2x0OOQPx6S31y1VIhz4ONTEZcbs3X5R27TSTRgHVSvl 7DbZd85nZhyMO73b5AKGI8+vHj6mm6AHb+SvzuDBkmw8rG1pV/imUc+DAiuPt28Z J6LoijtGb6k0zrcbhVnKrwEVXN1FjA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:25 2026 by rpki-client