$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa File: 2d12af04-2386-32b8-bb48-4b8966b6c222.roa (raw, json) Hash identifier: geKOQ02LLHreoHgysPI7o420mBkhMuhxwKwkYHU+JK8= Subject key identifier: ED:C5:B3:B1:41:01:B8:97:13:77:B0:55:5F:98:74:25:6C:5B:DD:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6BEE2F9BB93150036080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.18.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6b:ee:2f:9b:b9:31:50:03:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=422f3fd6-7048-4295-baec-1876789bca06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:2c:ea:ae:a6:85:4c:f9:d1:bd:01:47:38: dc:b8:30:4e:a9:ae:47:47:13:72:57:cb:11:47:4e: c7:4c:a8:24:62:40:7a:e9:98:e3:54:f1:41:10:07: ae:a2:54:03:62:3d:cf:a7:f4:d0:57:9f:97:66:62: c9:d9:d8:e0:70:11:da:6a:03:d7:bf:e6:b0:c0:54: 97:5c:a6:82:00:54:52:72:60:58:38:87:e8:aa:48: 71:a2:a2:7c:38:c1:94:31:76:68:88:f7:b4:33:09: 63:80:8e:02:a7:d0:92:5a:23:1b:97:20:0c:bc:8c: 7f:51:bc:08:f9:16:ec:48:eb:9e:6c:bd:0d:93:4d: 31:ea:87:09:bc:9b:a6:92:1a:08:a0:03:7d:b2:8c: 8f:bb:f6:f9:41:b0:d1:a3:86:95:11:38:60:01:20: e6:f1:10:b4:9f:8f:7b:d4:58:3b:c6:de:2c:df:1c: 72:18:6b:6e:b2:b5:80:93:07:0d:ab:3f:72:95:ea: 1f:22:8a:99:48:96:a6:1b:9d:36:3b:38:4e:42:dc: f5:4c:d8:b3:e8:f9:70:65:8f:73:c2:06:98:3b:20: 2d:b7:a3:b0:73:15:e6:ee:58:93:82:40:c9:f0:0f: ac:2c:64:cd:65:63:26:93:5b:c1:4b:3f:06:29:a4: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:B3:B1:41:01:B8:97:13:77:B0:55:5F:98:74:25:6C:5B:DD:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:20:97:fb:7f:1a:e8:17:57:46:a5:de:cf:02:d8:ae:e9:cc: 03:82:4b:b8:80:48:b7:d7:d5:1c:e4:b4:d5:8a:ec:bd:e9:70: 04:8f:68:dd:a8:e3:dc:57:ea:08:22:f8:ac:7a:c6:bf:3d:c8: a9:35:8c:eb:9f:cd:8d:68:55:a3:58:2d:f6:d5:79:91:a0:5f: 14:a1:8f:ab:a2:f9:cb:91:cc:70:d9:88:d1:b4:d3:42:26:b7: f3:27:96:63:fa:d1:9f:15:70:7d:e8:64:ab:55:49:e8:99:fa: 07:bf:e1:4f:d9:6f:1b:1a:3e:67:4c:5c:94:34:c2:a9:6d:10: 69:d7:cb:e2:da:b5:30:d3:26:54:51:4e:9f:d1:68:f9:e8:c3: 2d:7e:c7:4e:8b:89:5b:2b:3d:2b:0c:87:b0:57:67:0a:c8:09: 31:ee:ac:b2:c4:2f:e2:cd:0e:9b:97:47:a6:19:b3:1e:71:07: 18:04:18:2c:4a:21:38:2c:8e:a6:24:36:fa:48:b4:bf:8a:e3: 2d:a1:de:f3:91:62:aa:f0:79:d5:07:ff:bf:62:8a:fe:68:50: 13:41:b4:59:d4:e1:73:95:2c:69:57:fa:54:31:88:24:56:f9: 99:34:78:67:7e:a4:5e:f8:3c:55:fd:fb:ba:65:62:88:bb:a7: af:6c:cb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmvuL5u5MVADYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDIyZjNmZDYtNzA0OC00Mjk1LWJhZWMtMTg3Njc4OWJjYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQgs6q6mhUz50b0BRzjcuDBOqa5HRxNyV8sR R07HTKgkYkB66ZjjVPFBEAeuolQDYj3Pp/TQV5+XZmLJ2djgcBHaagPXv+awwFSX XKaCAFRScmBYOIfoqkhxoqJ8OMGUMXZoiPe0MwljgI4Cp9CSWiMblyAMvIx/UbwI +RbsSOuebL0Nk00x6ocJvJumkhoIoAN9soyPu/b5QbDRo4aVEThgASDm8RC0n497 1Fg7xt4s3xxyGGtusrWAkwcNqz9yleofIoqZSJamG502OzhOQtz1TNiz6PlwZY9z wgaYOyAtt6OwcxXm7liTgkDJ8A+sLGTNZWMmk1vBSz8GKaQltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3Fs7FBAbiXE3ewVV+YdCVsW92fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQxMmFmMDQtMjM4Ni0z MmI4LWJiNDgtNGI4OTY2YjZjMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcgl/t/GugXV0al3s8C2K7pzAOCS7iASLfX1RzktNWK7L3pcASPaN2o 49xX6ggi+Kx6xr89yKk1jOufzY1oVaNYLfbVeZGgXxShj6ui+cuRzHDZiNG000Im t/MnlmP60Z8VcH3oZKtVSeiZ+ge/4U/ZbxsaPmdMXJQ0wqltEGnXy+LatTDTJlRR Tp/RaPnowy1+x06LiVsrPSsMh7BXZwrICTHurLLEL+LNDpuXR6YZsx5xBxgEGCxK ITgsjqYkNvpItL+K4y2h3vORYqrwedUH/79iiv5oUBNBtFnU4XOVLGlX+lQxiCRW +Zk0eGd+pF74PFX9+7plYoi7p69sywc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:17 2026 by rpki-client