$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300ad685-08b7-3198-92e5-433781ca03bb.roa File: 300ad685-08b7-3198-92e5-433781ca03bb.roa (raw, json) Hash identifier: U1W/WjuUWbaA/2ESUn5zzKu6oUn7l89H5skkpNK3VTQ= Subject key identifier: 16:29:0C:14:1A:0D:D8:5F:2C:44:5A:E7:BE:BC:AD:DA:60:81:46:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D0A77C2039FE0D5BE943AD800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300ad685-08b7-3198-92e5-433781ca03bb.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 98.18.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:c2:03:9f:e0:d5:be:94:3a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=1aaa29d0-624e-460a-b6ce-a9068c712587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:7b:c7:2f:31:1f:6a:4a:c4:75:15:35:f7: d2:66:88:c6:f5:59:cd:11:88:e0:8e:a3:55:63:16: bf:1e:f3:3e:ff:2d:08:9f:c0:e5:ca:62:d7:77:19: 72:43:53:76:01:e4:f4:1d:1d:36:d2:ec:14:55:af: c9:d9:3c:31:17:b7:e4:55:e5:b5:68:57:b9:42:3f: 67:b1:10:72:05:4c:fb:7a:0b:33:85:d9:f0:62:9a: 4a:43:cd:b1:db:88:0e:b7:3b:b1:60:11:dc:cb:27: 4a:7f:d2:09:a6:97:88:ff:46:06:92:3f:71:59:ff: 00:ff:4c:09:b3:c6:13:a7:7e:cd:19:98:65:2f:da: 61:81:0c:91:80:44:6a:58:65:6e:70:63:d3:e6:70: 73:7c:b4:16:0e:b7:11:26:2c:b1:04:47:f9:82:76: 6d:dd:00:a8:a5:2d:78:c5:cb:de:b3:cf:65:e9:e1: fe:92:fa:39:02:91:62:35:17:20:27:6d:18:83:06: da:fd:88:8f:84:bc:98:86:62:1c:01:8c:02:70:9e: 43:f5:66:2b:18:5c:47:db:91:68:94:15:60:d8:49: c8:cf:5e:e1:3b:3f:51:35:c6:a8:ae:ba:e9:22:56: 5a:a7:f6:70:f2:91:f7:38:92:74:74:ba:22:8c:74: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:29:0C:14:1A:0D:D8:5F:2C:44:5A:E7:BE:BC:AD:DA:60:81:46:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300ad685-08b7-3198-92e5-433781ca03bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:71:92:ef:7b:a7:15:3e:4b:da:45:ab:f6:0d:4f:b0:3e:17: b6:44:4b:b4:33:b9:35:ef:79:2e:ea:a3:54:71:42:94:45:fb: 47:cc:9c:a3:c0:e5:d3:0a:35:35:26:af:a9:21:8c:22:c6:31: 32:ec:1b:e3:ef:7b:45:67:c5:b5:d9:b8:8d:98:b6:fc:fd:f6: 98:8b:12:9e:68:7b:6f:60:20:64:05:93:83:d9:ed:ab:d1:7f: 8b:30:c1:e4:15:ec:5d:c1:8d:3a:78:4e:56:0a:54:cf:f9:5b: 0d:d3:17:51:50:76:f3:c1:df:0a:7d:44:db:d7:07:51:d3:9b: 9f:94:b3:f5:3a:ba:df:73:23:d7:93:eb:e8:95:1b:3c:f6:f4: 5c:98:19:b1:f6:f6:d9:1f:a0:78:8c:ae:b6:67:d0:a3:f2:04: 38:64:ac:81:4b:53:22:59:de:5f:6a:77:4a:3a:73:b9:f3:7e: 4d:d5:6f:dd:eb:7b:bb:4b:18:d5:6d:f4:cf:50:7c:62:98:93: 9d:7d:2e:8b:1e:92:d0:4a:d3:5c:41:2a:ff:d0:63:80:61:43: e8:c8:f6:0a:7e:c6:25:ed:8a:f1:87:1c:b5:3e:06:3b:b4:bc: 5d:8e:b9:93:e2:eb:ae:60:97:3b:44:55:2f:90:17:e5:01:1b: 50:ed:75:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd8IDn+DVvpQ62AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MWFhYTI5ZDAtNjI0ZS00NjBhLWI2Y2UtYTkwNjhjNzEyNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1p7xy8xH2pKxHUVNffSZojG9VnNEYjgjqNV Yxa/HvM+/y0In8DlymLXdxlyQ1N2AeT0HR020uwUVa/J2TwxF7fkVeW1aFe5Qj9n sRByBUz7egszhdnwYppKQ82x24gOtzuxYBHcyydKf9IJppeI/0YGkj9xWf8A/0wJ s8YTp37NGZhlL9phgQyRgERqWGVucGPT5nBzfLQWDrcRJiyxBEf5gnZt3QCopS14 xcves89l6eH+kvo5ApFiNRcgJ20Ygwba/YiPhLyYhmIcAYwCcJ5D9WYrGFxH25Fo lBVg2EnIz17hOz9RNcaorrrpIlZap/Zw8pH3OJJ0dLoijHTlcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYpDBQaDdhfLERa5768rdpggUawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzAwYWQ2ODUtMDhiNy0z MTk4LTkyZTUtNDMzNzgxY2EwM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVxku97pxU+S9pFq/YNT7A+F7ZES7QzuTXveS7qo1RxQpRF+0fMnKPA 5dMKNTUmr6khjCLGMTLsG+Pve0VnxbXZuI2Ytvz99piLEp5oe29gIGQFk4PZ7avR f4swweQV7F3BjTp4TlYKVM/5Ww3TF1FQdvPB3wp9RNvXB1HTm5+Us/U6ut9zI9eT 6+iVGzz29FyYGbH29tkfoHiMrrZn0KPyBDhkrIFLUyJZ3l9qd0o6c7nzfk3Vb93r e7tLGNVt9M9QfGKYk519LosektBK01xBKv/QY4BhQ+jI9gp+xiXtivGHHLU+Bju0 vF2OuZPi665glztEVS+QF+UBG1DtdW0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:33 2026 by rpki-client