$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json) Hash identifier: Q1Aw/MO+DFh7+Wme3yVF2J9OqcPqc+E2/9ziXPRk/lM= Subject key identifier: A2:1C:B2:89:4C:7B:1F:B9:D4:FD:25:CF:49:A8:15:9E:D5:EF:3B:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8FA77A1992E058B66760 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.20.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8f:a7:7a:19:92:e0:58:b6:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=88d9bee6-5084-4987-9146-73c25c855514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:3b:64:3c:9c:7d:db:df:89:4a:d7:61:26: ad:63:f0:13:95:92:47:74:d3:d5:1c:43:49:f3:85: 15:4c:6c:1d:f1:68:d2:6a:b5:20:f5:e5:18:79:66: fb:cb:1b:55:74:93:24:4e:57:0f:76:c0:4a:c7:90: 1f:56:b4:31:cf:eb:75:0e:a8:19:1e:cf:5a:2b:65: 58:25:8e:56:eb:06:a6:62:3d:d2:7c:a3:c1:33:0a: 33:fc:41:46:f2:7d:65:40:35:61:3b:3f:eb:89:93: 87:fc:02:48:39:95:1c:3b:ba:78:1a:60:fe:3c:0c: bb:5d:8e:34:ec:91:ea:fe:14:82:7b:f5:1a:23:60: 70:68:a2:c3:4b:28:73:90:72:ab:4f:ee:d9:a0:32: 6c:01:e4:dc:94:82:b1:53:ed:bf:94:a6:e3:f1:70: 53:28:28:48:b5:25:9c:3f:96:87:cf:ee:6c:82:12: 77:e7:a1:24:ee:c8:12:be:6c:1c:37:bf:a9:9c:26: 71:69:96:e8:12:fb:cd:ed:5b:1c:b6:31:f5:49:d7: 7a:d0:c8:66:57:3e:04:e1:c0:65:d2:1b:81:70:8a: e8:22:e5:be:ba:79:92:c7:6e:d5:b2:51:dc:ea:64: 80:80:e2:a2:1c:5c:77:32:ab:21:58:dd:7c:82:5e: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1C:B2:89:4C:7B:1F:B9:D4:FD:25:CF:49:A8:15:9E:D5:EF:3B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9c:cc:91:4d:74:a5:8c:42:9c:50:e8:1b:74:87:c0:ee:ca: 5d:13:10:78:6a:a8:fb:78:e4:d9:94:9b:f1:53:23:6b:6d:ee: 89:7a:cd:39:4c:33:41:d5:be:9b:ff:cf:1c:e1:ae:b8:dc:65: c0:9d:e5:6f:cd:36:c0:a0:70:fd:71:74:91:53:7a:fb:aa:a0: 69:2e:58:ff:04:aa:2b:94:c6:80:dc:04:f6:d5:dc:bf:6e:84: e2:41:c7:1a:df:10:94:9c:f5:47:9b:1b:77:67:60:0e:bc:f5: b1:2d:dd:66:9d:37:44:d2:d0:6d:05:9f:20:c1:cf:b3:31:4d: eb:88:a8:7b:06:d2:10:81:a4:ec:ff:fa:03:29:55:35:c5:3d: 1c:f9:43:fe:31:c7:72:20:ed:55:ac:69:c7:08:d4:ca:52:8a: b7:8c:05:45:d6:45:6b:19:1e:25:60:95:60:3b:a1:a2:31:14: ad:b9:fa:20:24:8c:d2:00:22:a2:8e:64:6a:8f:56:a1:82:8e: 63:0a:7d:ef:8f:d4:a2:d5:1b:04:e9:3f:ec:6b:9b:e2:a8:16: 9d:16:7d:67:7e:58:c6:9d:c6:5d:a6:fe:ef:4f:aa:1c:aa:6e: 7c:5f:77:3f:2c:64:c7:d4:31:f1:4f:7d:98:c0:a1:9b:40:6e: ee:de:d4:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4+nehmS4Fi2Z2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ODhkOWJlZTYtNTA4NC00OTg3LTkxNDYtNzNjMjVjODU1NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN87ZDycfdvfiUrXYSatY/ATlZJHdNPVHENJ 84UVTGwd8WjSarUg9eUYeWb7yxtVdJMkTlcPdsBKx5AfVrQxz+t1DqgZHs9aK2VY JY5W6wamYj3SfKPBMwoz/EFG8n1lQDVhOz/riZOH/AJIOZUcO7p4GmD+PAy7XY40 7JHq/hSCe/UaI2BwaKLDSyhzkHKrT+7ZoDJsAeTclIKxU+2/lKbj8XBTKChItSWc P5aHz+5sghJ356Ek7sgSvmwcN7+pnCZxaZboEvvN7VsctjH1Sdd60MhmVz4E4cBl 0huBcIroIuW+unmSx27VslHc6mSAgOKiHFx3MqshWN18gl7bKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIcsolMex+51P0lz0moFZ7V7zsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE5NWFkMzMtYzNiMS0z NjE4LTg4NGQtMTc3MjUzMThhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiczJFNdKWMQpxQ6Bt0h8Duyl0TEHhqqPt45NmUm/FTI2tt7ol6zTlM M0HVvpv/zxzhrrjcZcCd5W/NNsCgcP1xdJFTevuqoGkuWP8EqiuUxoDcBPbV3L9u hOJBxxrfEJSc9UebG3dnYA689bEt3WadN0TS0G0FnyDBz7MxTeuIqHsG0hCBpOz/ +gMpVTXFPRz5Q/4xx3Ig7VWsaccI1MpSireMBUXWRWsZHiVglWA7oaIxFK25+iAk jNIAIqKOZGqPVqGCjmMKfe+P1KLVGwTpP+xrm+KoFp0WfWd+WMadxl2m/u9Pqhyq bnxfdz8sZMfUMfFPfZjAoZtAbu7e1AE= -----END CERTIFICATE-----Generated at Thu Mar 26 23:45:46 2026 by rpki-client