$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa File: 3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa (raw, json) Hash identifier: lHOl4uVE8i3bqh+BBZuDWtnIMuhvKK6SMubLeTiNcKM= Subject key identifier: 32:9B:E4:00:A2:6D:7F:32:62:E5:ED:63:A0:91:B5:13:E3:97:71:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6C7F782F91240B354B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.23.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6c:7f:78:2f:91:24:0b:35:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=762a9e24-b07d-4136-a99e-3bd914c06656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:54:57:cc:e6:5d:17:dd:af:02:f6:a9:46:0b: af:e1:2a:5f:52:40:90:82:89:91:01:7b:d8:5a:c4: 66:8e:12:5d:f1:bf:d1:51:58:13:81:69:e6:1e:a1: 37:71:60:5f:01:e6:64:72:8e:87:00:87:be:dd:06: 16:46:85:04:ba:e2:5d:21:57:cc:29:4b:e0:bc:ee: 56:b7:b0:fb:3c:ed:15:4d:35:2f:c4:35:a9:a7:c4: 9e:92:a8:a6:83:82:2e:d5:be:de:75:3c:52:d6:68: 61:58:48:0a:4f:6f:eb:dd:56:5a:84:01:a7:8b:51: 95:33:a9:a9:5f:91:bb:38:75:12:b5:d2:4b:60:0f: 0b:37:d9:8f:7c:19:b5:af:9b:ca:de:43:3f:29:28: d6:3a:60:a8:02:67:8c:43:5c:fb:a8:5f:7a:f4:b4: dc:1a:c8:cd:8d:44:14:c6:15:52:29:04:27:f9:5c: 70:4c:89:d5:15:b9:08:0d:20:84:64:e1:7f:ac:9e: e1:91:8d:f4:8c:cc:d7:2c:cf:21:cc:1d:54:7e:a4: 76:d6:17:07:dd:38:2f:7e:31:a8:40:ed:21:cc:12: 76:70:58:cc:30:2f:a2:f4:37:24:c0:36:9f:b1:40: 8e:01:7e:af:e4:b6:87:b4:69:e6:2b:f0:97:da:f5: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:E4:00:A2:6D:7F:32:62:E5:ED:63:A0:91:B5:13:E3:97:71:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:42:09:4b:7f:4d:03:2c:ed:a7:0d:59:18:fe:c5:2b:53:da: 65:d0:16:cc:89:87:b6:ab:d5:c0:b0:32:d4:ad:d8:84:96:41: 95:54:38:b7:97:81:97:f6:d9:8d:14:ba:31:e9:70:ec:4e:0a: 0b:bc:ab:0e:35:1a:72:e7:d8:0d:9b:9f:c2:ce:42:14:c4:c3: 61:01:1e:dc:b2:a0:1f:23:d5:17:f1:f0:f5:82:c0:b9:bf:23: aa:20:c9:30:0a:66:03:a4:c4:c1:de:6c:f8:0a:8d:fc:f1:0e: 03:e9:42:ea:a8:e0:eb:b5:c0:33:09:46:4a:fa:4c:d2:ec:1f: 67:86:04:d4:35:42:91:fa:8f:51:44:65:7d:6d:68:80:52:0e: 2b:9a:2f:ce:85:90:d0:9e:94:be:bc:ed:9b:6c:67:32:0d:2f: 8a:ec:87:75:2f:04:dc:d9:12:e1:45:ee:e7:47:28:9f:d3:fa: f4:ac:26:ec:36:f6:56:09:06:dd:6d:cb:5b:93:dd:f0:a0:96: 7e:83:2d:ca:d8:68:57:50:a3:2e:8f:87:d4:f1:57:a4:33:be: a9:77:5e:1f:cd:12:c5:fc:db:2c:93:b8:e4:93:b2:52:61:d9: 5b:6a:65:2f:97:da:3f:3d:bf:30:ac:64:8b:c1:b2:fd:e1:8c: b3:12:db:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmx/eC+RJAs1S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NzYyYTllMjQtYjA3ZC00MTM2LWE5OWUtM2JkOTE0YzA2NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1RXzOZdF92vAvapRguv4SpfUkCQgomRAXvY WsRmjhJd8b/RUVgTgWnmHqE3cWBfAeZkco6HAIe+3QYWRoUEuuJdIVfMKUvgvO5W t7D7PO0VTTUvxDWpp8Sekqimg4Iu1b7edTxS1mhhWEgKT2/r3VZahAGni1GVM6mp X5G7OHUStdJLYA8LN9mPfBm1r5vK3kM/KSjWOmCoAmeMQ1z7qF969LTcGsjNjUQU xhVSKQQn+VxwTInVFbkIDSCEZOF/rJ7hkY30jMzXLM8hzB1UfqR21hcH3TgvfjGo QO0hzBJ2cFjMMC+i9DckwDafsUCOAX6v5LaHtGnmK/CX2vW+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKb5ACibX8yYuXtY6CRtRPjl3F5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JiOWQ4MmEtM2FmZi0z MjExLTk2Y2ItYTQ2M2U2Yjg1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZCCUt/TQMs7acNWRj+xStT2mXQFsyJh7ar1cCwMtSt2ISWQZVUOLeX gZf22Y0UujHpcOxOCgu8qw41GnLn2A2bn8LOQhTEw2EBHtyyoB8j1Rfx8PWCwLm/ I6ogyTAKZgOkxMHebPgKjfzxDgPpQuqo4Ou1wDMJRkr6TNLsH2eGBNQ1QpH6j1FE ZX1taIBSDiuaL86FkNCelL687ZtsZzINL4rsh3UvBNzZEuFF7udHKJ/T+vSsJuw2 9lYJBt1ty1uT3fCgln6DLcrYaFdQoy6Ph9TxV6Qzvql3Xh/NEsX82yyTuOSTslJh 2VtqZS+X2j89vzCsZIvBsv3hjLMS20c= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:04 2026 by rpki-client