$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa File: 41eb1acd-5269-33e7-a21d-fb1a570d829a.roa (raw, json) Hash identifier: vNOXCUN1ieObTcqZDBC6XRK+aH9oFlRDlWe8c+9Zu8E= Subject key identifier: CC:38:34:90:36:1D:76:E9:08:B4:6E:73:8E:08:D0:31:FB:44:61:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA02726DD75061AFAF1A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 98.21.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:02:72:6d:d7:50:61:af:af:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=da0dd09f-0bc4-426e-a381-91760876bedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f5:78:86:0c:10:66:4b:33:4f:93:51:9b:71: e8:c3:c2:d2:ab:8b:29:32:1b:62:ce:36:f4:7a:a1: 5f:aa:b4:51:90:11:d5:1d:6f:06:32:2b:9a:68:25: 77:05:d4:c5:61:ee:11:fe:d6:86:77:78:c6:a1:77: 93:bc:d3:df:2c:c6:6d:75:1f:d9:c9:4b:b6:e5:72: db:c1:10:e7:14:cf:60:66:eb:c2:f2:ac:4c:7d:c4: 15:b8:9f:58:07:0f:58:77:6b:eb:b1:46:4b:d4:27: 79:e7:ee:47:f8:d5:79:a6:5b:7b:dc:bb:ab:c0:c9: 14:dc:aa:0e:10:a0:87:0d:bf:1b:0e:4e:49:42:0e: 28:55:02:e5:10:92:83:fa:ee:ad:3a:98:55:18:bb: c8:8e:c9:66:a0:d3:6a:cd:b6:5c:77:e8:15:00:1e: b6:94:97:de:9e:3c:f2:58:12:e4:39:c0:61:04:e7: fa:c8:a9:c9:fd:7a:1d:a2:dc:ef:7e:07:f5:d8:7a: f4:98:39:b8:65:e1:b8:f0:9f:df:3f:0b:29:48:a4: 2f:c2:50:25:9b:95:47:af:9d:ac:1c:2a:c0:d1:ef: 6c:34:7d:77:75:68:0e:32:e8:fa:3b:96:c5:31:a9: e0:00:d6:b2:8e:08:14:87:52:25:4a:14:1f:70:f2: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:38:34:90:36:1D:76:E9:08:B4:6E:73:8E:08:D0:31:FB:44:61:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:39:c3:b2:dd:c7:b6:ec:01:a9:dc:c6:d8:b3:1d:ca:1c:c6: 66:8c:c1:38:2b:0b:37:13:3d:96:65:cf:65:28:29:0a:87:65: 3b:be:c2:4c:b7:f9:e6:cf:22:94:11:be:34:93:e1:6c:7f:f8: f9:68:45:9d:61:26:dc:e3:35:be:70:e0:f6:5c:c2:a4:e1:ac: 29:0b:33:ec:3f:fa:4f:05:88:8e:1e:1c:1e:a4:0e:6d:2c:e5: b8:58:e8:9d:ec:d7:37:04:70:27:45:ab:e1:b0:9d:f7:cb:85: 8b:90:e7:d9:20:e0:86:6d:11:f5:f3:08:a0:89:d8:fd:a1:7c: 28:e1:79:9c:76:6d:43:d5:32:01:3f:f8:17:8f:90:33:e4:66: d0:8f:71:a3:da:e5:5f:88:1b:cc:0d:15:81:52:c6:b6:e2:7f: b8:6b:93:27:7f:7b:c7:59:d7:ad:f5:eb:7d:c2:1e:43:58:d9: 15:a9:aa:fa:47:69:d9:42:a0:ea:f7:b0:65:6d:28:2d:da:48: 38:aa:b0:bb:e2:0e:8a:df:0a:0c:1c:4e:f7:91:87:32:38:f0: 05:19:76:f7:72:f4:58:f2:95:89:a3:a9:78:de:a7:2e:c3:fa: 30:ba:2b:0f:18:eb:7d:be:cf:de:9d:fe:54:f5:c0:81:0e:f5: ef:f0:2a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gJybddQYa+vGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZGEwZGQwOWYtMGJjNC00MjZlLWEzODEtOTE3NjA4NzZiZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfV4hgwQZkszT5NRm3How8LSq4spMhtizjb0 eqFfqrRRkBHVHW8GMiuaaCV3BdTFYe4R/taGd3jGoXeTvNPfLMZtdR/ZyUu25XLb wRDnFM9gZuvC8qxMfcQVuJ9YBw9Yd2vrsUZL1Cd55+5H+NV5plt73LurwMkU3KoO EKCHDb8bDk5JQg4oVQLlEJKD+u6tOphVGLvIjslmoNNqzbZcd+gVAB62lJfenjzy WBLkOcBhBOf6yKnJ/Xodotzvfgf12Hr0mDm4ZeG48J/fPwspSKQvwlAlm5VHr52s HCrA0e9sNH13dWgOMuj6O5bFMangANayjggUh1IlShQfcPIOTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw4NJA2HXbpCLRuc44I0DH7RGHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFlYjFhY2QtNTI2OS0z M2U3LWEyMWQtZmIxYTU3MGQ4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk5w7Ldx7bsAancxtizHcocxmaMwTgrCzcTPZZlz2UoKQqHZTu+wky3 +ebPIpQRvjST4Wx/+PloRZ1hJtzjNb5w4PZcwqThrCkLM+w/+k8FiI4eHB6kDm0s 5bhY6J3s1zcEcCdFq+GwnffLhYuQ59kg4IZtEfXzCKCJ2P2hfCjheZx2bUPVMgE/ +BePkDPkZtCPcaPa5V+IG8wNFYFSxrbif7hrkyd/e8dZ1631633CHkNY2RWpqvpH adlCoOr3sGVtKC3aSDiqsLviDorfCgwcTveRhzI48AUZdvdy9FjylYmjqXjepy7D +jC6Kw8Y632+z96d/lT1wIEO9e/wKnM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:54 2026 by rpki-client