$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa File: 521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa (raw, json) Hash identifier: 9WfaDiTV+C8CPIWObr5gxBlB6Z01/CZBgygFi49OHaI= Subject key identifier: 65:A2:1F:F6:2B:DF:56:5F:ED:FF:2E:F7:15:36:8C:A7:67:44:43:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A6361F53B328D44CCD680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.22.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:63:61:f5:3b:32:8d:44:cc:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=10930f0e-5ee4-4935-a575-70f8d75abd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:f8:5f:5c:9e:5c:77:47:1b:ca:06:ab:d3: 15:56:7b:e2:53:ce:b1:73:de:93:88:7e:89:3e:73: 7a:52:f4:37:fd:79:72:6c:88:a2:73:32:ac:fc:c1: 4e:21:7d:31:db:7e:10:7b:df:e6:f7:83:c6:d7:0b: 06:5d:20:30:a0:31:c2:37:b6:c7:43:b7:5b:e0:9a: bd:f3:01:97:ff:4d:8e:cc:77:49:28:41:d2:9c:72: e7:5f:aa:47:c0:be:e3:8f:4a:d3:af:fa:3d:83:d4: 98:01:91:56:48:71:55:27:3a:39:c7:83:bf:33:55: 0d:a2:88:8b:75:3c:a4:9f:c9:02:e5:66:a2:2e:fd: a6:26:39:52:3b:ec:9f:4d:ee:91:b8:cf:cd:dd:b6: 0e:e8:f5:0e:81:03:62:61:ae:d0:67:f3:62:6f:52: 7a:bc:74:b7:56:ee:f6:8b:e4:11:6c:c7:04:6e:21: 8a:0b:32:ff:12:34:e3:a3:ea:d4:1c:a9:73:07:6b: 2b:dd:d1:36:08:39:f8:16:6e:5b:8a:28:49:9f:19: 0e:b1:14:a5:83:61:9f:45:44:b3:34:d3:9d:e1:2f: 7a:42:ad:fb:1c:ab:6a:7b:d7:64:43:d2:e9:52:41: b4:a6:fd:0f:8d:cc:47:99:6b:41:57:d4:7f:34:ef: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A2:1F:F6:2B:DF:56:5F:ED:FF:2E:F7:15:36:8C:A7:67:44:43:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/521dbaaf-ab54-39da-8a30-ec119c2fd57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:16:aa:af:1e:b3:a4:ae:4b:6f:88:f2:9a:a0:c0:27:1d:db: 75:bf:63:19:d2:cd:73:0f:46:67:e9:5e:b8:5b:5e:c2:e7:8d: a2:b6:e8:66:c5:eb:ce:5d:22:f4:8b:a7:af:74:ee:43:24:a5: 5f:bf:72:24:fb:93:09:e0:1c:b4:4b:39:3a:52:56:48:9e:e8: d5:d7:f4:49:a4:e9:20:21:69:31:3d:75:d1:48:3e:b2:00:aa: 89:be:98:d6:3c:e7:9d:7c:5c:26:04:68:de:57:cf:54:34:84: 7d:ef:de:db:f7:b8:b1:a7:3e:94:8b:85:31:1d:4f:e4:c1:2c: b0:f1:a2:5b:4f:90:55:ae:bc:81:2d:d0:42:09:70:6b:84:ee: be:89:49:ef:84:93:b9:67:09:87:b2:fb:83:a6:b1:80:85:2c: 28:d1:35:a7:c7:c9:30:29:bf:b4:b5:e2:31:aa:01:2b:fd:5e: 15:92:99:88:12:9a:21:f7:86:9d:83:6e:f5:e9:cd:da:e9:4b: c2:d8:94:14:12:69:d1:6c:50:8e:f2:6f:5a:73:ff:2d:dd:05: 07:e8:8f:60:50:b5:47:00:0a:11:94:1b:3c:4b:7c:fa:ae:44: 63:86:19:59:5b:9c:bb:d4:7a:e9:f6:28:3d:eb:38:08:09:04: b4:e0:50:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmNh9TsyjUTM1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTA5MzBmMGUtNWVlNC00OTM1LWE1NzUtNzBmOGQ3NWFiZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXr4X1yeXHdHG8oGq9MVVnviU86xc96TiH6J PnN6UvQ3/XlybIiiczKs/MFOIX0x234Qe9/m94PG1wsGXSAwoDHCN7bHQ7db4Jq9 8wGX/02OzHdJKEHSnHLnX6pHwL7jj0rTr/o9g9SYAZFWSHFVJzo5x4O/M1UNooiL dTykn8kC5WaiLv2mJjlSO+yfTe6RuM/N3bYO6PUOgQNiYa7QZ/Nib1J6vHS3Vu72 i+QRbMcEbiGKCzL/EjTjo+rUHKlzB2sr3dE2CDn4Fm5biihJnxkOsRSlg2GfRUSz NNOd4S96Qq37HKtqe9dkQ9LpUkG0pv0PjcxHmWtBV9R/NO+kkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWiH/Yr31Zf7f8u9xU2jKdnREM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIxZGJhYWYtYWI1NC0z OWRhLThhMzAtZWMxMTljMmZkNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8Wqq8es6SuS2+I8pqgwCcd23W/YxnSzXMPRmfpXrhbXsLnjaK26GbF 685dIvSLp6907kMkpV+/ciT7kwngHLRLOTpSVkie6NXX9Emk6SAhaTE9ddFIPrIA qom+mNY85518XCYEaN5Xz1Q0hH3v3tv3uLGnPpSLhTEdT+TBLLDxoltPkFWuvIEt 0EIJcGuE7r6JSe+Ek7lnCYey+4OmsYCFLCjRNafHyTApv7S14jGqASv9XhWSmYgS miH3hp2DbvXpzdrpS8LYlBQSadFsUI7yb1pz/y3dBQfoj2BQtUcAChGUGzxLfPqu RGOGGVlbnLvUeun2KD3rOAgJBLTgUEg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:39 2026 by rpki-client