$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa File: 62134457-a2ad-319d-956d-7d1516e6dcc0.roa (raw, json) Hash identifier: vje5UQhrJJwIyQUz7d55RSgvOqmjjz9esAy0Zvtx4B4= Subject key identifier: 91:6F:4B:8A:7F:81:7E:67:B4:64:8D:1D:F1:2F:95:B0:08:DC:E8:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A6331BCDD0EAEBFACE380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.20.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:63:31:bc:dd:0e:ae:bf:ac:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=590e5e96-22da-415a-93fe-e0585c876117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:55:4e:99:f4:dd:ad:88:28:50:2b:9c:79: 14:25:72:ff:01:3c:36:46:ec:3a:7f:a8:7b:84:b4: f8:16:4d:99:52:c0:b3:46:e4:10:70:2a:95:5c:d9: 11:94:87:b6:5f:c5:cf:f6:2d:5e:b6:b6:c1:8a:88: be:83:a1:aa:81:d5:30:fa:11:04:a3:de:2e:a2:e3: 17:5a:59:73:47:35:1b:30:56:ce:6a:23:50:6b:dd: 73:01:00:40:7f:1c:4e:70:29:e4:45:7f:f0:d9:7f: f3:20:6f:2b:ce:7d:36:22:53:fb:c7:40:03:f6:db: 6a:2d:54:e9:1d:74:93:ac:10:07:bf:65:7d:83:3d: aa:c0:4b:21:bc:1e:a9:cd:1e:d3:1e:30:b7:37:97: e9:5e:e0:d6:d4:c9:94:d2:3e:d6:8c:39:13:d4:7b: 9d:70:ec:da:e2:b9:78:c0:11:68:a7:a8:4b:b1:04: 74:5a:b6:92:b8:0e:a2:49:84:d5:0c:5f:cf:da:cc: d5:ae:ee:51:e5:38:02:fa:d1:77:e8:07:e6:78:03: 6c:52:e9:93:47:78:d7:0e:40:89:91:72:99:70:bb: 81:83:89:e1:09:49:53:e5:8b:06:e1:02:48:0c:d4: c3:ee:b5:9d:5f:da:de:6c:57:3c:fe:0f:13:79:7e: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:4B:8A:7F:81:7E:67:B4:64:8D:1D:F1:2F:95:B0:08:DC:E8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:43:b9:3e:e8:ba:c0:d1:da:f1:ce:24:98:0e:23:e2:4a:66: a9:b6:18:ef:17:eb:89:00:67:6a:cf:b2:9b:15:b7:2d:12:8e: 24:81:d7:dd:f1:f7:b5:e2:a7:e8:52:c7:77:e4:ed:88:46:09: da:2b:ec:1a:d2:e2:c9:21:51:42:c9:a4:65:0f:24:f3:a9:4e: ed:66:30:3a:bb:65:2e:75:92:b0:83:67:a0:ab:86:f8:6f:3b: 72:52:5e:7d:0b:48:7e:53:9a:8f:ec:06:a6:c6:77:25:e5:dd: 8a:a2:eb:e7:49:ae:09:3a:1e:6e:b1:66:7c:92:d6:00:c7:a8: 8f:2c:b6:b9:f0:25:65:40:4c:f4:74:54:33:93:8c:86:b1:8f: 43:3b:2f:bb:e3:27:f2:23:49:ee:9c:b4:13:a5:03:38:c7:e6: c5:c4:de:16:6a:e1:60:ac:0f:89:e9:35:93:c1:eb:8f:7a:44: 3b:70:d1:aa:d5:b1:4c:58:c4:dc:aa:40:7b:0e:16:a1:c2:8c: c4:86:40:ee:74:2c:f8:62:6e:2c:90:88:3b:07:a1:11:fd:93: 5d:07:27:1c:11:85:51:81:3d:b9:0e:bd:89:c8:b7:e2:36:c7: b0:d3:d3:c0:f0:e8:59:30:06:56:a4:fc:72:ff:46:9b:ab:06: d0:4a:31:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmMxvN0Orr+s44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NTkwZTVlOTYtMjJkYS00MTVhLTkzZmUtZTA1ODVjODc2MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVlVTpn03a2IKFArnHkUJXL/ATw2Ruw6f6h7 hLT4Fk2ZUsCzRuQQcCqVXNkRlIe2X8XP9i1etrbBioi+g6GqgdUw+hEEo94uouMX WllzRzUbMFbOaiNQa91zAQBAfxxOcCnkRX/w2X/zIG8rzn02IlP7x0AD9ttqLVTp HXSTrBAHv2V9gz2qwEshvB6pzR7THjC3N5fpXuDW1MmU0j7WjDkT1HudcOza4rl4 wBFop6hLsQR0WraSuA6iSYTVDF/P2szVru5R5TgC+tF36AfmeANsUumTR3jXDkCJ kXKZcLuBg4nhCUlT5YsG4QJIDNTD7rWdX9rebFc8/g8TeX7nZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFvS4p/gX5ntGSNHfEvlbAI3OgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjIxMzQ0NTctYTJhZC0z MTlkLTk1NmQtN2QxNTE2ZTZkY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9DuT7ousDR2vHOJJgOI+JKZqm2GO8X64kAZ2rPspsVty0SjiSB193x 97Xip+hSx3fk7YhGCdor7BrS4skhUULJpGUPJPOpTu1mMDq7ZS51krCDZ6Crhvhv O3JSXn0LSH5Tmo/sBqbGdyXl3Yqi6+dJrgk6Hm6xZnyS1gDHqI8strnwJWVATPR0 VDOTjIaxj0M7L7vjJ/IjSe6ctBOlAzjH5sXE3hZq4WCsD4npNZPB6496RDtw0arV sUxYxNyqQHsOFqHCjMSGQO50LPhibiyQiDsHoRH9k10HJxwRhVGBPbkOvYnIt+I2 x7DT08Dw6FkwBlak/HL/RpurBtBKMXI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:43 2026 by rpki-client