$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa File: 752baa26-2a71-34df-82d7-547a2a8ddd96.roa (raw, json) Hash identifier: nqBpDa4V9r8ffjc9UXN1yIKTBva/OQ+F18M6qfR1dXg= Subject key identifier: 56:97:AF:58:5B:E5:3C:E8:03:10:B4:5F:9E:08:3F:32:36:7C:FA:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A99662AC8CF828309B9E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.20.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:99:66:2a:c8:cf:82:83:09:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=35e8a1ef-7318-49dc-a38b-5e6b286c88f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:0b:38:b0:83:93:c7:c6:c1:f1:51:40:64: 20:77:87:01:c2:6d:43:8e:6c:3e:f6:0c:c6:d4:d2: bd:11:a0:60:23:e1:23:3a:2a:44:ac:9d:d2:7f:44: c9:b3:cc:12:21:0c:d9:dc:09:06:f9:96:5d:6e:5c: c2:82:21:96:b9:db:b2:fd:7b:9e:d8:b5:0d:d5:da: d1:e9:05:4d:31:a4:6f:96:33:ab:4b:d5:07:c4:ff: f7:1d:4f:5f:55:62:13:17:47:8b:a8:d3:2b:bf:9f: de:1c:50:d4:3f:36:8b:e5:94:94:db:24:c5:12:64: 17:18:29:27:37:1b:90:0a:b7:08:a3:39:b7:02:3e: 14:f0:13:f2:83:a0:10:22:37:24:e9:7d:4b:14:09: 0f:c8:94:f1:20:9b:8b:9f:27:5d:ee:fc:6b:b0:74: 79:cb:2e:7d:0b:27:13:91:8e:45:6d:39:d9:9f:ee: 9b:49:51:4c:16:58:25:08:96:e2:b8:39:8d:27:5a: 16:c9:9e:07:48:53:f9:be:29:d3:80:79:89:ab:b7: 85:48:f6:51:49:fe:8b:31:e8:e6:06:31:65:56:ba: f9:db:f0:17:de:bd:4b:6f:23:5a:b1:c3:9f:ad:85: 62:34:ca:bf:ef:e5:93:bc:c9:c4:c8:63:ad:08:cc: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:97:AF:58:5B:E5:3C:E8:03:10:B4:5F:9E:08:3F:32:36:7C:FA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bc:a6:db:43:3b:2e:de:ae:67:f1:6c:0e:d8:17:0e:61:82: d3:a0:29:9c:32:26:49:03:6d:41:90:54:f9:87:25:b3:04:7a: 9e:7e:62:88:dd:98:1b:dd:d5:b1:6a:2f:48:b9:4f:47:7d:ae: 8d:d5:33:66:3e:58:9f:64:fd:64:a4:c2:bd:4a:0d:e4:77:77: 3c:23:e3:9f:3b:a7:89:09:27:68:21:24:88:28:0e:c6:3d:c7: 50:89:f3:f8:9a:71:ae:6d:64:ed:67:16:90:65:88:f0:dd:bf: 08:b8:8e:94:c0:1b:62:4f:bf:b2:d3:4e:7a:a8:9d:8e:bd:e8: 38:41:99:e1:5e:86:ad:7c:be:41:db:59:74:f0:c9:a3:3d:c4: 7a:ca:de:fa:0f:e6:74:77:c9:e7:0b:15:d2:9e:db:ca:40:ae: 15:b4:78:b4:d5:d5:db:e2:78:ca:77:87:d1:49:43:95:ec:05: 06:d4:68:1d:c2:e6:02:a2:62:55:ff:ee:a7:94:83:5b:b7:9c: 73:69:ae:9d:99:e9:fa:ec:1e:cd:4f:b6:d4:01:11:22:56:25: 61:dd:a6:ae:52:45:d4:ab:3c:d3:23:9a:cd:a6:08:8d:78:9e: ab:4f:c7:f9:2f:70:4b:bc:04:dc:4b:09:83:7e:a7:f0:02:b3: 74:b1:78:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCplmKsjPgoMJueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzVlOGExZWYtNzMxOC00OWRjLWEzOGItNWU2YjI4NmM4OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubkLOLCDk8fGwfFRQGQgd4cBwm1Djmw+9gzG 1NK9EaBgI+EjOipErJ3Sf0TJs8wSIQzZ3AkG+ZZdblzCgiGWuduy/Xue2LUN1drR 6QVNMaRvljOrS9UHxP/3HU9fVWITF0eLqNMrv5/eHFDUPzaL5ZSU2yTFEmQXGCkn NxuQCrcIozm3Aj4U8BPyg6AQIjck6X1LFAkPyJTxIJuLnydd7vxrsHR5yy59CycT kY5FbTnZn+6bSVFMFlglCJbiuDmNJ1oWyZ4HSFP5vinTgHmJq7eFSPZRSf6LMejm BjFlVrr52/AX3r1LbyNascOfrYViNMq/7+WTvMnEyGOtCMxi0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaXr1hb5TzoAxC0X54IPzI2fPrrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzUyYmFhMjYtMmE3MS0z NGRmLTgyZDctNTQ3YTJhOGRkZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC8pttDOy7ermfxbA7YFw5hgtOgKZwyJkkDbUGQVPmHJbMEep5+Yojd mBvd1bFqL0i5T0d9ro3VM2Y+WJ9k/WSkwr1KDeR3dzwj4587p4kJJ2ghJIgoDsY9 x1CJ8/iaca5tZO1nFpBliPDdvwi4jpTAG2JPv7LTTnqonY696DhBmeFehq18vkHb WXTwyaM9xHrK3voP5nR3yecLFdKe28pArhW0eLTV1dvieMp3h9FJQ5XsBQbUaB3C 5gKiYlX/7qeUg1u3nHNprp2Z6frsHs1PttQBESJWJWHdpq5SRdSrPNMjms2mCI14 nqtPx/kvcEu8BNxLCYN+p/ACs3SxeII= -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:08 2026 by rpki-client