$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa File: 7df32cde-57a3-3204-a1a7-165e477b27bc.roa (raw, json) Hash identifier: nGGCR1eYkpuzZz4HsxtdLz41OUmBd97G9tnHu3ZaktE= Subject key identifier: 96:95:8D:9C:BC:D7:F5:AF:91:33:4A:2A:AE:45:70:73:99:72:FA:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8603DCDC992C742FDC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:03:dc:dc:99:2c:74:2f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=066d5232-2cbf-4c93-9d71-3637111cd98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:50:f1:65:9d:a0:1b:a3:a2:81:ec:2d:90: 53:02:d7:7c:c4:d3:bc:c2:68:a6:b1:cb:38:16:e8: b6:cb:49:c7:48:11:18:b2:f8:07:e5:ce:44:b6:9d: be:bd:24:5c:94:c3:b2:b6:e6:33:09:05:12:8f:df: 51:e8:46:a6:34:49:89:02:1a:6a:75:d5:0f:da:88: 0c:23:5e:64:3d:58:c5:22:d6:f5:86:98:9e:54:8b: 72:36:5e:98:9f:89:04:4f:a6:57:e6:48:b9:8e:e3: dd:2f:85:4c:4d:3c:97:46:62:44:69:47:3c:da:a0: 7e:da:b3:23:c7:53:81:b4:85:d5:93:58:7b:ca:fe: f7:0e:82:ec:bc:23:85:48:69:df:dd:1b:5f:45:1e: f9:1d:be:7f:e3:de:d2:64:b8:95:7a:72:fe:5d:6c: 75:e5:64:55:a4:ab:83:7d:6f:65:13:5b:4e:60:88: b9:30:95:da:7e:76:eb:fa:db:3a:cf:4d:46:85:6e: 4f:a6:67:16:97:0a:81:2b:67:33:fd:22:8a:da:6d: c5:78:02:c4:5c:44:94:64:b7:47:ea:3d:b3:b8:b2: 5e:25:a6:25:e4:7f:f9:e3:38:bc:12:ea:8b:c5:7a: 40:7d:0d:4b:48:a8:b3:40:ff:38:43:63:19:1b:c2: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:95:8D:9C:BC:D7:F5:AF:91:33:4A:2A:AE:45:70:73:99:72:FA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:61:64:a3:fa:04:61:aa:9a:da:59:b4:9a:4c:a1:f6:90:59: b4:11:d0:0d:0d:b2:e7:bd:2e:be:be:c2:73:8f:4c:92:42:43: b3:4a:65:6b:88:a7:b2:4b:36:97:35:dd:20:60:3a:78:72:ab: 23:a8:99:d9:12:1a:bd:e0:11:94:a8:57:7f:4d:fa:17:c7:cd: 7b:7c:62:3d:bf:e3:ed:bb:dc:4e:1a:aa:b0:ad:ae:5e:c9:29: 03:05:a8:e0:f9:7c:62:b9:db:47:4a:83:be:b5:a5:e2:86:d0: d4:b7:99:63:98:68:8d:96:fb:cc:55:c0:96:2f:d8:68:59:f9: 94:11:23:70:41:33:d8:58:22:e3:66:3f:4f:0d:7c:6f:18:b8: 52:e2:68:3e:ef:70:9d:c2:00:90:73:22:86:ed:12:51:33:93: 0d:e8:ee:08:66:bb:10:36:46:f3:22:e6:71:59:91:7a:09:88: 1a:41:16:73:d0:f7:66:fb:c5:1c:68:f6:3f:39:ca:5c:48:0a: 21:43:c1:8b:b8:42:41:45:79:5c:c1:a5:09:d6:ed:5c:c0:55: 64:1b:8b:7e:96:3b:5b:e5:34:40:65:d1:59:88:fc:97:27:1f: 71:fb:0d:fb:ff:3d:c0:c8:20:3a:1a:90:6e:0e:ec:ab:ef:80: e2:92:c7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4YD3NyZLHQv3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MDY2ZDUyMzItMmNiZi00YzkzLTlkNzEtMzYzNzExMWNkOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjtQ8WWdoBujooHsLZBTAtd8xNO8wmimscs4 Fui2y0nHSBEYsvgH5c5Etp2+vSRclMOytuYzCQUSj99R6EamNEmJAhpqddUP2ogM I15kPVjFItb1hpieVItyNl6Yn4kET6ZX5ki5juPdL4VMTTyXRmJEaUc82qB+2rMj x1OBtIXVk1h7yv73DoLsvCOFSGnf3RtfRR75Hb5/497SZLiVenL+XWx15WRVpKuD fW9lE1tOYIi5MJXafnbr+ts6z01GhW5PpmcWlwqBK2cz/SKK2m3FeALEXESUZLdH 6j2zuLJeJaYl5H/54zi8EuqLxXpAfQ1LSKizQP84Q2MZG8IqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaVjZy81/WvkTNKKq5FcHOZcvpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RmMzJjZGUtNTdhMy0z MjA0LWExYTctMTY1ZTQ3N2IyN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINhZKP6BGGqmtpZtJpMofaQWbQR0A0Nsue9Lr6+wnOPTJJCQ7NKZWuI p7JLNpc13SBgOnhyqyOomdkSGr3gEZSoV39N+hfHzXt8Yj2/4+273E4aqrCtrl7J KQMFqOD5fGK520dKg761peKG0NS3mWOYaI2W+8xVwJYv2GhZ+ZQRI3BBM9hYIuNm P08NfG8YuFLiaD7vcJ3CAJBzIobtElEzkw3o7ghmuxA2RvMi5nFZkXoJiBpBFnPQ 92b7xRxo9j85ylxICiFDwYu4QkFFeVzBpQnW7VzAVWQbi36WO1vlNEBl0VmI/Jcn H3H7Dfv/PcDIIDoakG4O7KvvgOKSx3U= -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:45 2026 by rpki-client