$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa File: a76862bc-99e6-3f16-a88d-6b07293a09d3.roa (raw, json) Hash identifier: i5E4NrZ8i1GCr5pc3v/uuzjyEe80rrnMjdBoVWjP7yo= Subject key identifier: 71:45:9F:50:60:55:AD:70:60:6A:3D:9C:AA:9A:0E:15:93:67:88:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8FC88E4D7D0A05C3B300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.23.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8f:c8:8e:4d:7d:0a:05:c3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=13eb4823-34b1-41d8-b60a-68a7fa3e639c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:c0:96:09:f9:48:fa:9e:87:3d:29:0d:b6: 57:8e:a9:4a:86:f4:0c:9f:5d:9e:04:5b:6a:1d:1d: 01:b1:37:16:45:92:13:4d:c5:00:eb:4f:79:ee:26: d8:c8:51:b0:e9:0e:a4:83:ed:b9:ca:d8:81:e2:f3: 18:51:f4:60:20:79:a2:c5:0f:8b:20:82:3d:61:10: 28:9b:91:60:4e:4f:f1:09:1f:e5:52:fc:0c:50:27: e1:6d:86:6d:e2:56:47:8e:aa:69:c6:e7:05:55:b0: 28:a6:c4:a1:e1:18:7b:cf:00:0b:f2:57:f4:0e:6c: da:4c:0c:86:52:1f:3b:cb:1a:7f:2d:7a:4f:cd:1d: df:69:75:3f:f2:7c:26:ea:11:eb:0a:b4:e4:52:c2: d7:93:19:23:a8:70:d2:50:80:a2:26:94:26:b9:69: 8b:60:78:15:9f:d9:b8:ef:e1:f2:b9:1f:1e:bc:94: 07:7c:78:ca:f0:b5:ac:e2:18:fe:ca:40:83:63:05: 20:66:f7:c0:3f:49:e8:bb:3c:8f:aa:0f:ec:47:8c: 79:bf:2a:87:2a:91:74:cd:d6:3a:5e:bc:24:9b:54: 3d:dd:3e:ef:3f:e5:a8:d4:d6:5f:92:30:f5:ec:b4: ff:c9:79:77:56:ff:a1:56:dd:6b:dc:72:d6:06:d0: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:45:9F:50:60:55:AD:70:60:6A:3D:9C:AA:9A:0E:15:93:67:88:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:25:c1:29:de:e9:6d:bf:55:23:d3:15:b4:f7:ea:8a:76:6f: 8c:9d:86:99:db:2d:cb:c4:c6:e9:d2:e7:08:8d:ac:06:18:8b: 01:16:99:d7:a0:4d:ed:04:fd:bd:a4:a6:35:f9:3e:0f:18:60: 1d:b1:2f:87:7b:9c:74:72:8d:53:00:76:00:32:37:a8:49:07: 0b:a1:e2:3f:b0:52:58:62:65:4a:2f:60:27:2c:d4:d1:62:d1: 29:cf:93:ac:90:7a:e0:cc:42:46:f3:f5:48:0c:67:f2:2c:3f: ab:a6:89:32:38:84:1c:d7:a6:19:f7:62:2f:7d:9a:d7:f0:e5: 74:79:7a:f7:08:4e:f7:1f:cc:df:d4:0d:14:81:62:82:08:48: 98:45:c5:03:a6:ef:44:ec:fc:1b:7a:ca:f3:63:bb:48:a4:87: 8f:d6:e7:7e:a8:a2:f4:5f:c2:a2:8e:77:85:e5:0b:a8:4f:bc: 3a:69:7a:fa:ca:06:86:c0:9f:ec:ee:e4:63:27:40:8b:61:97: bc:cc:e2:a8:4f:62:0d:a5:91:a8:6f:a0:fe:e7:a9:31:4f:b8: 6c:fe:7e:22:56:3e:88:98:22:a3:bf:0f:b5:b2:74:ec:d8:d0: 00:72:a9:89:2c:62:3f:37:ae:6b:44:06:8f:ae:d4:6d:b2:1c: fd:f8:ec:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4/Ijk19CgXDswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MTNlYjQ4MjMtMzRiMS00MWQ4LWI2MGEtNjhhN2ZhM2U2MzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJzAlgn5SPqehz0pDbZXjqlKhvQMn12eBFtq HR0BsTcWRZITTcUA60957ibYyFGw6Q6kg+25ytiB4vMYUfRgIHmixQ+LIII9YRAo m5FgTk/xCR/lUvwMUCfhbYZt4lZHjqppxucFVbAopsSh4Rh7zwAL8lf0DmzaTAyG Uh87yxp/LXpPzR3faXU/8nwm6hHrCrTkUsLXkxkjqHDSUICiJpQmuWmLYHgVn9m4 7+HyuR8evJQHfHjK8LWs4hj+ykCDYwUgZvfAP0nouzyPqg/sR4x5vyqHKpF0zdY6 Xrwkm1Q93T7vP+Wo1NZfkjD17LT/yXl3Vv+hVt1r3HLWBtC8kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFFn1BgVa1wYGo9nKqaDhWTZ4gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2ODYyYmMtOTllNi0z ZjE2LWE4OGQtNmIwNzI5M2EwOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHolwSne6W2/VSPTFbT36op2b4ydhpnbLcvExunS5wiNrAYYiwEWmdeg Te0E/b2kpjX5Pg8YYB2xL4d7nHRyjVMAdgAyN6hJBwuh4j+wUlhiZUovYCcs1NFi 0SnPk6yQeuDMQkbz9UgMZ/IsP6umiTI4hBzXphn3Yi99mtfw5XR5evcITvcfzN/U DRSBYoIISJhFxQOm70Ts/Bt6yvNju0ikh4/W536oovRfwqKOd4XlC6hPvDppevrK BobAn+zu5GMnQIthl7zM4qhPYg2lkahvoP7nqTFPuGz+fiJWPoiYIqO/D7WydOzY 0AByqYksYj83rmtEBo+u1G2yHP347J4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:24 2026 by rpki-client