$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa File: a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa (raw, json) Hash identifier: wn/S2OORI0utRvK8fODQrxx9BukEs0gdLALLGzfElP4= Subject key identifier: A3:3C:B7:E8:DB:13:DD:F5:D7:85:C1:B1:7B:EE:A7:E4:C9:6C:2E:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F878E82B6DED95EB04980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.19.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:87:8e:82:b6:de:d9:5e:b0:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=79802d10-7d13-48e2-bfd9-6efbcb19dc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:fd:6c:00:5d:f1:8b:c3:ba:29:fe:16:16: bb:61:78:db:34:15:1a:e1:8e:f7:87:5b:f5:e9:19: 18:05:46:06:d7:a5:2e:6d:aa:07:ad:f8:b7:f9:fe: fa:58:94:e9:90:99:a4:23:c8:a9:54:cd:66:35:75: cb:65:ea:36:05:01:6a:75:58:a5:9b:bc:47:bc:d8: 1b:d4:7a:bd:53:d4:68:b4:6f:89:f2:06:0e:4d:29: b7:f4:ae:ae:76:ed:f3:6b:aa:a6:91:cc:db:33:ca: 47:65:4b:55:f6:cb:4f:2e:92:2b:36:b2:4b:df:8d: 6a:3c:cc:4c:29:5e:94:9d:1e:fd:e5:92:44:03:89: cf:d4:f3:9a:37:f0:02:01:c2:a9:97:7a:e7:fb:57: d1:a2:b3:6b:fd:19:de:a1:2e:b3:59:9f:69:8d:d8: 30:d8:c0:eb:b4:3d:d6:68:91:98:c3:4e:f0:28:92: ac:59:6b:c4:1f:0c:ee:86:17:df:20:00:5a:86:0e: 8d:f4:96:7f:ea:be:88:fa:2c:2b:9d:01:44:35:d2: 3d:ad:c8:66:97:5f:02:6c:e4:c4:65:fa:10:4f:ca: f6:9f:03:d7:b1:dc:39:56:bd:ea:54:27:ca:0c:13: d4:f6:45:2b:a3:65:7c:d3:a9:43:e8:08:c6:67:2d: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:B7:E8:DB:13:DD:F5:D7:85:C1:B1:7B:EE:A7:E4:C9:6C:2E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:59:4d:5e:0b:7f:83:d8:06:06:b0:59:99:4f:f2:86:1e:2f: be:57:58:5f:ec:d7:65:f1:db:d8:d2:be:f7:5a:38:d4:b9:63: 5d:1d:f8:6d:aa:34:ac:26:6b:b2:52:a0:66:bb:8a:64:04:a5: 16:5f:ab:9d:a6:4a:21:66:7a:bd:70:50:be:f4:f2:6b:ff:cf: 6a:7f:6b:84:2d:e0:b0:10:85:ed:8e:76:e0:75:86:8d:d9:ae: 81:a7:a5:4b:d6:c2:30:4c:62:b7:19:e9:8c:5c:61:6d:72:3c: 60:66:e1:1a:b9:07:b3:3f:44:70:c4:c0:59:53:9c:ed:6a:ef: 1a:0f:83:b2:5c:c1:b7:e1:dd:25:9d:e0:1b:39:0d:10:b4:91: af:29:55:fe:93:e1:61:22:58:83:03:f2:1e:0f:78:b3:f9:11: 43:f2:61:fb:fa:f2:07:6b:32:91:3e:89:96:b3:e7:2c:56:e4: 8d:62:52:51:eb:0b:60:87:9d:29:c4:eb:f8:e9:0a:cc:64:ed: fd:28:47:a4:05:20:0d:02:c9:f7:6b:f7:1c:56:9f:a1:e4:45: 60:a9:54:5b:03:f9:06:be:5f:1d:c6:b6:63:b6:43:fc:f6:6e: 42:0e:fd:dc:74:17:bf:c4:91:b7:ec:d2:30:81:d9:26:bc:bb: 13:91:47:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4eOgrbe2V6wSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk Nzk4MDJkMTAtN2QxMy00OGUyLWJmZDktNmVmYmNiMTlkYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogb9bABd8YvDuin+Fha7YXjbNBUa4Y73h1v1 6RkYBUYG16UubaoHrfi3+f76WJTpkJmkI8ipVM1mNXXLZeo2BQFqdVilm7xHvNgb 1Hq9U9RotG+J8gYOTSm39K6udu3za6qmkczbM8pHZUtV9stPLpIrNrJL341qPMxM KV6UnR795ZJEA4nP1POaN/ACAcKpl3rn+1fRorNr/RneoS6zWZ9pjdgw2MDrtD3W aJGYw07wKJKsWWvEHwzuhhffIABahg6N9JZ/6r6I+iwrnQFENdI9rchml18CbOTE ZfoQT8r2nwPXsdw5Vr3qVCfKDBPU9kUro2V806lD6AjGZy1V/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM8t+jbE93114XBsXvup+TJbC6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYThmOTc4MDUtZjMyYS0z OWVjLWEwYmYtOGI5NjFjOWRkMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFZTV4Lf4PYBgawWZlP8oYeL75XWF/s12Xx29jSvvdaONS5Y10d+G2q NKwma7JSoGa7imQEpRZfq52mSiFmer1wUL708mv/z2p/a4Qt4LAQhe2OduB1ho3Z roGnpUvWwjBMYrcZ6YxcYW1yPGBm4Rq5B7M/RHDEwFlTnO1q7xoPg7Jcwbfh3SWd 4Bs5DRC0ka8pVf6T4WEiWIMD8h4PeLP5EUPyYfv68gdrMpE+iZaz5yxW5I1iUlHr C2CHnSnE6/jpCsxk7f0oR6QFIA0Cyfdr9xxWn6HkRWCpVFsD+Qa+Xx3GtmO2Q/z2 bkIO/dx0F7/Ekbfs0jCB2Sa8uxORR9A= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:40 2026 by rpki-client