$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace4403c-10f2-368c-8b2d-d374682d4932.roa File: ace4403c-10f2-368c-8b2d-d374682d4932.roa (raw, json) Hash identifier: 4iRR1JBp7xMjJC9adT+p36BynRs8+yg1XHtFTJ5OOaY= Subject key identifier: 44:4C:99:FF:BF:39:03:5D:5E:CD:46:0D:5E:AF:E6:78:B1:9B:ED:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D0A778D9F83DEE8E0940BA800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace4403c-10f2-368c-8b2d-d374682d4932.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 98.17.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:8d:9f:83:de:e8:e0:94:0b:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=791e05e9-283c-4923-a10e-e54347023544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:bf:7a:bc:b1:b2:b5:c6:46:aa:d4:f1:4f: aa:bc:d3:e6:28:1d:a3:ef:95:e3:8c:75:24:cb:da: 99:8c:bf:3d:d0:8d:ec:5b:b6:a5:12:b8:49:e6:b0: cb:4e:f9:e2:16:da:7a:86:05:29:a4:94:4e:61:32: 4b:80:7a:7c:27:1b:e6:df:ba:06:08:46:ec:04:95: 0b:c8:a8:a0:81:c1:51:3e:1a:5e:c1:72:bb:d9:07: ca:66:df:71:dd:60:2c:97:58:66:10:c8:9f:39:a8: ea:ca:10:d5:15:57:f9:1c:73:b9:d7:a5:15:94:df: bb:76:fe:fd:fd:04:d0:c8:d5:ff:8a:57:d2:7d:0f: 26:d3:41:40:7f:18:f0:d0:43:0f:ab:25:d7:61:b9: e3:45:c6:cb:a8:cd:cb:4c:32:5b:f3:db:55:65:34: 85:ba:29:4c:4b:d7:28:b9:4b:77:73:7c:b2:48:af: 2b:ae:a5:a8:7d:02:86:99:64:c9:d5:d3:14:ec:b1: 1c:6b:66:dd:e5:19:49:23:9d:2b:12:49:8f:cf:13: 58:b2:14:87:47:1d:09:39:9f:13:40:0a:65:dd:20: 02:c0:21:44:3c:f3:e7:31:dc:87:8b:ce:3d:c0:23: 3d:c3:8e:52:65:c5:25:2b:5b:f8:c9:e3:31:93:da: c7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:99:FF:BF:39:03:5D:5E:CD:46:0D:5E:AF:E6:78:B1:9B:ED:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace4403c-10f2-368c-8b2d-d374682d4932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:79:cf:91:78:ce:1f:8f:65:db:ea:5f:c7:b7:e8:42:24:20: 2b:09:4f:f6:92:62:5b:91:3c:cb:f1:1d:45:77:de:f6:95:c7: c1:fb:d4:75:fc:e7:a0:5c:4b:ce:62:ea:1f:8e:13:9c:a6:d9: 4a:af:91:44:93:ef:a3:08:d0:26:3d:f9:5f:2d:f8:3a:b8:b6: 60:59:8d:f6:17:41:b3:87:bb:30:eb:09:1a:d3:6b:21:63:1d: 63:e5:4c:2a:54:fa:00:a3:dc:5a:ac:a3:4d:cc:04:ad:ff:41: 3e:04:65:8b:95:93:b2:e3:34:19:50:6c:44:f1:c5:d3:4e:80: a5:5d:b1:86:5c:9a:d7:c0:1d:c6:60:50:6c:7c:50:4c:e6:a0: 7c:00:f5:eb:c2:70:c0:08:41:85:2b:9d:43:02:f3:84:0f:78: d5:0a:e2:80:05:27:61:33:9c:21:40:64:b8:8a:64:50:ac:f1: 41:a9:ce:b2:df:22:12:55:0e:cd:71:ca:d2:d9:e8:fe:e2:64: e0:5f:42:46:2f:66:41:aa:d7:e0:17:c9:d9:9e:d2:e9:f0:0e: 83:49:b3:45:bc:88:4f:6a:e0:da:b5:d6:d5:2e:e2:cd:55:8e: 0b:1b:99:03:a8:0e:f7:87:f3:e9:a8:c9:36:01:f1:e7:bb:7a: a5:76:f3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd42fg97o4JQLqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NzkxZTA1ZTktMjgzYy00OTIzLWExMGUtZTU0MzQ3MDIzNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpa/eryxsrXGRqrU8U+qvNPmKB2j75XjjHUk y9qZjL890I3sW7alErhJ5rDLTvniFtp6hgUppJROYTJLgHp8Jxvm37oGCEbsBJUL yKiggcFRPhpewXK72QfKZt9x3WAsl1hmEMifOajqyhDVFVf5HHO516UVlN+7dv79 /QTQyNX/ilfSfQ8m00FAfxjw0EMPqyXXYbnjRcbLqM3LTDJb89tVZTSFuilMS9co uUt3c3yySK8rrqWofQKGmWTJ1dMU7LEca2bd5RlJI50rEkmPzxNYshSHRx0JOZ8T QApl3SACwCFEPPPnMdyHi849wCM9w45SZcUlK1v4yeMxk9rHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERMmf+/OQNdXs1GDV6v5nixm+0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNlNDQwM2MtMTBmMi0z NjhjLThiMmQtZDM3NDY4MmQ0OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB5z5F4zh+PZdvqX8e36EIkICsJT/aSYluRPMvxHUV33vaVx8H71HX8 56BcS85i6h+OE5ym2UqvkUST76MI0CY9+V8t+Dq4tmBZjfYXQbOHuzDrCRrTayFj HWPlTCpU+gCj3Fqso03MBK3/QT4EZYuVk7LjNBlQbETxxdNOgKVdsYZcmtfAHcZg UGx8UEzmoHwA9evCcMAIQYUrnUMC84QPeNUK4oAFJ2EznCFAZLiKZFCs8UGpzrLf IhJVDs1xytLZ6P7iZOBfQkYvZkGq1+AXydme0unwDoNJs0W8iE9q4Nq11tUu4s1V jgsbmQOoDveH8+moyTYB8ee7eqV280k= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:32 2026 by rpki-client