$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa File: b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa (raw, json) Hash identifier: QgGH/BYBeTu2a1heO3zlJCps6RFZEofPFA+A1vEOk/c= Subject key identifier: B9:0E:3A:61:A4:2D:9B:22:B0:A5:11:37:03:1E:7B:31:01:35:E0:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A99A6B637BB2CB7832680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.20.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:99:a6:b6:37:bb:2c:b7:83:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9852a877-66e1-47e1-8d26-b06c5232393e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:09:74:17:e1:fd:c1:c7:49:a3:33:f5:7e: d1:80:67:33:f1:f8:5e:1e:60:64:06:01:c7:bf:36: 4b:88:64:7f:53:8c:26:d2:1f:f5:97:d7:8d:d2:40: a3:17:23:70:65:f6:e3:9f:88:a0:c3:01:1a:55:b7: d7:27:ee:d2:1e:c0:64:30:66:a8:70:3e:6f:87:4f: cc:06:6b:ff:30:93:be:22:d0:ed:4e:59:0e:a6:0f: 97:cf:57:78:1a:2c:24:6f:3c:a9:25:ad:65:3f:ac: 31:de:15:5b:0e:b1:71:60:c2:81:c9:42:06:8b:c6: b0:de:f2:68:f8:1b:19:6c:9a:00:f8:13:44:02:56: a3:dc:eb:e0:59:ec:12:2d:49:c2:b2:a3:59:77:33: 2d:ba:cc:67:c9:d3:b6:66:56:37:69:1c:24:a1:b9: 8d:88:e7:76:e6:82:95:f0:35:2f:d9:16:f2:ab:e2: d4:c9:b5:9e:a4:a6:ff:42:f6:4a:17:dc:5a:54:50: 46:04:6a:4a:61:9f:f6:a5:ed:71:4f:5c:99:04:f4: 9b:e0:33:90:48:73:27:4e:4a:a5:f9:ed:fc:ac:8b: b2:ce:af:7b:a3:9d:40:bf:86:7c:15:96:ca:10:68: 44:4a:ca:9a:19:f4:79:ff:ad:54:e4:af:83:34:a2: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:3A:61:A4:2D:9B:22:B0:A5:11:37:03:1E:7B:31:01:35:E0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:90:5f:09:50:bd:e2:4c:6f:72:4c:60:c7:cc:e5:ff:4c:49: 8f:ab:f0:85:31:54:a5:f3:74:13:85:e0:b8:ff:23:5e:c1:07: de:04:af:66:09:69:bd:cf:dc:b2:23:a8:d8:e9:c5:d1:3d:64: c5:b7:b0:a8:eb:28:56:9b:ee:54:22:29:48:58:e1:78:80:e5: 71:86:63:65:bf:ef:34:6e:e0:e2:96:b4:3a:ad:be:69:13:81: a4:68:9e:40:45:cf:09:33:d7:8e:e9:81:3b:c7:fe:a1:71:c2: 9e:82:24:4d:dc:df:8f:eb:f2:e1:2b:3f:f6:f4:9b:bd:4b:84: ef:00:90:25:81:5f:7f:71:68:08:29:79:a6:0c:b0:0b:ab:a6: 6d:3c:13:96:3e:f3:4a:11:9e:41:2a:9b:97:61:ba:92:d2:31: 94:f5:2d:7e:c2:ae:c7:68:ce:5a:ba:28:b4:96:c5:24:72:da: cd:41:d8:d6:7e:15:cb:80:63:ea:df:f8:5d:b9:a2:4c:ec:0b: 6a:20:65:57:34:5c:91:d9:4d:2d:c0:62:d7:f8:cd:8b:43:04: a3:dc:17:ce:f8:83:97:1a:ac:2e:5e:32:e3:9f:61:40:87:5d: 5e:94:4a:a6:73:8d:7c:31:e4:1e:b6:3b:4a:20:7b:45:12:e4: 87:fe:61:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpmmtje7LLeDJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTg1MmE4NzctNjZlMS00N2UxLThkMjYtYjA2YzUyMzIzOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVMJdBfh/cHHSaMz9X7RgGcz8fheHmBkBgHH vzZLiGR/U4wm0h/1l9eN0kCjFyNwZfbjn4igwwEaVbfXJ+7SHsBkMGaocD5vh0/M Bmv/MJO+ItDtTlkOpg+Xz1d4GiwkbzypJa1lP6wx3hVbDrFxYMKByUIGi8aw3vJo +BsZbJoA+BNEAlaj3OvgWewSLUnCsqNZdzMtusxnydO2ZlY3aRwkobmNiOd25oKV 8DUv2Rbyq+LUybWepKb/QvZKF9xaVFBGBGpKYZ/2pe1xT1yZBPSb4DOQSHMnTkql +e38rIuyzq97o51Av4Z8FZbKEGhESsqaGfR5/61U5K+DNKJ39wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOOmGkLZsisKURNwMeezEBNeBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA2MzNlYjMtOGU1MS0z ZmZjLThhZjctZTBhNjVmMDBmODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKQXwlQveJMb3JMYMfM5f9MSY+r8IUxVKXzdBOF4Lj/I17BB94Er2YJ ab3P3LIjqNjpxdE9ZMW3sKjrKFab7lQiKUhY4XiA5XGGY2W/7zRu4OKWtDqtvmkT gaRonkBFzwkz147pgTvH/qFxwp6CJE3c34/r8uErP/b0m71LhO8AkCWBX39xaAgp eaYMsAurpm08E5Y+80oRnkEqm5dhupLSMZT1LX7Crsdozlq6KLSWxSRy2s1B2NZ+ FcuAY+rf+F25okzsC2ogZVc0XJHZTS3AYtf4zYtDBKPcF874g5carC5eMuOfYUCH XV6USqZzjXwx5B62O0oge0US5If+YQw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:45 2026 by rpki-client