$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa File: b9c73bea-e693-3d79-b258-a76ffb3f2510.roa (raw, json) Hash identifier: GXhX9OrwqweBnl57OWx3oI46Zkbiz/pHDUDdi2+dA3E= Subject key identifier: 48:B7:8B:1D:FC:AE:14:9F:FD:94:52:13:BB:32:1B:97:A3:60:69:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F875CA278ACE1AFEF6800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.16.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:87:5c:a2:78:ac:e1:af:ef:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=12a8afec-945e-444f-9ff2-9dc2aa590aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:78:c9:68:3a:26:31:e2:7a:b3:18:e0:70: 38:db:ba:5f:e4:54:5c:a8:4a:1b:87:b3:51:51:1e: 0b:6d:b6:c4:7e:92:78:5d:ac:20:f6:42:ca:91:04: c4:cb:52:25:b8:31:66:79:a0:42:ce:ad:5a:e1:40: 94:81:87:ca:07:a2:c5:f8:4f:e6:e4:08:2d:0f:9d: ad:63:6d:07:9f:a4:83:a2:3a:89:94:bb:a3:70:ba: c2:92:69:9c:a8:f7:2e:88:8d:09:b5:3c:b8:25:4c: 2a:af:a4:bc:e3:65:ca:ec:4b:f6:c8:c3:2a:df:8b: f2:a0:9d:95:1a:f4:8d:38:f6:ba:12:8a:b4:8f:26: 38:3c:41:3c:34:4f:db:98:bb:01:89:ba:99:e9:25: 90:8f:f5:5a:ce:2f:80:f2:b8:28:b0:e2:66:28:a8: 96:a3:28:df:1f:76:75:08:62:14:67:98:55:de:50: a2:76:6d:74:e8:42:27:cd:f6:42:c1:61:d1:07:b0: d4:c8:34:a5:f2:18:1f:0a:32:c7:b4:e4:3c:1b:1c: 04:4e:8d:46:42:3e:fc:cc:11:87:02:47:09:65:d5: 61:61:62:66:0f:d8:64:c4:41:56:2e:95:f5:bb:2a: c5:16:be:a4:1c:5b:00:5c:72:58:a5:1f:24:5b:a7: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B7:8B:1D:FC:AE:14:9F:FD:94:52:13:BB:32:1B:97:A3:60:69:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:15:e5:8b:d2:60:a3:5c:6d:32:b3:0d:f7:8d:0e:04:16:3a: 84:ea:6f:f6:12:29:dd:3e:6a:67:bc:99:59:6e:4d:bd:3d:1c: 16:c9:60:89:70:d7:32:84:5a:56:d3:48:75:20:42:23:f8:a8: bf:57:a3:bc:3d:f6:3f:48:f1:6d:5f:b5:65:5b:02:48:07:4f: 75:63:e2:79:3f:5e:ed:a7:bc:c0:69:17:f7:2b:f1:a9:04:2b: 5d:29:dc:ff:92:02:1a:7d:21:9c:e1:d9:f3:03:1c:28:a7:81: d8:2c:a9:6e:b7:61:aa:cf:db:f4:15:03:28:fd:c5:ab:e8:f8: c4:24:b5:0d:bc:96:0a:e4:e6:b5:5b:3d:12:07:4f:ee:ed:5e: bd:e4:a2:07:2b:02:6f:6e:ae:2c:90:77:d7:e6:8e:03:4c:83: 49:79:c5:7f:2f:23:b6:21:83:59:a7:ea:4d:7d:61:11:b4:01: d9:1d:b3:5a:fb:8f:87:91:58:69:6f:2f:2f:69:8d:c3:d1:b6: c4:31:b4:90:60:62:5b:40:57:4f:6f:7a:cf:2a:98:48:aa:6a: ef:ec:86:9a:ef:82:0a:37:0b:8d:57:2e:c9:2c:3d:16:a0:d2: 0f:c2:8a:3b:5b:78:34:83:71:58:1e:0a:91:b7:76:8d:28:5f: 3a:a8:05:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4dconis4a/vaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MTJhOGFmZWMtOTQ1ZS00NDRmLTlmZjItOWRjMmFhNTkwYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZd4yWg6JjHierMY4HA427pf5FRcqEobh7NR UR4LbbbEfpJ4Xawg9kLKkQTEy1IluDFmeaBCzq1a4UCUgYfKB6LF+E/m5AgtD52t Y20Hn6SDojqJlLujcLrCkmmcqPcuiI0JtTy4JUwqr6S842XK7Ev2yMMq34vyoJ2V GvSNOPa6Eoq0jyY4PEE8NE/bmLsBibqZ6SWQj/Vazi+A8rgosOJmKKiWoyjfH3Z1 CGIUZ5hV3lCidm106EInzfZCwWHRB7DUyDSl8hgfCjLHtOQ8GxwETo1GQj78zBGH AkcJZdVhYWJmD9hkxEFWLpX1uyrFFr6kHFsAXHJYpR8kW6dMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi3ix38rhSf/ZRSE7syG5ejYGnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjljNzNiZWEtZTY5My0z ZDc5LWIyNTgtYTc2ZmZiM2YyNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQV5YvSYKNcbTKzDfeNDgQWOoTqb/YSKd0+ame8mVluTb09HBbJYIlw 1zKEWlbTSHUgQiP4qL9Xo7w99j9I8W1ftWVbAkgHT3Vj4nk/Xu2nvMBpF/cr8akE K10p3P+SAhp9IZzh2fMDHCingdgsqW63YarP2/QVAyj9xavo+MQktQ28lgrk5rVb PRIHT+7tXr3kogcrAm9uriyQd9fmjgNMg0l5xX8vI7Yhg1mn6k19YRG0Adkds1r7 j4eRWGlvLy9pjcPRtsQxtJBgYltAV09ves8qmEiqau/shprvggo3C41XLsksPRag 0g/CijtbeDSDcVgeCpG3do0oXzqoBZI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:44 2026 by rpki-client