$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd766fd5-a818-3907-934f-15bdf11cd3a0.roa File: bd766fd5-a818-3907-934f-15bdf11cd3a0.roa (raw, json) Hash identifier: X1mFaII+LV8/dUOkkGcx9Dl7QhIZ6OVth2lM1vq8yjk= Subject key identifier: 10:99:2B:6F:77:73:64:E8:D0:75:C6:B1:6D:3F:9B:C6:D6:7C:29:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE4E1B5BD23FC358DDE78 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd766fd5-a818-3907-934f-15bdf11cd3a0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 98.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e4:e1:b5:bd:23:fc:35:8d:de:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=913b723f-483e-4383-9333-9a295067c0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:11:16:63:22:05:21:5c:d6:19:ea:63:ca: 58:ee:fb:ad:8e:9a:b3:d6:52:55:16:8d:48:7a:bc: 7b:46:f9:2f:c5:7d:c9:b9:f3:ea:9a:41:20:8d:a6: 0b:90:e1:70:e8:a2:c2:20:f7:2e:76:3d:da:43:73: cf:b9:37:6c:88:07:a5:16:56:4a:94:57:83:2d:27: 2c:eb:c2:9c:79:38:f1:f5:1a:4d:7f:a8:9e:46:f3: 10:67:9c:5e:8b:7e:fb:33:67:66:de:72:2c:bf:33: 8e:80:03:39:28:e5:53:bb:d1:88:99:64:16:cf:45: 62:02:5b:ad:e9:00:4b:27:6c:d9:e6:54:83:fb:70: b1:56:6f:d5:76:d3:c2:7c:97:64:48:21:65:6d:21: ba:f2:89:4d:9a:2c:42:e1:c1:35:da:28:fb:f5:d9: 86:88:ae:ec:87:8d:f2:14:73:f3:70:58:db:05:06: 0d:7d:c6:8d:d1:1e:1e:8f:86:31:63:ad:63:06:2d: eb:03:28:16:e2:8e:70:a4:01:48:c1:13:3a:68:7e: 57:7b:f4:f5:87:66:41:a9:e5:74:a0:fd:d2:a2:e9: 5b:8d:f6:c9:61:b6:8e:ca:f8:89:70:da:8a:af:71: 7f:7b:a6:1b:98:06:3e:89:b5:1c:46:cd:c9:71:f3: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:99:2B:6F:77:73:64:E8:D0:75:C6:B1:6D:3F:9B:C6:D6:7C:29:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd766fd5-a818-3907-934f-15bdf11cd3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:88:a4:a3:33:fc:05:c0:ad:4a:cb:06:6b:c2:d6:6a:3d:3b: af:98:6b:b0:f2:1a:08:8d:80:a0:00:53:a2:5a:d9:be:71:ca: 41:f9:5f:92:8b:32:22:6d:57:fd:70:23:2c:b6:4d:c5:a8:d5: ee:30:3f:54:11:76:23:ba:86:7c:5b:3f:ac:0d:32:48:de:34: 33:d9:30:7f:a2:79:5c:34:f4:11:c4:31:e8:af:3d:bc:5c:5c: c4:2b:24:d6:8d:be:e7:f4:88:f4:8d:c4:a8:29:c6:a3:9e:14: 54:dc:fb:e4:36:44:7a:65:73:9e:e0:14:12:7e:00:b9:61:f3: db:db:9d:c5:fa:3f:fc:d4:7d:05:c0:c7:86:88:da:c9:bb:9d: c6:a0:06:a7:fe:9f:85:c3:65:01:09:12:06:eb:ad:62:3e:f9: 16:ce:c8:e0:b5:fb:9c:c3:40:d3:d1:67:bf:7b:ef:0c:65:c6: f2:39:4d:7e:46:5c:e3:92:40:6a:93:d6:b4:00:9e:1e:a4:30: af:30:f7:c6:d9:e9:e4:d8:88:ce:ba:e5:56:7f:2e:a6:b1:d3: 94:b1:13:70:51:03:73:64:d6:16:0b:1e:1f:95:a5:84:d9:62: a6:1b:74:74:66:b6:96:7f:0e:d6:c6:8d:88:33:a9:b1:b1:f6: d4:5f:81:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+Thtb0j/DWN3ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTEzYjcyM2YtNDgzZS00MzgzLTkzMzMtOWEyOTUwNjdjMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvycRFmMiBSFc1hnqY8pY7vutjpqz1lJVFo1I erx7RvkvxX3JufPqmkEgjaYLkOFw6KLCIPcudj3aQ3PPuTdsiAelFlZKlFeDLScs 68KceTjx9RpNf6ieRvMQZ5xei377M2dm3nIsvzOOgAM5KOVTu9GImWQWz0ViAlut 6QBLJ2zZ5lSD+3CxVm/VdtPCfJdkSCFlbSG68olNmixC4cE12ij79dmGiK7sh43y FHPzcFjbBQYNfcaN0R4ej4YxY61jBi3rAygW4o5wpAFIwRM6aH5Xe/T1h2ZBqeV0 oP3SoulbjfbJYbaOyviJcNqKr3F/e6YbmAY+ibUcRs3JcfOmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCZK293c2To0HXGsW0/m8bWfCmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ3NjZmZDUtYTgxOC0z OTA3LTkzNGYtMTViZGYxMWNkM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6IpKMz/AXArUrLBmvC1mo9O6+Ya7DyGgiNgKAAU6Ja2b5xykH5X5KL MiJtV/1wIyy2TcWo1e4wP1QRdiO6hnxbP6wNMkjeNDPZMH+ieVw09BHEMeivPbxc XMQrJNaNvuf0iPSNxKgpxqOeFFTc++Q2RHplc57gFBJ+ALlh89vbncX6P/zUfQXA x4aI2sm7ncagBqf+n4XDZQEJEgbrrWI++RbOyOC1+5zDQNPRZ7977wxlxvI5TX5G XOOSQGqT1rQAnh6kMK8w98bZ6eTYiM665VZ/Lqax05SxE3BRA3Nk1hYLHh+VpYTZ YqYbdHRmtpZ/DtbGjYgzqbGx9tRfgb0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:09 2026 by rpki-client