$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa File: d4d720d3-846d-3239-b157-4b6a59742d0f.roa (raw, json) Hash identifier: V2zLbyAnj+jTLKF40T/4DMi8bFQ+BTuPZjnaKOzY6Wc= Subject key identifier: 2C:3A:1D:03:C1:64:42:6E:76:E8:16:75:62:2C:EE:BF:86:13:73:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1707DC22AACB0AF6EF5D2600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.22.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:dc:22:aa:cb:0a:f6:ef:5d:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=7baf97c3-7ff7-4fff-9c94-fc73e8301664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:f9:41:e8:af:ed:42:46:75:d4:27:53:43: 87:87:a3:09:99:dd:c3:f0:10:05:d6:17:03:a8:9d: e3:f3:1c:7a:d1:15:89:0a:66:bc:a6:d6:2f:93:64: 88:cd:c4:ed:f6:1c:63:28:be:64:0b:4e:bb:bc:b3: c8:68:cc:f3:1c:cc:5b:a9:32:65:aa:64:32:55:a1: 34:21:2e:13:9f:f3:8e:82:6c:ef:43:64:be:49:c0: 21:f9:48:3e:5a:ba:e4:63:0f:7e:01:6f:e0:b6:73: 97:1e:d7:10:d1:46:0c:ea:59:17:f0:2c:fb:6a:8a: 09:90:c7:f3:48:82:fb:35:b9:83:61:4a:ac:ab:56: 16:1e:1b:63:01:d6:f2:3d:22:b8:17:d6:7a:14:c8: c1:e9:65:bd:cd:d9:e7:64:a0:ee:49:cf:d7:dc:25: ae:69:25:90:e4:8b:f4:7d:0d:ca:6c:8a:b4:57:a3: 80:e1:0b:d2:fa:96:93:af:c1:9d:c4:8e:0b:31:26: 4c:3b:9c:eb:dd:9f:ab:7d:16:aa:88:af:3a:02:17: 1d:70:f1:b2:bb:32:26:df:a8:69:63:a1:a0:ff:fd: 1f:dd:89:76:e3:64:f9:f5:af:9b:79:5b:0c:a3:fe: 71:85:0b:8d:eb:cf:cd:1e:9f:64:fe:8a:08:fb:f8: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:1D:03:C1:64:42:6E:76:E8:16:75:62:2C:EE:BF:86:13:73:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0d:de:42:10:dd:04:19:72:43:3c:14:97:ce:9f:ac:60:2e: 31:e0:df:e9:9d:a1:0b:c6:98:b7:4f:af:37:14:6f:7a:b6:91: c2:bd:f1:77:e8:99:19:72:09:a6:f3:d0:d6:d3:b0:be:c2:7e: 2c:fe:84:f9:4f:0a:4b:10:35:0b:2a:25:d3:4f:8f:fc:f8:8e: e5:57:47:d2:35:f8:0d:7d:bb:2f:10:92:24:37:13:36:b8:a1: fc:42:7e:bd:ae:7e:39:51:dd:18:23:ba:88:33:89:c8:91:77: 29:eb:1e:2f:9e:d2:ce:88:9b:6a:01:af:39:89:63:30:33:1d: e3:97:e0:6c:72:84:18:4b:0d:c9:f5:b2:53:8f:28:a3:71:2b: 1f:fa:2a:a9:04:95:38:4a:14:db:1a:e5:3f:0c:bf:1d:c0:8a: d1:97:9e:83:fd:40:33:34:ad:e1:da:18:d8:ec:c3:c0:7b:ec: ca:47:dc:07:ee:88:0a:f3:89:95:41:2a:c4:82:49:2c:a8:23: bc:af:06:37:b7:b6:ce:98:f4:44:62:f2:e8:55:3d:b8:47:d4: c0:f3:09:90:80:6e:9e:d9:0d:a0:43:2d:aa:02:0f:74:d3:a7: dd:f3:96:fe:82:4b:fa:87:8a:de:93:bd:df:eb:12:89:b6:b8: 81:52:cc:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9wiqssK9u9dJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk N2JhZjk3YzMtN2ZmNy00ZmZmLTljOTQtZmM3M2U4MzAxNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7H5Qeiv7UJGddQnU0OHh6MJmd3D8BAF1hcD qJ3j8xx60RWJCma8ptYvk2SIzcTt9hxjKL5kC067vLPIaMzzHMxbqTJlqmQyVaE0 IS4Tn/OOgmzvQ2S+ScAh+Ug+WrrkYw9+AW/gtnOXHtcQ0UYM6lkX8Cz7aooJkMfz SIL7NbmDYUqsq1YWHhtjAdbyPSK4F9Z6FMjB6WW9zdnnZKDuSc/X3CWuaSWQ5Iv0 fQ3KbIq0V6OA4QvS+paTr8GdxI4LMSZMO5zr3Z+rfRaqiK86AhcdcPGyuzIm36hp Y6Gg//0f3Yl242T59a+beVsMo/5xhQuN68/NHp9k/ooI+/gblwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw6HQPBZEJudugWdWIs7r+GE3N+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkNzIwZDMtODQ2ZC0z MjM5LWIxNTctNGI2YTU5NzQyZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4N3kIQ3QQZckM8FJfOn6xgLjHg3+mdoQvGmLdPrzcUb3q2kcK98Xfo mRlyCabz0NbTsL7Cfiz+hPlPCksQNQsqJdNPj/z4juVXR9I1+A19uy8QkiQ3Eza4 ofxCfr2ufjlR3RgjuogziciRdynrHi+e0s6Im2oBrzmJYzAzHeOX4GxyhBhLDcn1 slOPKKNxKx/6KqkElThKFNsa5T8Mvx3AitGXnoP9QDM0reHaGNjsw8B77MpH3Afu iArziZVBKsSCSSyoI7yvBje3ts6Y9ERi8uhVPbhH1MDzCZCAbp7ZDaBDLaoCD3TT p93zlv6CS/qHit6Tvd/rEom2uIFSzNY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:05:48 2026 by rpki-client