$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: OB0Oc0Z8iJapLg5grmxtlU5KyY8zoDWE+UdJJGzW3zE= Subject key identifier: 88:06:B8:B4:5C:06:28:F9:44:03:C9:1E:20:E4:EF:B5:80:B6:7E:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A99592E90ECD9EDB11000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:99:59:2e:90:ec:d9:ed:b1:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cb020ce6-8321-4ba1-96fc-0828cdf48bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:95:23:1c:ff:f0:50:fd:92:ea:b8:8c:55: 8d:d7:38:fd:ec:64:87:74:eb:a9:a6:48:66:58:0f: 19:7d:5f:32:f5:c6:db:ce:5b:a8:b2:fc:b4:08:70: 6f:b3:95:fd:aa:fd:b0:8d:64:89:22:ce:16:2b:d6: 40:d6:9f:db:3d:ef:46:aa:0c:67:8c:99:ae:83:3f: 71:76:73:d3:b6:26:7b:78:7b:72:ec:9e:93:9c:f2: 77:0d:ee:2f:24:c5:0c:56:d0:01:78:01:e3:d0:8f: e1:76:a2:21:a5:86:9c:8e:c9:a6:12:0f:dd:9f:62: 49:70:79:f0:2d:6f:2a:71:3e:cd:5e:a7:96:12:19: 78:c7:06:a5:3d:09:61:52:de:12:d6:e3:f5:8d:3a: a7:05:9d:f9:f5:08:12:40:25:ab:e4:24:54:43:96: 6e:2a:d1:94:65:b7:1b:59:97:e0:1d:00:32:52:d5: 4e:e7:dc:3b:c1:54:d0:71:e9:7f:b9:57:63:f1:ad: 02:9b:85:48:90:43:43:6e:63:bd:ef:ab:98:47:8a: 2f:62:c3:d5:34:6e:05:bf:9f:a1:9c:a5:49:6e:a9: 05:3a:67:e6:e3:73:d8:89:9a:6f:83:7d:a2:9d:7c: f3:7a:0c:80:da:23:1e:bb:80:ca:af:66:77:03:ea: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:06:B8:B4:5C:06:28:F9:44:03:C9:1E:20:E4:EF:B5:80:B6:7E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:53:d4:f9:db:a4:53:8c:06:7a:8f:40:a5:6c:81:e9:50:4f: 3b:48:70:d2:3f:e5:e6:d8:3c:3a:2f:6b:66:39:e3:d2:c7:92: 39:77:38:3d:6c:c6:92:b0:d9:36:b0:03:65:9a:dc:1b:9b:bc: 78:d2:9f:10:e0:3b:b2:1e:4f:88:9f:1a:8d:d8:a9:15:49:0f: 6f:88:06:62:29:d9:26:fd:44:23:ac:fa:c3:d2:22:bb:a7:78: 29:27:16:f2:62:79:ad:43:47:7d:bb:97:5f:7f:4d:bc:1f:83: 8b:a5:a9:f3:05:65:94:a7:be:51:17:5c:62:f1:20:b9:63:3d: 61:84:12:dc:96:66:1c:14:7f:89:95:bb:82:44:fc:ef:ae:e3: 32:1b:8e:44:e7:6f:68:5a:05:0a:9d:18:60:ae:77:7a:6b:e8: dd:4e:21:b5:c7:0c:da:33:0f:52:df:80:5d:75:03:5e:13:31: e4:5c:4e:52:17:35:2e:97:c1:0c:80:4c:87:70:18:d1:4a:83: f9:d6:f3:a0:7f:d2:20:3e:5d:08:2f:13:02:8e:a4:d5:59:00: 1d:14:a0:ff:2b:27:50:b0:b9:c0:d3:54:53:6c:5e:a5:f2:ba: 89:62:bb:31:0c:25:e7:5d:5d:36:3e:43:82:20:ef:91:54:15: b9:89:40:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCplZLpDs2e2xEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2IwMjBjZTYtODMyMS00YmExLTk2ZmMtMDgyOGNkZjQ4YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz06VIxz/8FD9kuq4jFWN1zj97GSHdOuppkhm WA8ZfV8y9cbbzluosvy0CHBvs5X9qv2wjWSJIs4WK9ZA1p/bPe9GqgxnjJmugz9x dnPTtiZ7eHty7J6TnPJ3De4vJMUMVtABeAHj0I/hdqIhpYacjsmmEg/dn2JJcHnw LW8qcT7NXqeWEhl4xwalPQlhUt4S1uP1jTqnBZ359QgSQCWr5CRUQ5ZuKtGUZbcb WZfgHQAyUtVO59w7wVTQcel/uVdj8a0Cm4VIkENDbmO976uYR4ovYsPVNG4Fv5+h nKVJbqkFOmfm43PYiZpvg32inXzzegyA2iMeu4DKr2Z3A+rVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgGuLRcBij5RAPJHiDk77WAtn76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpT1PnbpFOMBnqPQKVsgelQTztIcNI/5ebYPDova2Y549LHkjl3OD1s xpKw2TawA2Wa3BubvHjSnxDgO7IeT4ifGo3YqRVJD2+IBmIp2Sb9RCOs+sPSIrun eCknFvJiea1DR327l19/Tbwfg4ulqfMFZZSnvlEXXGLxILljPWGEEtyWZhwUf4mV u4JE/O+u4zIbjkTnb2haBQqdGGCud3pr6N1OIbXHDNozD1LfgF11A14TMeRcTlIX NS6XwQyATIdwGNFKg/nW86B/0iA+XQgvEwKOpNVZAB0UoP8rJ1CwucDTVFNsXqXy uoliuzEMJeddXTY+Q4Ig75FUFbmJQDY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:05:47 2026 by rpki-client