$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9ddc74b-f753-3e5a-8f8c-4d6674026c1b.roa File: d9ddc74b-f753-3e5a-8f8c-4d6674026c1b.roa (raw, json) Hash identifier: V9gz6qDEAedX3/K7+QoFYInFINc/1LIxkPvagMpS1MU= Subject key identifier: 96:68:82:BD:A6:1B:CC:98:BA:AF:B3:88:0D:CF:56:C4:BD:B7:25:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D09124BE62AEA773C4A3C8AE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9ddc74b-f753-3e5a-8f8c-4d6674026c1b.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:4b:e6:2a:ea:77:3c:4a:3c:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=12ed7b41-88a9-4483-adc8-dddfb1f12e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:4f:14:fd:53:59:78:db:84:b2:4a:e0:2b: 52:34:c6:b8:df:d7:7c:40:02:0b:65:c1:e1:89:de: fd:26:c7:22:10:73:d1:2b:6a:9a:80:31:c0:02:2a: 63:c2:0f:87:d2:85:fe:c8:aa:a7:18:05:f8:89:b1: cb:53:b9:4a:c2:0d:ea:59:c3:a2:39:b1:72:c6:11: 8c:0a:c4:9f:80:30:68:29:38:05:29:23:d4:09:7f: c6:27:78:89:cc:83:3a:89:f0:b3:52:4a:ad:d3:a1: d5:c6:be:97:bc:e3:48:ab:af:36:7a:2e:a4:c1:20: 5e:31:12:c9:da:ab:f3:eb:0e:3c:66:2a:c0:4b:bf: b3:44:09:57:5a:ac:fd:76:98:49:37:dc:e7:1e:91: 47:3d:32:91:3b:a8:aa:5f:2e:27:b6:93:92:92:be: 2b:b0:15:1d:01:c9:a1:10:56:ff:f5:55:5d:98:8a: 30:59:fc:98:92:ba:b0:9e:45:93:a6:56:57:64:af: a9:35:60:9b:c9:fa:08:62:d3:7f:21:3c:ae:1c:d5: cb:e2:7c:d7:85:4e:16:dc:ae:14:9b:07:5b:69:6e: 78:48:a5:3a:56:01:3c:5a:04:05:26:d5:dc:61:32: 3c:3b:2a:f1:45:21:2a:4e:79:dc:d8:1a:78:b3:49: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:68:82:BD:A6:1B:CC:98:BA:AF:B3:88:0D:CF:56:C4:BD:B7:25:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9ddc74b-f753-3e5a-8f8c-4d6674026c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a7:3b:14:bc:d9:31:80:b1:67:88:0d:9e:61:01:f3:0d:33: ef:37:c5:51:81:e3:9b:02:ad:e3:6d:c3:4d:92:48:ce:25:2d: e7:0f:b5:ef:a3:d8:63:3e:30:69:0d:2c:0a:1e:69:06:3f:50: 2a:ff:8c:cd:74:bf:8d:79:25:aa:79:d7:9c:99:c5:13:e7:85: ef:27:84:bb:a7:65:d2:ed:35:b7:9c:4b:ac:2b:2e:d6:29:84: a9:96:05:89:4b:5d:8e:b9:d3:5c:96:af:58:a9:ee:45:37:e7: 25:3b:98:bf:cf:17:a1:24:92:61:8c:27:8b:81:65:d0:1e:bb: 1f:09:99:7d:f5:d4:68:59:b9:45:06:72:e6:a7:6d:f7:c4:23: 90:af:0a:f8:f5:f3:8b:60:29:2a:ff:f7:a5:f4:56:8d:10:08: dc:7e:40:10:32:ac:7f:94:00:53:95:70:00:5a:18:a9:57:75: 26:76:25:7e:d5:89:88:20:82:46:4a:5e:94:a1:c9:06:cf:76: d9:7a:66:7d:f1:31:a9:f0:d9:9b:ca:e0:fb:a6:1d:5c:96:d3: 3f:3e:1d:9f:4b:0f:b8:16:9d:26:4d:a4:0a:fc:57:c3:f9:92: ec:a4:c3:60:79:f8:ee:3a:e8:71:a9:df:8c:52:7e:85:57:ba: 79:28:14:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEkvmKup3PEo8iuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTJlZDdiNDEtODhhOS00NDgzLWFkYzgtZGRkZmIxZjEyZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiVPFP1TWXjbhLJK4CtSNMa439d8QAILZcHh id79JsciEHPRK2qagDHAAipjwg+H0oX+yKqnGAX4ibHLU7lKwg3qWcOiObFyxhGM CsSfgDBoKTgFKSPUCX/GJ3iJzIM6ifCzUkqt06HVxr6XvONIq682ei6kwSBeMRLJ 2qvz6w48ZirAS7+zRAlXWqz9dphJN9znHpFHPTKRO6iqXy4ntpOSkr4rsBUdAcmh EFb/9VVdmIowWfyYkrqwnkWTplZXZK+pNWCbyfoIYtN/ITyuHNXL4nzXhU4W3K4U mwdbaW54SKU6VgE8WgQFJtXcYTI8OyrxRSEqTnnc2Bp4s0kODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZogr2mG8yYuq+ziA3PVsS9tyWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDlkZGM3NGItZjc1My0z ZTVhLThmOGMtNGQ2Njc0MDI2YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+nOxS82TGAsWeIDZ5hAfMNM+83xVGB45sCreNtw02SSM4lLecPte+j 2GM+MGkNLAoeaQY/UCr/jM10v415Jap515yZxRPnhe8nhLunZdLtNbecS6wrLtYp hKmWBYlLXY6501yWr1ip7kU35yU7mL/PF6EkkmGMJ4uBZdAeux8JmX311GhZuUUG cuanbffEI5CvCvj184tgKSr/96X0Vo0QCNx+QBAyrH+UAFOVcABaGKlXdSZ2JX7V iYgggkZKXpShyQbPdtl6Zn3xManw2ZvK4PumHVyW0z8+HZ9LD7gWnSZNpAr8V8P5 kuykw2B5+O466HGp34xSfoVXunkoFKU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:26 2026 by rpki-client