$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa File: de0d850c-b09a-3f82-9faf-277618cc2665.roa (raw, json) Hash identifier: BoKrKRVjLvAu+65cgAJIBV3GVPoNbgB02bl84ya7XFU= Subject key identifier: 8D:6A:24:4D:57:09:FB:40:B8:02:6B:03:C3:15:5C:16:49:DC:65:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A3BF117E80405032287C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.23.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3b:f1:17:e8:04:05:03:22:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c90f5556-d538-4fb9-8503-b0720850f814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:f5:d9:08:ab:84:e0:d7:8b:97:6d:08:63: c5:69:eb:ea:81:e4:54:47:a3:a8:c4:15:3d:41:22: 07:22:2d:aa:d4:a8:c7:62:95:7d:c3:b4:cd:97:f8: b2:dd:b7:ff:cf:56:32:66:e8:a4:c2:2c:64:7f:12: 0f:7a:c6:cd:33:ce:da:16:e2:66:11:09:9f:c1:4a: 77:3b:e7:6f:e8:08:97:2f:bd:de:33:a3:6f:b1:ee: b7:44:f5:d9:a2:27:da:e1:a6:9f:61:be:31:5f:e2: 50:4a:cb:1a:8b:4d:98:4f:f9:f4:2b:6b:ae:49:af: cf:e3:ee:da:5f:f2:4f:95:f6:86:e5:82:35:98:7f: a2:84:cb:df:b0:09:e8:76:5b:a1:07:6c:36:22:7b: ed:28:f7:dc:ec:bd:ca:66:70:c5:d2:d9:ba:94:db: 5a:66:95:d0:b9:c4:ac:88:5f:b8:73:c0:0a:7f:6f: fb:48:30:ac:5b:ce:c6:23:f5:5d:58:a5:81:fb:e2: 88:c4:c4:0c:de:c4:15:e6:32:6f:05:1a:ff:d8:ca: b6:b2:17:4d:77:50:b4:d6:23:53:fd:9d:1a:74:ca: f3:38:aa:0a:d6:f8:bb:72:e5:b0:43:67:d1:5f:d0: da:d8:ef:bd:0f:6c:a7:73:b5:fb:e5:14:3a:7e:77: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:24:4D:57:09:FB:40:B8:02:6B:03:C3:15:5C:16:49:DC:65:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0f:3a:de:04:e7:4a:c8:f4:35:74:bd:d2:64:c2:b2:48:e8: 0d:a3:54:c5:52:59:ba:f5:aa:5a:d7:8d:8b:db:2f:c9:40:75: 1f:b2:16:27:66:f7:98:b8:b9:02:f6:40:a3:15:6c:c0:fe:22: 25:7e:99:69:ba:3f:d3:35:4a:f5:b2:3a:7a:7e:1a:48:47:59: f4:f9:78:36:0c:e1:ae:59:fc:f4:fa:34:eb:c5:ba:f6:ef:a9: 2d:77:64:bc:8f:cc:ff:5b:ff:1f:69:49:b2:93:24:24:b2:f2: f6:14:53:b8:73:29:99:91:a0:f5:88:87:e2:c7:a0:32:c1:7e: 5e:98:79:28:13:40:96:1d:f5:76:dd:74:3a:b4:cd:03:38:71: a8:51:5f:f0:fc:ad:16:c7:54:22:b5:85:8c:d9:fa:ae:6f:96: d1:7c:23:d9:68:b8:aa:ef:fa:57:c4:57:23:39:bd:5e:98:c5: 50:ee:aa:3c:a7:ba:e1:93:3e:df:f8:e3:7d:de:74:3c:10:56: 1f:83:89:6d:35:ce:a8:22:87:18:a5:e2:85:7b:aa:4c:52:95: a0:79:b6:ed:16:e0:6b:4f:9f:31:62:57:ea:98:03:81:ee:70: 93:10:6c:56:34:6e:b3:f7:9f:61:a2:f2:b4:fe:b8:4e:ad:bc: 08:d6:ba:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjvxF+gEBQMih8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzkwZjU1NTYtZDUzOC00ZmI5LTg1MDMtYjA3MjA4NTBmODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApET12QirhODXi5dtCGPFaevqgeRUR6OoxBU9 QSIHIi2q1KjHYpV9w7TNl/iy3bf/z1YyZuikwixkfxIPesbNM87aFuJmEQmfwUp3 O+dv6AiXL73eM6Nvse63RPXZoifa4aafYb4xX+JQSssai02YT/n0K2uuSa/P4+7a X/JPlfaG5YI1mH+ihMvfsAnodluhB2w2InvtKPfc7L3KZnDF0tm6lNtaZpXQucSs iF+4c8AKf2/7SDCsW87GI/VdWKWB++KIxMQM3sQV5jJvBRr/2Mq2shdNd1C01iNT /Z0adMrzOKoK1vi7cuWwQ2fRX9Da2O+9D2ync7X75RQ6fnelJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1qJE1XCftAuAJrA8MVXBZJ3GUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGUwZDg1MGMtYjA5YS0z ZjgyLTlmYWYtMjc3NjE4Y2MyNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0POt4E50rI9DV0vdJkwrJI6A2jVMVSWbr1qlrXjYvbL8lAdR+yFidm 95i4uQL2QKMVbMD+IiV+mWm6P9M1SvWyOnp+GkhHWfT5eDYM4a5Z/PT6NOvFuvbv qS13ZLyPzP9b/x9pSbKTJCSy8vYUU7hzKZmRoPWIh+LHoDLBfl6YeSgTQJYd9Xbd dDq0zQM4cahRX/D8rRbHVCK1hYzZ+q5vltF8I9louKrv+lfEVyM5vV6YxVDuqjyn uuGTPt/4433edDwQVh+DiW01zqgihxil4oV7qkxSlaB5tu0W4GtPnzFiV+qYA4Hu cJMQbFY0brP3n2Gi8rT+uE6tvAjWuos= -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:41 2026 by rpki-client