$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa File: e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa (raw, json) Hash identifier: HYKI3HCpJ2krh3VmBJ30OuS0iFIuRJ374zIZWJyPQJ8= Subject key identifier: 40:5A:7E:54:39:4E:D2:8C:5F:24:5D:C3:94:3B:67:8F:32:C9:1B:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA3A19606AFB11F2D46DF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 98.21.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3a:19:60:6a:fb:11:f2:d4:6d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e9c13f8c-f62f-4674-b5be-c16473880c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:6f:07:d3:c3:ba:09:5a:49:b3:a1:bb:a2: 17:12:4d:7d:00:8a:94:1d:b5:4f:b3:bf:37:8d:70: c4:06:48:d0:cc:3f:e5:84:6e:71:2c:28:06:75:d3: b6:cc:21:5f:72:31:ce:6b:60:9d:d9:a7:68:c2:6e: 2b:15:ab:49:cc:83:fc:dd:8f:b1:62:34:f6:fa:f0: 45:0d:c5:7a:74:e8:9e:f3:4d:db:19:b8:4f:16:2b: ec:82:ab:f0:fc:f6:1c:83:eb:92:58:f9:ce:3e:d4: b6:fc:5b:0d:3c:43:40:43:2f:d1:16:51:8c:fb:bd: 25:6e:18:61:ee:eb:5a:d1:91:84:a4:b5:62:d1:cb: a4:34:c9:4f:57:4e:90:42:28:b4:5b:bb:db:1e:9b: cc:bf:e5:e1:2f:3a:47:b8:2f:78:ae:74:e7:84:15: a6:f8:d2:5e:ad:8d:7a:5c:93:05:db:da:e0:ef:2e: 46:bc:49:53:25:fa:0c:7a:36:ca:b2:69:3d:94:90: 52:91:74:e5:89:d0:42:ab:06:c0:33:e7:20:34:3b: dc:e9:dc:79:ca:71:58:36:a8:19:bd:72:aa:b3:43: 95:47:e4:4a:a2:f6:a4:e2:41:78:0e:4e:ee:60:72: 64:5f:ff:71:d5:b4:66:af:19:63:49:1d:8b:90:96: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5A:7E:54:39:4E:D2:8C:5F:24:5D:C3:94:3B:67:8F:32:C9:1B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8048c56-1c2f-3a8e-b43c-591e6a1c2eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dc:ec:b6:87:55:af:81:f6:1c:44:54:d1:21:37:ae:0b:3e: 8d:43:0b:34:a9:4a:37:51:bb:22:71:ac:0a:d9:5a:35:06:5c: 8c:09:f4:7a:8c:40:85:30:91:51:58:ab:58:7a:2b:bb:e2:7f: 52:f6:e8:a5:4f:50:d3:50:35:f9:3e:9f:4c:2c:4b:dd:0c:23: 80:19:27:eb:22:20:2f:b9:fb:41:da:e5:cd:a2:3f:2c:d8:4a: 38:21:ea:4c:c8:f4:de:a0:26:ee:6c:d7:2f:3c:8c:16:95:9e: c7:d8:ba:9c:48:d2:ff:bd:62:2c:ba:ea:b9:7b:6a:04:b4:4a: 7d:47:1d:f1:78:f9:29:16:e9:88:f7:93:d0:87:12:73:d7:f8: d4:5e:8b:85:a0:2c:df:93:68:f2:6e:cc:ce:a3:e9:94:bc:5d: f9:86:f8:f9:51:a5:c8:5e:16:53:c9:c6:95:85:de:f7:04:27: 62:d5:db:6c:07:f4:c2:67:e3:b1:3c:b3:56:9e:75:4a:12:5f: 90:fc:13:09:42:cf:84:50:9d:57:e0:12:4e:f7:77:98:d7:03: df:58:0e:ef:c5:10:9d:80:b1:2b:46:6a:9d:f7:36:62:33:3d: 31:ff:c8:dc:91:e0:7c:5b:a0:34:0f:be:67:b3:31:bf:77:a0: bb:4a:fb:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2joZYGr7EfLUbfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTljMTNmOGMtZjYyZi00Njc0LWI1YmUtYzE2NDczODgwYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZtvB9PDuglaSbOhu6IXEk19AIqUHbVPs783 jXDEBkjQzD/lhG5xLCgGddO2zCFfcjHOa2Cd2adowm4rFatJzIP83Y+xYjT2+vBF DcV6dOie803bGbhPFivsgqvw/PYcg+uSWPnOPtS2/FsNPENAQy/RFlGM+70lbhhh 7uta0ZGEpLVi0cukNMlPV06QQii0W7vbHpvMv+XhLzpHuC94rnTnhBWm+NJerY16 XJMF29rg7y5GvElTJfoMejbKsmk9lJBSkXTlidBCqwbAM+cgNDvc6dx5ynFYNqgZ vXKqs0OVR+RKovak4kF4Dk7uYHJkX/9x1bRmrxljSR2LkJYe0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBaflQ5TtKMXyRdw5Q7Z48yyRsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgwNDhjNTYtMWMyZi0z YThlLWI0M2MtNTkxZTZhMWMyZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvc7LaHVa+B9hxEVNEhN64LPo1DCzSpSjdRuyJxrArZWjUGXIwJ9HqM QIUwkVFYq1h6K7vif1L26KVPUNNQNfk+n0wsS90MI4AZJ+siIC+5+0Ha5c2iPyzY Sjgh6kzI9N6gJu5s1y88jBaVnsfYupxI0v+9Yiy66rl7agS0Sn1HHfF4+SkW6Yj3 k9CHEnPX+NRei4WgLN+TaPJuzM6j6ZS8XfmG+PlRpcheFlPJxpWF3vcEJ2LV22wH 9MJn47E8s1aedUoSX5D8EwlCz4RQnVfgEk73d5jXA99YDu/FEJ2AsStGap33NmIz PTH/yNyR4HxboDQPvmezMb93oLtK+xw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:02 2026 by rpki-client