$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb517005-7c9f-3f38-8599-8dbdb6bbe6a0.roa File: eb517005-7c9f-3f38-8599-8dbdb6bbe6a0.roa (raw, json) Hash identifier: s8ZeD9EDgC8EOda8KXqx1V80Mkf5sobCixcbIUzTJ74= Subject key identifier: 9A:11:97:34:A5:5B:B9:E5:85:D6:11:64:B4:61:66:25:7A:89:17:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6C6E1E9828D513784EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb517005-7c9f-3f38-8599-8dbdb6bbe6a0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.23.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6c:6e:1e:98:28:d5:13:78:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6d8ce087-10ca-425d-af8f-9758127c1cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:fc:d1:8c:55:22:dc:33:72:1f:76:05:fd: ad:75:0c:db:dc:7a:24:3b:d0:ca:31:a9:d2:ab:ec: 2b:cd:6b:a1:f0:16:83:f3:42:ea:de:54:df:03:0b: ae:7b:f2:f9:98:d6:80:86:0c:3c:8f:0d:7b:28:24: a3:18:24:66:f4:95:44:d5:d0:5a:84:87:a1:c7:74: 68:ba:9e:4e:22:57:1d:8e:bb:14:e3:66:ed:e8:fe: b8:83:38:40:a9:c5:38:62:ad:01:aa:7a:63:0a:03: 19:f4:23:fc:a3:87:3a:c6:03:9b:ba:9a:f2:12:3f: ea:a0:d7:1c:d3:12:5c:2c:32:e7:98:69:c0:96:d6: 85:f3:22:27:ea:94:9d:a6:9b:5e:c4:cc:c8:e3:5b: bf:4c:c3:36:a1:38:f7:e5:87:13:e6:f9:0d:9e:27: c1:f9:38:d1:de:0c:60:3d:48:a9:08:8e:2a:c5:2d: ca:90:6f:e5:ed:25:35:fa:e6:4b:5d:01:5a:3c:0b: f8:c4:59:61:ce:d6:91:44:a7:ca:7b:66:55:01:64: 86:ac:f0:db:72:b7:1d:83:de:b7:7a:b2:55:0b:b6: 59:8d:14:f9:42:34:cc:1d:fa:7d:2d:65:e7:19:56: 2c:92:41:98:3a:47:9a:67:6c:ab:ad:0b:b5:fa:a8: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:11:97:34:A5:5B:B9:E5:85:D6:11:64:B4:61:66:25:7A:89:17:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb517005-7c9f-3f38-8599-8dbdb6bbe6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:44:ce:3e:9f:8d:c5:cb:9c:02:5c:ed:26:20:cd:13:12:0b: 45:30:7b:d3:fa:48:d0:ff:f3:6e:4c:4c:ee:f5:51:47:15:10: ca:b5:69:08:b0:ba:58:1b:88:71:9b:6b:30:3f:e1:70:53:9f: 98:94:91:5d:5a:39:55:9d:e8:f4:a0:15:ab:ad:3b:68:6a:48: a8:2b:ca:4c:d4:62:f1:e9:af:0b:f6:b0:ab:2f:31:1b:46:b4: 17:4e:3f:18:bc:85:e2:9e:e5:e9:9f:a7:1f:f7:ed:11:af:97: b9:d1:ad:6d:c9:9b:e2:b5:9d:ab:60:bd:f5:52:4a:00:03:fd: 2a:4a:3c:20:51:0b:2a:f4:a6:6d:7c:70:5a:a2:7c:f5:4e:20: 5e:c8:df:d4:cd:02:0b:b8:1d:50:ea:87:fe:7c:ab:53:11:ed: 36:9b:5d:00:bc:c8:a7:7a:22:95:26:cf:2e:63:4a:41:71:ac: 32:e2:e3:c4:37:22:83:7d:2d:c8:3f:8f:fb:0b:1a:cd:03:8d: b8:67:27:b0:d0:25:f0:f5:99:92:95:4f:8d:63:a7:34:60:ef: a1:56:0d:0c:70:2d:5f:fa:a4:c3:48:e1:98:a9:30:6d:bd:ba: df:06:c9:93:fa:2b:3b:95:68:30:3f:b3:d9:e0:b5:cc:da:d1: 7d:f7:6d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmxuHpgo1RN4TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmQ4Y2UwODctMTBjYS00MjVkLWFmOGYtOTc1ODEyN2MxY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPb80YxVItwzch92Bf2tdQzb3HokO9DKManS q+wrzWuh8BaD80Lq3lTfAwuue/L5mNaAhgw8jw17KCSjGCRm9JVE1dBahIehx3Ro up5OIlcdjrsU42bt6P64gzhAqcU4Yq0BqnpjCgMZ9CP8o4c6xgObupryEj/qoNcc 0xJcLDLnmGnAltaF8yIn6pSdpptexMzI41u/TMM2oTj35YcT5vkNnifB+TjR3gxg PUipCI4qxS3KkG/l7SU1+uZLXQFaPAv4xFlhztaRRKfKe2ZVAWSGrPDbcrcdg963 erJVC7ZZjRT5QjTMHfp9LWXnGVYskkGYOkeaZ2yrrQu1+qjiEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoRlzSlW7nlhdYRZLRhZiV6iRfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWI1MTcwMDUtN2M5Zi0z ZjM4LTg1OTktOGRiZGI2YmJlNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZEzj6fjcXLnAJc7SYgzRMSC0Uwe9P6SND/825MTO71UUcVEMq1aQiw ulgbiHGbazA/4XBTn5iUkV1aOVWd6PSgFautO2hqSKgrykzUYvHprwv2sKsvMRtG tBdOPxi8heKe5emfpx/37RGvl7nRrW3Jm+K1natgvfVSSgAD/SpKPCBRCyr0pm18 cFqifPVOIF7I39TNAgu4HVDqh/58q1MR7TabXQC8yKd6IpUmzy5jSkFxrDLi48Q3 IoN9Lcg/j/sLGs0DjbhnJ7DQJfD1mZKVT41jpzRg76FWDQxwLV/6pMNI4ZipMG29 ut8GyZP6KzuVaDA/s9ngtcza0X33bfw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:45 2026 by rpki-client