$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa File: f0d0f913-7559-3d06-ac30-36057e4c69cc.roa (raw, json) Hash identifier: +ShwBhZC0XLfwQUsQvN6eHoj5GngBWJjyN+NBQWBX1E= Subject key identifier: DE:90:BF:D5:9A:93:4E:C6:1E:AF:B2:4D:F6:14:DD:B1:BB:E2:B3:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F897D71AEC30A92438F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.20.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:89:7d:71:ae:c3:0a:92:43:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=973a1880-1a41-4c39-88aa-9f7c9d973e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:92:68:03:be:3d:b0:43:bd:5f:20:f8:cf:bf: 48:50:b3:79:3e:1c:2b:2f:89:e1:fe:8b:2e:e3:3b: d3:84:1a:70:eb:5a:ff:89:e5:96:79:26:d7:94:36: b9:3d:25:e8:5f:ac:54:72:5a:24:93:74:48:b3:e7: ce:7c:3e:dc:5b:92:85:fa:34:8a:6a:6c:af:a2:5f: 3a:aa:a9:dd:47:f9:a1:20:9b:0a:be:8c:99:93:df: d7:84:e0:d3:35:9e:c7:18:da:d5:10:a0:92:10:c9: b2:ad:87:72:23:2d:3f:fa:4b:9e:9e:d7:58:96:23: 7e:c9:bb:5a:8b:d1:56:19:63:5f:40:20:24:b0:0e: 6b:41:5f:7e:09:e2:ca:1f:49:fd:27:3f:b9:4d:0c: f4:cb:63:86:14:97:43:3d:20:d4:d1:17:b4:48:e7: f2:52:e9:04:77:aa:08:be:53:17:81:1c:fa:2f:b7: 8c:2c:51:5d:82:96:04:69:90:96:1f:3e:f7:09:9c: a5:ae:5e:4b:c8:47:ae:f8:02:ef:71:03:7b:82:47: df:13:c5:a0:b0:f4:e1:fa:b8:9d:74:83:40:8b:d8: df:03:94:78:9d:3f:1f:36:e0:f4:09:bd:19:5c:77: a0:a6:6c:e5:4f:3e:19:8e:9c:f5:cd:73:74:d0:12: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:BF:D5:9A:93:4E:C6:1E:AF:B2:4D:F6:14:DD:B1:BB:E2:B3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e6:47:00:ca:8e:d8:b0:74:f9:c6:9d:0f:93:87:0b:ed:84: e5:06:2b:47:2e:9e:08:68:cc:b7:96:cb:26:1e:73:17:9b:6b: fa:31:b9:a7:2a:94:d6:02:6d:91:3f:27:96:70:9c:58:de:91: 1c:fa:e4:60:ef:b1:fb:3c:e7:b9:9d:93:2e:13:d8:b4:56:74: 45:44:77:f9:cd:6f:de:24:87:af:69:30:db:07:90:63:d2:32: ac:eb:94:56:69:6d:16:1b:88:d4:da:53:d4:6f:7b:58:85:e1: 99:d5:50:8a:90:63:c7:16:53:fb:67:08:b8:8a:44:a0:6f:33: d9:0d:83:8b:43:df:54:5e:83:87:8b:79:6f:e6:e9:25:58:7c: eb:98:f3:03:68:d3:2b:3e:87:e3:e5:00:6c:e3:2f:f7:e9:e8: c4:eb:d0:79:ab:68:b4:e8:c9:4b:3c:6f:08:fd:a9:fa:cb:ed: cd:8b:b3:b8:78:1d:85:3b:4b:13:b4:ac:a5:c8:e1:ac:81:1a: 1d:2c:3c:ea:d8:aa:11:e9:ca:3a:28:4f:34:3d:2a:4e:4d:14: 9d:d0:18:cd:de:a1:89:e2:cc:c1:d0:4d:26:61:7c:fe:ec:aa: 35:03:0f:f0:e4:b3:04:90:13:ac:ad:36:4c:ed:b1:df:f3:6f: d1:54:f3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4l9ca7DCpJDj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OTczYTE4ODAtMWE0MS00YzM5LTg4YWEtOWY3YzlkOTczZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5JoA749sEO9XyD4z79IULN5PhwrL4nh/osu 4zvThBpw61r/ieWWeSbXlDa5PSXoX6xUclokk3RIs+fOfD7cW5KF+jSKamyvol86 qqndR/mhIJsKvoyZk9/XhODTNZ7HGNrVEKCSEMmyrYdyIy0/+kuentdYliN+ybta i9FWGWNfQCAksA5rQV9+CeLKH0n9Jz+5TQz0y2OGFJdDPSDU0Re0SOfyUukEd6oI vlMXgRz6L7eMLFFdgpYEaZCWHz73CZylrl5LyEeu+ALvcQN7gkffE8WgsPTh+rid dINAi9jfA5R4nT8fNuD0Cb0ZXHegpmzlTz4Zjpz1zXN00BLLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6Qv9Wak07GHq+yTfYU3bG74rOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjBkMGY5MTMtNzU1OS0z ZDA2LWFjMzAtMzYwNTdlNGM2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/mRwDKjtiwdPnGnQ+ThwvthOUGK0cunghozLeWyyYecxeba/oxuacq lNYCbZE/J5ZwnFjekRz65GDvsfs857mdky4T2LRWdEVEd/nNb94kh69pMNsHkGPS MqzrlFZpbRYbiNTaU9Rve1iF4ZnVUIqQY8cWU/tnCLiKRKBvM9kNg4tD31Reg4eL eW/m6SVYfOuY8wNo0ys+h+PlAGzjL/fp6MTr0HmraLToyUs8bwj9qfrL7c2Ls7h4 HYU7SxO0rKXI4ayBGh0sPOrYqhHpyjooTzQ9Kk5NFJ3QGM3eoYnizMHQTSZhfP7s qjUDD/DkswSQE6ytNkztsd/zb9FU8x0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:00 2026 by rpki-client