$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa File: f1cbd0d4-d348-3aee-8309-0989123f7505.roa (raw, json) Hash identifier: +ZgHzU6VWuOtjdymdijV5v8aFYLP6j/iPGX2hPG3Rec= Subject key identifier: 0A:1A:8F:08:E8:B7:BA:05:3A:37:C5:43:D0:03:54:24:17:E6:F2:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F89AEC301A9067A0BD780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.22.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:89:ae:c3:01:a9:06:7a:0b:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=948aca1a-d42e-4702-873e-2405f53997cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:b8:9b:54:20:67:eb:a0:42:4c:5c:ca:be: 16:89:88:9b:46:29:59:29:30:83:b0:b1:6b:ad:18: bd:8a:bb:34:1d:7d:e0:1f:85:41:44:f3:cf:93:1e: 58:0c:72:d1:6f:02:c3:a2:2e:3e:ab:d1:2b:02:a8: 62:71:6b:b9:06:da:01:6a:02:4c:6b:94:cf:3e:d6: 1f:0c:6b:5d:0c:b7:89:74:b2:72:d0:d8:03:0b:0c: 18:82:75:1c:ae:b8:1f:b6:c2:f7:3e:99:dd:de:ee: ae:35:0e:57:58:d6:a6:bd:93:2c:e7:ac:cf:a6:f3: 6c:67:8c:84:d8:47:6f:eb:a8:4e:c1:09:c1:a3:c3: 1a:f3:ca:56:5a:17:e3:de:82:ba:ef:8f:7c:08:d4: 5a:a2:b3:74:f8:4b:2f:29:f9:ea:be:e1:de:15:30: 4b:c0:91:6c:6e:89:ca:63:e9:e0:3b:eb:b5:d3:dd: 04:02:3c:95:7f:36:c7:86:72:ba:ab:b4:f0:f5:10: 11:63:60:f3:86:7d:1e:30:71:85:a6:69:cc:d6:bb: ee:a1:a2:9d:49:8a:fc:67:2e:2b:3a:43:b8:28:39: 0a:05:23:c6:fa:7e:30:56:e7:2c:73:52:c2:51:49: 2c:19:55:54:17:43:aa:99:24:9f:e4:a4:09:6c:93: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:8F:08:E8:B7:BA:05:3A:37:C5:43:D0:03:54:24:17:E6:F2:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:20:c8:00:fe:7e:45:a3:76:6d:03:8c:9d:c0:d5:d1:70:3a: 0c:4b:33:df:fc:0d:d3:d1:b8:c5:fc:78:16:e2:cb:d7:2d:70: fe:4f:bb:80:41:b0:25:ac:3b:dd:94:c8:46:7a:07:28:ac:3f: e8:d4:d1:a9:fa:4b:7b:0c:d5:ff:9a:f9:41:8a:04:e0:c0:16: 70:79:7d:2e:7c:c8:65:7a:f7:41:52:2c:dc:5d:51:58:bd:49: 6a:82:ec:c3:94:42:9b:cc:30:d4:00:0b:2e:ca:5a:f6:3b:8f: 04:74:09:b3:e3:61:4f:79:be:09:62:64:c5:fc:71:da:04:77: 60:53:df:b5:8c:7b:0f:77:e2:df:3f:cb:78:1c:2f:5c:d4:c2: 6f:12:57:3c:94:0f:6c:77:c8:20:34:0d:11:c3:ad:24:1c:35: 67:a6:e4:85:b4:03:7a:90:fd:5f:32:44:15:5a:12:6d:ea:b9: a4:70:29:0b:ee:4c:94:cb:6c:08:88:ec:82:11:2c:34:84:a3: a6:0e:1a:b9:bc:36:a2:76:15:af:61:f4:28:ba:32:04:54:b9: a2:a5:62:97:a9:42:57:c0:95:7f:da:f1:38:2e:fc:db:e7:72: 25:05:b7:b7:b8:bd:b4:b9:a3:81:a6:02:f1:91:f8:f5:a2:23: 03:64:b3:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4muwwGpBnoL14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OTQ4YWNhMWEtZDQyZS00NzAyLTg3M2UtMjQwNWY1Mzk5N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Em4m1QgZ+ugQkxcyr4WiYibRilZKTCDsLFr rRi9irs0HX3gH4VBRPPPkx5YDHLRbwLDoi4+q9ErAqhicWu5BtoBagJMa5TPPtYf DGtdDLeJdLJy0NgDCwwYgnUcrrgftsL3Ppnd3u6uNQ5XWNamvZMs56zPpvNsZ4yE 2Edv66hOwQnBo8Ma88pWWhfj3oK67498CNRaorN0+EsvKfnqvuHeFTBLwJFsbonK Y+ngO+u1090EAjyVfzbHhnK6q7Tw9RARY2Dzhn0eMHGFpmnM1rvuoaKdSYr8Zy4r OkO4KDkKBSPG+n4wVucsc1LCUUksGVVUF0OqmSSf5KQJbJP+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoajwjot7oFOjfFQ9ADVCQX5vLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFjYmQwZDQtZDM0OC0z YWVlLTgzMDktMDk4OTEyM2Y3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEggyAD+fkWjdm0DjJ3A1dFwOgxLM9/8DdPRuMX8eBbiy9ctcP5Pu4BB sCWsO92UyEZ6ByisP+jU0an6S3sM1f+a+UGKBODAFnB5fS58yGV690FSLNxdUVi9 SWqC7MOUQpvMMNQACy7KWvY7jwR0CbPjYU95vgliZMX8cdoEd2BT37WMew934t8/ y3gcL1zUwm8SVzyUD2x3yCA0DRHDrSQcNWem5IW0A3qQ/V8yRBVaEm3quaRwKQvu TJTLbAiI7IIRLDSEo6YOGrm8NqJ2Fa9h9Ci6MgRUuaKlYpepQlfAlX/a8Tgu/Nvn ciUFt7e4vbS5o4GmAvGR+PWiIwNks9U= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:05 2026 by rpki-client