$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa File: f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa (raw, json) Hash identifier: tEXiatEHgDsgjQDH3RxogprGc7/35jNuIzwSRXsx1dM= Subject key identifier: 41:56:16:7B:CD:43:96:A6:3E:AB:1D:6F:3F:2B:19:F3:8E:92:BC:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8F6E0B8D18A08B531D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.16.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:8f:6e:0b:8d:18:a0:8b:53:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=feaaf93b-51f4-4bc1-af48-e54b15d9c4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:42:98:bd:32:e3:4b:52:8c:3b:cc:66:aa: 72:0e:d9:7c:5c:30:91:ac:91:9c:5b:38:cd:86:e9: 5d:2d:fd:1e:d6:3f:0d:9c:fb:e6:e2:20:6d:d2:38: 7e:82:84:d4:13:a7:f4:e1:0b:54:c6:05:55:d4:07: 36:2c:bf:86:fb:c0:01:79:23:54:06:50:0d:58:4f: d5:a6:01:b5:0b:3f:bb:ec:9e:a8:91:23:1f:0d:d2: df:39:09:41:20:1e:b4:5a:0d:8a:1f:89:f5:80:30: 20:5c:6b:c5:fe:b6:83:cb:ef:4d:51:4e:97:dc:82: 73:a0:67:fb:80:b8:a1:be:38:0e:07:63:f3:e4:a1: 2f:45:13:8f:7f:5b:5a:9f:03:4d:a7:47:0a:18:eb: 6e:0f:40:5d:d7:24:b6:94:da:6a:e0:6c:04:47:8f: c7:81:b4:ad:44:54:ab:77:3b:f1:73:e4:f2:a2:31: a6:29:32:c0:2a:72:c3:ef:1d:48:89:b5:de:91:21: 33:8a:f5:0a:04:10:6a:35:da:e1:07:89:26:ad:a9: dc:20:8d:00:fb:47:d0:5d:58:d9:71:0c:4d:f9:db: bc:0b:05:7e:8c:9c:e5:fe:8b:3e:fc:c6:2e:e7:5d: 45:fc:cd:68:0e:dd:5c:4d:cd:35:db:11:f1:37:9e: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:56:16:7B:CD:43:96:A6:3E:AB:1D:6F:3F:2B:19:F3:8E:92:BC:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6d:19:ad:a2:04:2c:02:13:90:c1:f2:0f:f0:c1:b2:fe:f4: 6d:95:f3:c9:78:2c:1a:ba:66:86:29:a8:03:de:f2:05:18:ad: 3a:54:44:25:5d:67:42:6e:0b:6f:0c:2d:c5:05:0b:71:6d:81: 63:20:1d:c4:25:a0:11:c5:a5:cb:4a:13:31:7e:c5:ad:d3:70: 1b:16:6b:2c:84:21:7f:01:59:92:ca:2f:e4:7e:e5:62:1d:23: c4:53:64:48:07:7e:47:3f:62:73:83:cd:11:db:30:55:3f:f4: 74:5c:84:e7:77:bc:a5:33:f0:12:c5:1a:84:ca:08:d7:29:2f: 2c:43:b0:fe:a5:ed:32:b2:58:ee:6b:e5:33:fe:24:6c:52:50: 56:fd:21:4f:b8:6a:25:62:93:6d:d6:65:d3:25:1a:5f:ad:0c: 32:3f:7e:d5:16:8f:26:3d:9c:1e:2e:56:36:6b:a4:af:93:46: e1:e3:9c:33:01:12:c8:45:8c:28:49:f0:b0:49:8a:d5:f2:19: fa:a9:25:23:0b:b7:b8:68:be:60:f3:64:a3:8a:aa:9b:58:00: e6:aa:50:1b:d6:e7:02:f6:80:1d:b7:5e:2f:8b:8b:e4:44:4a: b1:b4:87:d8:81:9d:3a:2a:0d:5f:0b:f9:d7:54:7f:4f:49:6e: bb:ca:a4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP49uC40YoItTHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZmVhYWY5M2ItNTFmNC00YmMxLWFmNDgtZTU0YjE1ZDljNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVVCmL0y40tSjDvMZqpyDtl8XDCRrJGcWzjN huldLf0e1j8NnPvm4iBt0jh+goTUE6f04QtUxgVV1Ac2LL+G+8ABeSNUBlANWE/V pgG1Cz+77J6okSMfDdLfOQlBIB60Wg2KH4n1gDAgXGvF/raDy+9NUU6X3IJzoGf7 gLihvjgOB2Pz5KEvRROPf1tanwNNp0cKGOtuD0Bd1yS2lNpq4GwER4/HgbStRFSr dzvxc+TyojGmKTLAKnLD7x1IibXekSEzivUKBBBqNdrhB4kmrancII0A+0fQXVjZ cQxN+du8CwV+jJzl/os+/MYu511F/M1oDt1cTc012xHxN57CPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFWFnvNQ5amPqsdbz8rGfOOkrwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFmM2I4OWYtMTUwNC0z ZmY4LWE0ZjctYjcwN2UyMGQ5MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJtGa2iBCwCE5DB8g/wwbL+9G2V88l4LBq6ZoYpqAPe8gUYrTpURCVd Z0JuC28MLcUFC3FtgWMgHcQloBHFpctKEzF+xa3TcBsWayyEIX8BWZLKL+R+5WId I8RTZEgHfkc/YnODzRHbMFU/9HRchOd3vKUz8BLFGoTKCNcpLyxDsP6l7TKyWO5r 5TP+JGxSUFb9IU+4aiVik23WZdMlGl+tDDI/ftUWjyY9nB4uVjZrpK+TRuHjnDMB EshFjChJ8LBJitXyGfqpJSMLt7hovmDzZKOKqptYAOaqUBvW5wL2gB23Xi+Li+RE SrG0h9iBnToqDV8L+ddUf09JbrvKpP8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:09 2026 by rpki-client