$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa File: f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa (raw, json) Hash identifier: B8GYZAw+PUfa534fpGvru+D62h1R47IWMmElK0jK3Ss= Subject key identifier: E8:AC:6B:D7:C4:33:3C:7A:E4:E1:B3:14:E1:B7:B5:58:79:A5:D2:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A62902ABFC3EBBADC8D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 98.17.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:62:90:2a:bf:c3:eb:ba:dc:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=7e5eb731-b664-46e7-bfba-6f5ed1ba0acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:01:f6:25:40:82:a9:9c:ba:a6:19:a6:a9:58: 20:b2:37:29:50:9e:ee:f7:26:6e:bf:da:dd:a1:61: 36:86:75:fd:80:fe:f7:89:bf:22:89:2e:87:73:83: 24:e1:d4:1a:9d:96:6d:7a:83:f4:44:65:bc:04:92: 88:a6:50:4a:97:0a:bc:f5:60:6e:d4:07:c2:5a:ee: 2e:8d:5e:5d:1f:1a:5a:e8:20:c4:de:a5:98:33:a4: 60:9c:df:c4:41:29:ed:aa:9c:a0:f4:ad:d9:81:ce: 8f:0e:59:45:b2:b8:cc:c5:19:71:d8:b0:3b:cc:09: 5b:83:8d:dc:39:22:22:a3:82:b6:23:4a:22:85:01: 94:02:94:9b:3c:1d:6b:eb:43:35:39:1e:91:d1:9c: f5:24:01:b2:4a:f3:57:dc:7b:b5:bb:35:23:88:1a: 56:61:a4:b6:c0:27:4f:fb:21:8b:48:d8:24:d8:2b: 8d:6c:75:1f:43:3b:d9:7f:b2:1f:a4:8d:8c:65:dd: a1:74:39:f1:b8:d7:77:f9:4a:31:5d:a5:36:95:f4: 2b:9e:5e:de:7f:30:6a:37:31:77:92:f2:92:f5:d4: b7:c9:f4:53:0c:c7:03:8d:b3:c7:6a:90:f9:2b:9e: 86:d3:d2:33:76:38:cc:c0:1a:c4:ea:91:6f:96:d6: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:6B:D7:C4:33:3C:7A:E4:E1:B3:14:E1:B7:B5:58:79:A5:D2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9c:7f:28:24:26:1b:49:09:82:0e:cc:eb:4d:b1:bc:58:42: 8f:c1:29:89:5b:42:26:23:a8:72:e8:13:27:9e:05:e4:0b:9b: 54:8f:8e:63:9e:9f:43:e1:96:09:c6:ee:b2:d8:3f:34:2c:29: a4:8a:b5:17:ba:cf:2d:63:5d:2c:e5:f8:75:00:f6:1a:ee:f1: 0e:1b:12:07:1f:84:a8:c4:8e:a0:13:38:86:ac:aa:f5:a7:3f: b8:24:b8:7f:78:bb:45:52:f8:12:8b:80:35:5a:e2:04:8a:ff: dc:2f:37:30:33:90:b8:c3:37:aa:cc:80:4d:cc:df:30:62:ae: 63:0d:db:08:3b:b6:3d:dc:f3:a4:e8:23:59:8e:9c:b6:25:53: e7:c0:21:bf:d1:73:f0:c1:67:30:8d:2b:bf:f4:63:7a:97:75: 09:0a:07:5c:25:62:5b:8c:74:e2:a0:8b:33:9c:29:34:d3:b1: 20:0a:64:b5:d0:e8:50:e1:f2:d2:5d:65:c5:98:fe:51:89:9e: 2b:ef:80:16:91:1c:37:b0:5d:9f:f6:26:a2:21:46:1a:dd:e9: af:a6:1b:f4:79:5c:75:03:0c:0d:31:18:6d:b6:96:9a:ef:bf: c9:6a:31:9b:5b:ad:30:b1:c4:f1:f3:a4:0a:45:e8:c7:db:25: 96:a7:a5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmKQKr/D67rcjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk N2U1ZWI3MzEtYjY2NC00NmU3LWJmYmEtNmY1ZWQxYmEwYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgH2JUCCqZy6phmmqVggsjcpUJ7u9yZuv9rd oWE2hnX9gP73ib8iiS6Hc4Mk4dQanZZteoP0RGW8BJKIplBKlwq89WBu1AfCWu4u jV5dHxpa6CDE3qWYM6RgnN/EQSntqpyg9K3Zgc6PDllFsrjMxRlx2LA7zAlbg43c OSIio4K2I0oihQGUApSbPB1r60M1OR6R0Zz1JAGySvNX3Hu1uzUjiBpWYaS2wCdP +yGLSNgk2CuNbHUfQzvZf7IfpI2MZd2hdDnxuNd3+UoxXaU2lfQrnl7efzBqNzF3 kvKS9dS3yfRTDMcDjbPHapD5K56G09IzdjjMwBrE6pFvltbhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOisa9fEMzx65OGzFOG3tVh5pdKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhjNzU5NTMtYzllZC0z ZGNiLTkwMmMtYjkzZjM0ZDRhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2cfygkJhtJCYIOzOtNsbxYQo/BKYlbQiYjqHLoEyeeBeQLm1SPjmOe n0PhlgnG7rLYPzQsKaSKtRe6zy1jXSzl+HUA9hru8Q4bEgcfhKjEjqATOIasqvWn P7gkuH94u0VS+BKLgDVa4gSK/9wvNzAzkLjDN6rMgE3M3zBirmMN2wg7tj3c86To I1mOnLYlU+fAIb/Rc/DBZzCNK7/0Y3qXdQkKB1wlYluMdOKgizOcKTTTsSAKZLXQ 6FDh8tJdZcWY/lGJnivvgBaRHDewXZ/2JqIhRhrd6a+mG/R5XHUDDA0xGG22lprv v8lqMZtbrTCxxPHzpApF6MfbJZanpVo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:38 2026 by rpki-client