$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa File: 1fddced0-2e72-3596-8537-ffc44a66bfd2.roa (raw, json) Hash identifier: +iGQpi+BqDEscI25QC/dqItV9rv+hu5iudjMceqIH0k= Subject key identifier: BA:B4:65:02:5C:74:24:18:BB:1C:92:61:74:59:DD:98:3B:FA:1B:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B24BCB75877DE6906199C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.19.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:4b:cb:75:87:7d:e6:90:61:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=427fc645-749e-43c6-9999-9495cf872aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:f0:0a:15:dc:b3:26:dc:ed:0e:74:d6:71: 2a:87:a7:d7:b6:37:cf:38:a4:55:b9:60:f2:3e:05: 13:4c:a3:1e:fe:c1:d1:54:7c:69:d8:22:fc:66:a4: 50:a4:e7:e2:6a:e9:8b:76:dc:6c:eb:28:27:ec:28: 3b:28:49:99:90:15:07:29:3d:80:b0:58:01:8b:5b: b8:ba:44:6a:a5:96:17:de:2f:14:36:4e:08:1b:fd: 13:17:57:2e:39:1b:ce:27:7b:a0:f6:9b:47:43:b6: 38:3e:59:e3:33:94:33:3a:f0:79:2d:ed:b7:0f:b4: 25:42:11:3a:da:e9:02:e1:ff:29:a1:b3:aa:45:09: d9:3f:d7:dd:4e:03:47:31:eb:88:fa:58:37:a1:5d: 6c:86:05:da:5c:15:2c:d5:f8:b7:0c:56:57:ce:e6: 35:3b:5c:a5:16:24:95:32:10:46:dd:f1:e3:1b:32: 32:9b:3b:bd:cd:40:e6:76:55:2b:2c:4d:2f:df:5a: 07:ae:73:e0:9a:6d:08:fb:d1:d2:22:73:bf:b1:63: b1:17:f8:b7:74:96:56:35:33:99:e9:2e:d9:05:fa: f2:36:57:8b:78:3e:aa:f9:c9:f8:e3:84:f2:35:2a: ab:d0:6e:dc:d9:08:af:b5:74:f3:98:ea:55:50:ca: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:65:02:5C:74:24:18:BB:1C:92:61:74:59:DD:98:3B:FA:1B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e2:59:2c:f0:c8:25:a1:7a:25:78:81:38:62:a1:bf:5e:2b: 12:fc:b5:78:aa:e0:86:a0:e0:09:e1:d0:38:d3:34:6a:1b:2e: de:a7:e9:b8:6e:a1:c5:6d:0e:3d:34:0d:7c:ea:fd:41:e4:1b: 6a:d2:73:3d:b1:5c:aa:d4:8a:02:8e:b9:01:18:51:a8:7d:fe: c8:92:ea:80:68:b7:02:83:3f:03:37:ba:1b:15:f5:7d:6e:e8: 96:cd:53:1d:68:b0:2c:9c:06:9d:88:f2:12:2c:51:f8:55:42: b7:df:6c:4e:c9:bc:5b:2b:ae:83:15:d7:2c:db:60:ae:95:8a: 1b:c1:12:50:6f:f8:31:8b:be:46:ac:cd:dc:ba:73:94:69:6a: c7:b8:0b:69:2c:b1:77:a9:a7:2f:0e:df:f7:a2:d2:40:6b:85: d9:11:74:8f:45:ed:e7:64:4b:fa:ba:40:7c:27:5e:3b:24:73: 69:6c:89:a0:c4:8a:ee:07:46:22:cd:ff:d3:de:64:c2:41:b3: 65:6b:6b:39:d3:b8:da:43:41:fe:b9:03:d8:17:db:52:59:40: a2:cf:d4:7f:c5:85:bd:2d:cb:70:b7:e9:66:67:32:61:d0:1c: 1e:1c:3a:ce:f9:10:ab:1f:89:5d:e0:a6:e4:23:ee:4f:63:49: 16:f4:c6:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskvLdYd95pBhmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NDI3ZmM2NDUtNzQ5ZS00M2M2LTk5OTktOTQ5NWNmODcyYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXwChXcsybc7Q501nEqh6fXtjfPOKRVuWDy PgUTTKMe/sHRVHxp2CL8ZqRQpOfiaumLdtxs6ygn7Cg7KEmZkBUHKT2AsFgBi1u4 ukRqpZYX3i8UNk4IG/0TF1cuORvOJ3ug9ptHQ7Y4PlnjM5QzOvB5Le23D7QlQhE6 2ukC4f8pobOqRQnZP9fdTgNHMeuI+lg3oV1shgXaXBUs1fi3DFZXzuY1O1ylFiSV MhBG3fHjGzIymzu9zUDmdlUrLE0v31oHrnPgmm0I+9HSInO/sWOxF/i3dJZWNTOZ 6S7ZBfryNleLeD6q+cn444TyNSqr0G7c2QivtXTzmOpVUMryKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq0ZQJcdCQYuxySYXRZ3Zg7+hs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZkZGNlZDAtMmU3Mi0z NTk2LTg1MzctZmZjNDRhNjZiZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABriWSzwyCWheiV4gThiob9eKxL8tXiq4Iag4Anh0DjTNGobLt6n6bhu ocVtDj00DXzq/UHkG2rScz2xXKrUigKOuQEYUah9/siS6oBotwKDPwM3uhsV9X1u 6JbNUx1osCycBp2I8hIsUfhVQrffbE7JvFsrroMV1yzbYK6VihvBElBv+DGLvkas zdy6c5Rpase4C2kssXeppy8O3/ei0kBrhdkRdI9F7edkS/q6QHwnXjskc2lsiaDE iu4HRiLN/9PeZMJBs2VraznTuNpDQf65A9gX21JZQKLP1H/Fhb0ty3C36WZnMmHQ HB4cOs75EKsfiV3gpuQj7k9jSRb0xhM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:49 2026 by rpki-client