$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: 4beku6zc/SKdrRw17M6wX+7hbxGXOmGbI9NX1kcAJ7c= Subject key identifier: E5:17:31:5D:A5:78:A6:B2:5C:25:24:74:9D:9C:CE:01:9A:9E:26:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B24844D8E84C24E2CCA3E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:48:44:d8:e8:4c:24:e2:cc:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=f98516e7-aca4-478c-a154-334e0f1114bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:57:a7:39:30:6e:58:0b:2b:43:0e:47:22: a1:ed:75:fd:27:42:00:ff:b5:29:d0:cc:48:4a:28: 6a:a4:75:03:8d:27:c9:81:23:9d:8e:31:98:51:0d: 09:ad:d9:84:4e:07:e0:b4:cd:11:cd:92:7e:1c:a4: 5f:aa:7f:93:07:22:d3:04:2c:d3:90:b7:d7:04:f5: 1e:f9:eb:37:6e:b7:80:8c:7f:c4:3c:0c:09:12:ba: f8:e9:4b:c6:da:41:40:e6:43:17:47:23:96:10:7b: 35:3f:76:9a:80:f5:ca:fa:7f:79:5e:79:65:3b:0a: a0:c7:fe:aa:61:7c:e7:4c:d1:80:c6:ee:20:38:7b: e8:41:ff:f0:35:01:39:d8:5c:44:8f:45:27:97:f0: ee:19:55:72:af:56:16:e3:14:75:95:83:35:66:d2: 38:4d:97:3b:de:7b:b2:56:53:a1:01:46:c5:a7:31: d8:0a:eb:19:d9:9e:a2:21:5d:bf:90:f4:de:eb:0d: 6c:5e:b0:c9:46:e1:4f:06:29:d2:22:f3:ca:12:04: 6b:02:f8:af:fb:99:6b:a2:7d:e1:bd:39:ca:74:90: 26:e0:4a:75:c3:67:66:0c:92:25:e7:5e:96:14:fe: 70:42:59:ca:5a:b8:00:c7:77:25:ed:f1:c7:fd:d3: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:17:31:5D:A5:78:A6:B2:5C:25:24:74:9D:9C:CE:01:9A:9E:26:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:16:8f:4a:32:e9:5b:3d:2d:58:db:2d:14:30:66:a4:3c:1c: 40:b7:0d:0b:e1:69:f9:50:68:1f:4b:09:c2:be:c2:b2:98:a3: eb:99:4a:36:be:35:9e:c7:32:99:14:ea:6b:93:15:9e:b6:32: 22:e5:79:e5:8b:11:00:f0:92:f7:b1:bd:91:4c:0f:7e:59:60: 14:52:cc:06:e1:8e:41:dd:c1:c4:7d:93:fc:49:db:4d:78:04: 36:a2:7b:26:5c:74:6b:53:64:a5:3d:e2:5d:51:f9:5e:83:c0: 92:c3:9b:06:67:bd:02:fe:12:a4:27:b1:12:77:51:46:d2:55: da:d8:49:f6:34:56:77:fc:6f:f0:0d:3f:9f:eb:7e:13:a5:87: 64:23:92:c5:07:88:92:42:75:c7:8d:e8:92:8e:84:ed:ed:e6: 7d:f3:49:3d:fb:fe:1f:48:a8:f8:f8:0f:29:75:e0:f8:93:41: c6:1c:15:09:77:9d:db:5e:cc:50:f5:f1:b3:a8:c9:a3:49:71: 08:53:70:95:b3:9f:06:55:8c:2b:e1:58:67:ca:94:4d:c2:b0: cb:36:33:d9:84:e7:8f:c6:5d:04:ce:11:42:98:7d:3e:23:98: 30:0c:14:13:1e:e2:2d:0e:cd:aa:dc:9a:46:22:b4:00:aa:04: af:ea:1f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskhE2OhMJOLMo+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk Zjk4NTE2ZTctYWNhNC00NzhjLWExNTQtMzM0ZTBmMTExNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAVXpzkwblgLK0MORyKh7XX9J0IA/7Up0MxI SihqpHUDjSfJgSOdjjGYUQ0JrdmETgfgtM0RzZJ+HKRfqn+TByLTBCzTkLfXBPUe +es3breAjH/EPAwJErr46UvG2kFA5kMXRyOWEHs1P3aagPXK+n95XnllOwqgx/6q YXznTNGAxu4gOHvoQf/wNQE52FxEj0Unl/DuGVVyr1YW4xR1lYM1ZtI4TZc73nuy VlOhAUbFpzHYCusZ2Z6iIV2/kPTe6w1sXrDJRuFPBinSIvPKEgRrAviv+5lron3h vTnKdJAm4Ep1w2dmDJIl516WFP5wQlnKWrgAx3cl7fHH/dOwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUXMV2leKayXCUkdJ2czgGaniadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUWj0oy6Vs9LVjbLRQwZqQ8HEC3DQvhaflQaB9LCcK+wrKYo+uZSja+ NZ7HMpkU6muTFZ62MiLleeWLEQDwkvexvZFMD35ZYBRSzAbhjkHdwcR9k/xJ2014 BDaieyZcdGtTZKU94l1R+V6DwJLDmwZnvQL+EqQnsRJ3UUbSVdrYSfY0Vnf8b/AN P5/rfhOlh2QjksUHiJJCdceN6JKOhO3t5n3zST37/h9IqPj4Dyl14PiTQcYcFQl3 ndtezFD18bOoyaNJcQhTcJWznwZVjCvhWGfKlE3CsMs2M9mE54/GXQTOEUKYfT4j mDAMFBMe4i0OzarcmkYitACqBK/qH+Q= -----END CERTIFICATE-----Generated at Sun Mar 1 20:55:42 2026 by rpki-client