$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa File: d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa (raw, json) Hash identifier: SjpPIKJn+4+xfwK8SrYDxyAy8eGuryxZTo/KuFD0JnE= Subject key identifier: B9:07:90:0E:67:E1:E2:06:AE:CD:EB:DD:5F:1C:A8:1B:59:4D:58:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B247E71C7D01D1A035B600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 98.18.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:47:e7:1c:7d:01:d1:a0:35:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=28a7aab9-5108-4045-b8e7-0d045c867ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:5c:ba:e1:3f:78:aa:0e:0d:ff:de:c4:97: 43:99:ab:b4:03:6a:96:5f:60:e3:86:a7:0a:03:9f: d7:66:73:e9:2c:d8:dd:15:0b:e5:c4:c8:98:51:41: 0d:64:19:ba:0d:62:70:2e:5d:1a:e9:df:8c:2e:ed: 41:4e:bc:36:24:90:f9:bf:e2:25:88:c0:56:89:cf: 23:c9:3b:df:5d:49:5b:9b:79:d8:be:c3:f9:79:c9: 95:d8:a7:01:d7:5b:55:38:05:98:60:4f:38:0c:74: 16:60:8b:de:90:39:0f:11:7b:c9:77:99:21:6f:84: c7:ef:7a:41:ed:45:bc:c7:38:dc:9a:88:85:21:5f: f7:4a:0e:5e:c3:5f:4d:1c:f4:00:69:37:f2:c2:68: 6b:6d:16:b4:d3:c0:56:0b:41:c6:80:96:92:67:4c: 8b:8b:11:bc:81:b5:c9:fe:3e:87:2f:99:c2:cd:e2: f6:95:31:a0:71:76:db:f0:3e:94:76:14:43:65:8c: 7d:63:1f:9e:ba:67:d8:4b:ba:40:03:4e:48:6f:85: 27:9e:f9:96:7e:25:29:d2:13:c6:13:1e:74:40:0c: 5f:a4:f5:e5:9f:b0:50:52:59:f6:4e:82:3f:68:a0: 7e:18:3c:51:bb:26:b3:1d:ce:0e:8a:d6:69:f8:58: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:07:90:0E:67:E1:E2:06:AE:CD:EB:DD:5F:1C:A8:1B:59:4D:58:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4a20f1a-d5ee-3f0a-9442-639804e03eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d2:9f:0d:a7:b1:c8:ee:e3:a6:21:d9:69:cd:6d:32:a2:c3: 3f:ef:34:9d:5c:e4:ed:f4:1b:8a:45:6f:c3:a1:5d:30:9d:04: de:57:8e:40:06:ed:f0:16:8b:f0:f1:d7:46:ea:14:80:99:cc: df:e2:63:75:29:37:aa:8d:72:b7:3e:de:59:14:56:b9:ba:0b: 3b:03:1e:ef:1a:00:6c:bb:cb:0c:87:fb:53:4a:fe:8b:92:c4: 42:25:9a:15:ad:0e:16:ce:7d:ae:90:17:69:28:b0:d8:45:a0: 33:d9:d0:c5:c3:72:62:ea:85:74:60:27:b0:99:d9:26:d2:30: e9:8d:5c:7d:6c:17:39:42:bc:78:80:a2:ee:58:42:ba:ac:b8: 31:46:24:ae:08:c2:77:72:6a:6f:29:72:4d:86:be:e2:4a:76: 2d:04:35:6b:f9:56:fa:37:e8:46:eb:81:29:e3:56:39:70:f0: 3f:84:1c:3f:d4:ce:65:84:a5:4c:d3:16:0c:01:54:5c:ee:c6: 12:31:a4:70:39:bd:b8:ca:0b:ab:d0:0a:24:6d:97:e2:2b:ba: 0e:36:31:83:e4:b7:74:27:c5:e0:c5:73:55:8e:5d:0a:b1:dd: cc:11:7c:5d:72:98:a6:03:1a:4f:0f:28:93:d3:4f:1a:ec:02: 14:c4:48:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskfnHH0B0aA1tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MjhhN2FhYjktNTEwOC00MDQ1LWI4ZTctMGQwNDVjODY3YmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDFcuuE/eKoODf/exJdDmau0A2qWX2DjhqcK A5/XZnPpLNjdFQvlxMiYUUENZBm6DWJwLl0a6d+MLu1BTrw2JJD5v+IliMBWic8j yTvfXUlbm3nYvsP5ecmV2KcB11tVOAWYYE84DHQWYIvekDkPEXvJd5khb4TH73pB 7UW8xzjcmoiFIV/3Sg5ew19NHPQAaTfywmhrbRa008BWC0HGgJaSZ0yLixG8gbXJ /j6HL5nCzeL2lTGgcXbb8D6UdhRDZYx9Yx+eumfYS7pAA05Ib4UnnvmWfiUp0hPG Ex50QAxfpPXln7BQUln2ToI/aKB+GDxRuyazHc4OitZp+FjCiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkHkA5n4eIGrs3r3V8cqBtZTVj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRhMjBmMWEtZDVlZS0z ZjBhLTk0NDItNjM5ODA0ZTAzZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7Snw2nscju46Yh2WnNbTKiwz/vNJ1c5O30G4pFb8OhXTCdBN5XjkAG 7fAWi/Dx10bqFICZzN/iY3UpN6qNcrc+3lkUVrm6CzsDHu8aAGy7ywyH+1NK/ouS xEIlmhWtDhbOfa6QF2kosNhFoDPZ0MXDcmLqhXRgJ7CZ2SbSMOmNXH1sFzlCvHiA ou5YQrqsuDFGJK4Iwndyam8pck2GvuJKdi0ENWv5Vvo36EbrgSnjVjlw8D+EHD/U zmWEpUzTFgwBVFzuxhIxpHA5vbjKC6vQCiRtl+Irug42MYPkt3QnxeDFc1WOXQqx 3cwRfF1ymKYDGk8PKJPTTxrsAhTESFU= -----END CERTIFICATE-----Generated at Sun Mar 1 19:06:47 2026 by rpki-client