$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa File: 0b6db478-8531-3fa9-ad15-f50272ba9617.roa (raw, json) Hash identifier: nSD0wN8hvAhQEuxxFtOPun+KLE7KpMM8FDxJnlIUG84= Subject key identifier: F8:EE:AF:88:D0:6C:44:20:54:83:14:D8:B3:4B:43:C5:77:15:D6:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D571FBC71AFEFAE40E2E28A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 98.20.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bc:71:af:ef:ae:40:e2:e2:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=cd88f5a4-c137-4a95-a730-4865798c65bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:56:05:90:fc:dc:4a:37:09:86:77:a0:62: 5f:e4:28:44:9b:86:79:fd:67:69:04:88:3b:d1:d3: 4c:c9:ef:ba:51:94:dc:c9:af:a2:c5:a0:80:76:35: b0:48:eb:69:3a:bb:0c:22:98:6e:53:e1:56:56:05: 50:8d:a8:ff:ad:14:32:a9:ab:da:3e:14:d0:02:66: af:3e:a3:37:42:95:92:4a:bd:f7:37:35:3e:bc:8e: d9:23:16:9b:4e:2e:6e:4c:d3:e0:8b:01:f6:a7:9f: 87:18:0b:d1:20:61:ba:ac:ff:dc:71:d5:85:49:6b: 89:f3:dc:17:67:2f:91:36:7d:68:43:f8:23:ed:98: aa:db:c4:3b:c7:65:10:a6:f6:55:50:4f:c3:4c:16: fd:89:88:2b:ec:60:dd:b7:94:86:c0:a8:35:54:0f: 0d:5f:f7:36:5c:da:97:00:a1:2e:ff:f4:20:51:05: eb:fe:f2:1c:98:6a:55:bb:3d:06:3b:16:d3:4d:3e: 90:42:ae:d5:d4:97:43:cc:44:33:15:1c:05:44:f5: a0:06:b0:cb:28:37:9c:4f:4a:08:9d:ea:93:c2:e9: ea:14:15:1d:5c:04:b8:0f:7a:f8:7d:0d:b1:3e:ea: ed:5f:00:27:59:c8:e4:e3:be:c7:ba:b1:f3:cd:2b: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EE:AF:88:D0:6C:44:20:54:83:14:D8:B3:4B:43:C5:77:15:D6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:25:82:df:9e:ab:59:71:bb:28:74:e4:2a:ea:ad:12:ca:a9: b9:9c:fb:7d:a1:57:2a:7f:e7:7f:0f:d0:73:b8:4b:15:e1:13: 84:3e:13:d0:78:81:e3:9f:58:ba:5c:6f:68:38:24:6c:ed:ee: 4d:5b:01:75:67:db:a5:7e:ed:b4:e8:23:21:ef:cd:a6:f1:28: a4:70:e3:c9:45:c5:9e:ac:c5:93:2b:1d:4d:b8:4b:84:af:d7: ce:ad:f2:7e:34:30:a5:f8:00:6f:d1:be:55:ff:c0:b3:33:3e: 5d:d3:ec:03:fb:ac:25:ec:16:5c:0e:a3:63:7e:0e:a5:a1:32: 47:1c:4b:31:34:62:95:07:c2:ba:ba:8c:a9:e9:e0:3c:54:04: 74:cf:a2:de:0e:00:35:00:6a:a3:33:07:8f:a3:7d:eb:4a:c6: f5:c9:33:d1:4a:f6:d5:f0:07:5b:d9:83:fd:85:2f:1d:70:88: 25:fe:cd:e0:65:8d:83:2d:f8:b0:8c:8e:fa:6d:ac:a5:6d:33: e7:b0:f2:15:9c:63:c2:b0:2f:47:5b:dd:bb:61:27:dd:09:ed: 48:2d:19:4d:53:6c:d2:af:f6:f7:a0:d9:b1:6a:cd:16:42:39: 58:30:8b:36:65:ca:ff:ac:8e:59:25:8c:f8:fa:7e:6f:d8:5f: 80:99:83:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7xxr++uQOLiioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk Y2Q4OGY1YTQtYzEzNy00YTk1LWE3MzAtNDg2NTc5OGM2NWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdFWBZD83Eo3CYZ3oGJf5ChEm4Z5/WdpBIg7 0dNMye+6UZTcya+ixaCAdjWwSOtpOrsMIphuU+FWVgVQjaj/rRQyqavaPhTQAmav PqM3QpWSSr33NzU+vI7ZIxabTi5uTNPgiwH2p5+HGAvRIGG6rP/ccdWFSWuJ89wX Zy+RNn1oQ/gj7Ziq28Q7x2UQpvZVUE/DTBb9iYgr7GDdt5SGwKg1VA8NX/c2XNqX AKEu//QgUQXr/vIcmGpVuz0GOxbTTT6QQq7V1JdDzEQzFRwFRPWgBrDLKDecT0oI neqTwunqFBUdXAS4D3r4fQ2xPurtXwAnWcjk477HurHzzSuBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjur4jQbEQgVIMU2LNLQ8V3FdZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2ZGI0NzgtODUzMS0z ZmE5LWFkMTUtZjUwMjcyYmE5NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABslgt+eq1lxuyh05CrqrRLKqbmc+32hVyp/538P0HO4SxXhE4Q+E9B4 geOfWLpcb2g4JGzt7k1bAXVn26V+7bToIyHvzabxKKRw48lFxZ6sxZMrHU24S4Sv 186t8n40MKX4AG/RvlX/wLMzPl3T7AP7rCXsFlwOo2N+DqWhMkccSzE0YpUHwrq6 jKnp4DxUBHTPot4OADUAaqMzB4+jfetKxvXJM9FK9tXwB1vZg/2FLx1wiCX+zeBl jYMt+LCMjvptrKVtM+ew8hWcY8KwL0db3bthJ90J7UgtGU1TbNKv9veg2bFqzRZC OVgwizZlyv+sjlkljPj6fm/YX4CZg6c= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:18 2026 by rpki-client