$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa File: 2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa (raw, json) Hash identifier: i9TIY/N0imQqtQuDAhN18jjf+VCRCyrwGVN4Q7et8h4= Subject key identifier: AA:6B:37:F1:46:E5:8A:C9:82:DA:74:E0:7E:82:09:73:49:56:4A:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438B2C92C7FD3E1ED8F2E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 98.16.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8b:2c:92:c7:fd:3e:1e:d8:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=67cd3ade-76d6-4836-8c7a-52c46c48081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:dc:d5:e2:72:e6:4d:ee:42:b8:27:5e:eb: 65:c4:23:f2:f5:b7:76:61:7e:23:63:16:8a:44:2f: 34:f7:91:36:8a:ee:12:aa:31:a2:8e:c9:38:43:ed: 33:97:85:ba:97:75:92:e6:f7:99:1a:4d:88:80:ae: d0:37:e2:b5:40:ce:84:da:98:7a:fb:ba:9d:0a:f7: ca:f8:44:23:a7:2f:86:f4:75:39:6c:1e:6b:57:52: 78:9d:e1:52:d4:1f:c1:8c:af:07:c2:20:bc:36:11: 42:0c:88:f6:bf:6b:e6:15:c2:ba:1e:0c:4a:ed:a6: 34:e4:bd:36:12:2c:4d:fa:56:34:7e:4f:76:6e:3d: a5:04:23:e4:c5:2c:fe:84:4b:f4:61:a5:78:cb:03: 62:a0:79:32:86:27:77:0b:20:7f:8c:ac:9b:71:cb: 50:80:bb:93:85:70:55:9c:0d:41:f0:cb:fc:11:7d: 06:fa:08:05:f0:cb:e9:2f:73:3c:72:7c:87:df:42: b8:e2:65:5c:e0:d0:52:ee:56:78:11:66:b3:b2:82: fe:69:76:68:49:40:93:52:66:ab:7b:5e:ad:ea:13: 21:4b:9a:6f:71:dd:89:a2:6a:e1:b4:3b:75:8c:69: d0:c4:b3:ee:9d:0c:39:fb:f9:99:a3:bb:af:8a:1b: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:37:F1:46:E5:8A:C9:82:DA:74:E0:7E:82:09:73:49:56:4A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:58:eb:f8:00:a3:ae:51:89:18:ab:60:30:79:73:55:56:91: 45:c2:83:4f:5b:bc:04:29:c6:59:c2:21:7a:3c:2d:de:bf:f3: f2:92:c9:24:77:23:5e:87:3a:22:30:4f:29:e5:63:61:e4:f9: 91:8f:b3:47:93:2a:c5:71:44:75:7c:95:61:45:c7:ae:c1:b3: 4e:df:e4:46:7e:ac:c6:31:73:1b:4e:70:b3:7d:dd:54:76:b4: 94:4d:f7:52:1a:f8:89:6e:3f:84:c1:92:76:c3:01:df:0d:57: 82:c8:a5:36:51:99:1b:d0:d7:75:65:2c:9a:66:f7:0a:6a:ea: 26:16:d4:51:c1:09:b1:2c:ee:25:c5:1d:ba:9f:70:85:54:b0: eb:53:32:f5:b5:f7:0e:32:ec:2e:89:c8:26:ab:c3:60:81:0d: 1d:ce:fc:d8:ae:2e:aa:5f:b6:cb:a7:61:a2:b4:d7:de:f1:17: 4c:62:2a:10:ab:bc:23:84:c8:70:a0:db:73:61:a0:e1:bd:00: 76:b3:aa:29:86:65:8d:73:71:f2:2c:51:36:c9:c2:36:8f:b2: d7:dd:e1:8e:97:98:37:c6:88:11:58:e2:81:ad:57:f8:11:92: 3e:dd:47:a9:23:44:19:53:1c:1e:79:ac:30:44:19:eb:0e:9c: ea:a4:db:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4ssksf9Ph7Y8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NjdjZDNhZGUtNzZkNi00ODM2LThjN2EtNTJjNDZjNDgwODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Pc1eJy5k3uQrgnXutlxCPy9bd2YX4jYxaK RC8095E2iu4SqjGijsk4Q+0zl4W6l3WS5veZGk2IgK7QN+K1QM6E2ph6+7qdCvfK +EQjpy+G9HU5bB5rV1J4neFS1B/BjK8HwiC8NhFCDIj2v2vmFcK6HgxK7aY05L02 EixN+lY0fk92bj2lBCPkxSz+hEv0YaV4ywNioHkyhid3CyB/jKybcctQgLuThXBV nA1B8Mv8EX0G+ggF8MvpL3M8cnyH30K44mVc4NBS7lZ4EWazsoL+aXZoSUCTUmar e16t6hMhS5pvcd2JomrhtDt1jGnQxLPunQw5+/mZo7uvihuVpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKprN/FG5YrJgtp04H6CCXNJVkoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjEyOTUzOGItYzg1ZC0z ZDFiLTgzM2ItMGRkYmRlMmE0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9Y6/gAo65RiRirYDB5c1VWkUXCg09bvAQpxlnCIXo8Ld6/8/KSySR3 I16HOiIwTynlY2Hk+ZGPs0eTKsVxRHV8lWFFx67Bs07f5EZ+rMYxcxtOcLN93VR2 tJRN91Ia+IluP4TBknbDAd8NV4LIpTZRmRvQ13VlLJpm9wpq6iYW1FHBCbEs7iXF HbqfcIVUsOtTMvW19w4y7C6JyCarw2CBDR3O/NiuLqpftsunYaK0197xF0xiKhCr vCOEyHCg23NhoOG9AHazqimGZY1zcfIsUTbJwjaPstfd4Y6XmDfGiBFY4oGtV/gR kj7dR6kjRBlTHB55rDBEGesOnOqk2wc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:18 2026 by rpki-client