$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa File: 34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa (raw, json) Hash identifier: SidZ/3tHHQzt5TqAv47o8DXjb4eNyFBuxqHuaKbAnpA= Subject key identifier: 33:A7:DB:95:F0:90:05:9F:8C:94:2D:11:AB:A0:51:8C:3F:65:44:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C59315C0E4F8D8F641A033A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.17.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:5c:0e:4f:8d:8f:64:1a:03:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=e13fe247-40a5-477d-be25-40f9c5200695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ee:04:09:50:7e:86:5f:59:48:66:86:06:db: 66:3d:7c:58:b0:dd:bd:e6:5b:76:48:0c:06:f7:b8: ab:1c:ff:31:59:f2:89:68:5b:b1:8d:8f:c2:76:29: 21:25:be:a4:69:38:ed:39:68:1e:d3:95:1f:3f:34: 2d:76:fa:b8:fd:af:9c:af:41:a1:51:dd:e3:73:fc: ca:bb:3a:98:03:3d:8a:1b:c7:91:e3:6e:ed:24:71: ac:d7:b2:5d:c5:66:3d:7a:1a:41:b3:aa:29:df:d5: 84:e2:25:35:4b:bd:fd:0d:1f:54:8e:4d:d2:dc:38: 89:16:23:03:0a:e2:82:1f:e9:ec:1e:18:ff:02:d3: e7:8c:79:ef:19:5e:6a:b1:57:a4:4e:4d:64:8a:d6: 5f:ba:0f:d0:ab:5f:ea:fa:74:1f:04:a0:f5:51:56: 9a:37:2b:46:ba:e7:14:2a:cc:ce:14:eb:f2:54:3f: 3f:ce:a2:86:c0:b9:5d:18:c0:25:f0:e5:b8:d2:34: 18:cb:33:f2:5f:4a:31:58:0e:d3:c4:c1:7b:20:9a: 8c:78:6d:f4:b5:ff:3d:10:c9:ed:76:ee:46:b0:5b: 59:95:61:fc:7f:51:f1:ba:97:1e:58:d9:87:fe:7b: 4b:32:76:93:cc:03:dc:5e:3a:21:c6:91:b2:02:dd: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:DB:95:F0:90:05:9F:8C:94:2D:11:AB:A0:51:8C:3F:65:44:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:65:0a:e8:29:cb:8c:3f:6f:ae:3d:35:81:21:73:aa:a6: 9b:16:06:0e:b6:ff:5d:f3:d9:bd:6b:31:f7:d3:95:61:7e:0f: 34:3d:02:64:e0:4c:43:93:a4:2c:5b:b8:a5:5c:48:22:8b:ea: 2c:49:87:8d:eb:02:af:c7:32:4d:64:2c:0d:01:e9:5d:c7:e2: f9:aa:2d:8f:25:28:ad:c9:b9:b9:1c:6b:fd:4e:63:a5:6a:11: d0:b7:a8:af:39:09:b1:51:a2:c1:9b:6e:a6:46:8f:85:e1:c0: 0a:df:61:33:f7:c7:49:99:a3:ac:eb:f2:52:b1:51:fe:7e:66: c1:8d:32:2a:05:74:71:2b:e9:a9:8f:d7:b6:98:69:c9:5f:71: 4d:96:02:c5:00:8f:12:e2:cb:8d:2c:f3:ba:e6:01:5c:04:fd: 9a:46:af:37:51:64:b1:b9:40:cb:57:64:dc:26:b1:35:0b:a6: 06:7a:7f:d8:40:45:a0:07:73:ff:08:bb:fc:e4:17:42:7d:c1: 2a:b9:6e:26:ae:7c:04:14:dd:5a:35:5b:bc:2f:7e:19:30:f4: 66:ca:ec:b8:c6:68:6c:f0:1d:ef:86:7f:bb:a2:24:d5:a2:3a: f7:ce:96:90:0a:2c:51:05:67:e2:89:3f:cd:54:87:07:9c:08: 5d:51:d9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMVwOT42PZBoDOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk ZTEzZmUyNDctNDBhNS00NzdkLWJlMjUtNDBmOWM1MjAwNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9e4ECVB+hl9ZSGaGBttmPXxYsN295lt2SAwG 97irHP8xWfKJaFuxjY/CdikhJb6kaTjtOWge05UfPzQtdvq4/a+cr0GhUd3jc/zK uzqYAz2KG8eR427tJHGs17JdxWY9ehpBs6op39WE4iU1S739DR9Ujk3S3DiJFiMD CuKCH+nsHhj/AtPnjHnvGV5qsVekTk1kitZfug/Qq1/q+nQfBKD1UVaaNytGuucU KszOFOvyVD8/zqKGwLldGMAl8OW40jQYyzPyX0oxWA7TxMF7IJqMeG30tf89EMnt du5GsFtZlWH8f1HxupceWNmH/ntLMnaTzAPcXjohxpGyAt29XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOn25XwkAWfjJQtEaugUYw/ZUR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRjOWNkN2EtYmJkZi0z NGIyLWJlNDgtYmY4MWQ3ZTkxNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrMZQroKcuMP2+uPTWBIXOqppsWBg62/13z2b1rMffTlWF+DzQ9AmTg TEOTpCxbuKVcSCKL6ixJh43rAq/HMk1kLA0B6V3H4vmqLY8lKK3Jubkca/1OY6Vq EdC3qK85CbFRosGbbqZGj4XhwArfYTP3x0mZo6zr8lKxUf5+ZsGNMioFdHEr6amP 17aYaclfcU2WAsUAjxLiy40s87rmAVwE/ZpGrzdRZLG5QMtXZNwmsTULpgZ6f9hA RaAHc/8Iu/zkF0J9wSq5biaufAQU3Vo1W7wvfhkw9GbK7LjGaGzwHe+Gf7uiJNWi OvfOlpAKLFEFZ+KJP81UhwecCF1R2VI= -----END CERTIFICATE-----Generated at Thu Feb 26 06:29:00 2026 by rpki-client