$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa File: 466f6df5-9580-3849-bf40-eeaab04c5e4f.roa (raw, json) Hash identifier: 1hv9Cc2oOeqOGiffj9fsV6XvoHHYQqtf+WaKdJgELnk= Subject key identifier: 1A:FF:3F:FF:01:D9:8B:6A:1E:11:64:43:BF:7D:09:62:02:8C:D5:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE8D09528243F43CCC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 98.16.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:8d:09:52:82:43:f4:3c:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=bad52a51-2f3c-4d65-9619-6e1a1a0a9c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:af:80:b7:0b:5a:e3:03:de:3c:8b:dc:a6: 41:be:a6:bd:0c:dd:aa:e0:cc:af:eb:56:e6:f9:51: 2b:83:ea:1d:0c:23:b6:63:50:6b:ca:6e:33:11:90: c8:3c:31:75:6c:f2:db:a8:73:a3:80:b5:ae:21:f0: 19:c5:07:f0:02:f6:56:9b:e1:ff:c4:70:2e:f2:97: 12:d1:58:c7:fb:77:9a:24:7b:53:53:eb:77:e1:d5: 22:16:d8:5f:13:85:72:6b:a4:91:92:a1:04:13:73: 50:db:24:c7:7e:6f:9b:c0:89:d2:21:80:59:2b:50: f2:61:d7:4d:1c:7c:cb:cd:73:18:a9:d8:01:5c:81: ef:da:9c:6a:5e:77:c2:cb:f0:8a:95:1f:13:db:d3: fa:e0:1f:11:e9:e3:04:0a:e8:59:3b:17:03:63:db: 0d:e4:d2:14:7d:e2:1e:a6:9b:a7:97:3e:0a:1f:77: e9:28:40:6c:52:d0:50:2a:3f:ca:e1:ec:53:3d:3c: 7f:f1:8b:f9:82:ba:99:4b:f1:5c:73:e3:91:f3:27: 8c:c8:5d:16:4e:56:c7:6c:18:71:f0:c6:56:1f:cb: 04:4f:a4:02:a5:a5:9a:a3:3e:2e:cf:b9:01:c8:dd: bf:f2:72:a6:d8:94:38:fd:39:17:11:6c:41:2d:35: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FF:3F:FF:01:D9:8B:6A:1E:11:64:43:BF:7D:09:62:02:8C:D5:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c0:13:0a:3d:db:5a:9b:95:96:c2:c0:81:18:36:00:96:81: f6:7a:1f:43:46:96:31:6b:60:11:83:6e:08:a2:f3:1a:bb:26: 8e:1d:32:2d:4d:40:b5:fa:c5:7c:63:27:be:c9:f3:e7:10:ec: c1:e6:5c:db:47:67:f9:34:d2:c1:8c:d0:50:18:fd:d7:33:76: 45:6b:8d:56:f3:d5:8b:b9:1e:73:82:9c:be:1d:07:86:46:38: c4:12:95:88:02:e4:48:e6:a9:f0:21:ea:ad:d4:60:84:26:6a: 03:ea:1b:d0:a1:e1:b2:c9:5f:9e:c4:d0:81:f0:34:a9:9d:fb: 5b:50:c3:c9:2e:b6:2d:4e:a3:70:b3:29:ff:63:46:30:25:15: 3b:79:00:b8:ca:84:a0:43:ee:b0:35:c6:b0:94:f9:39:60:03: d5:b1:04:6a:35:81:da:8d:f9:70:da:f2:13:f6:ef:24:9a:9c: 65:c6:64:08:ff:3b:e3:93:d8:13:df:f0:57:7d:57:9b:8b:0b: 28:b2:96:ed:5a:9d:14:01:4d:d5:2a:d3:2e:47:88:00:09:87: ca:39:c6:46:af:e3:02:5c:d3:6d:bf:be:8a:99:56:9f:1e:05: e8:f0:29:bd:b5:61:89:c5:94:bf:8a:13:7d:8a:c3:2b:c8:9d: d7:be:76:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ76NCVKCQ/Q8zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YmFkNTJhNTEtMmYzYy00ZDY1LTk2MTktNmUxYTFhMGE5YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNKvgLcLWuMD3jyL3KZBvqa9DN2q4Myv61bm +VErg+odDCO2Y1Brym4zEZDIPDF1bPLbqHOjgLWuIfAZxQfwAvZWm+H/xHAu8pcS 0VjH+3eaJHtTU+t34dUiFthfE4Vya6SRkqEEE3NQ2yTHfm+bwInSIYBZK1DyYddN HHzLzXMYqdgBXIHv2pxqXnfCy/CKlR8T29P64B8R6eMECuhZOxcDY9sN5NIUfeIe ppunlz4KH3fpKEBsUtBQKj/K4exTPTx/8Yv5grqZS/Fcc+OR8yeMyF0WTlbHbBhx 8MZWH8sET6QCpaWaoz4uz7kByN2/8nKm2JQ4/TkXEWxBLTWMhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr/P/8B2YtqHhFkQ799CWICjNWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY2ZjZkZjUtOTU4MC0z ODQ5LWJmNDAtZWVhYWIwNGM1ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbAEwo921qblZbCwIEYNgCWgfZ6H0NGljFrYBGDbgii8xq7Jo4dMi1N QLX6xXxjJ77J8+cQ7MHmXNtHZ/k00sGM0FAY/dczdkVrjVbz1Yu5HnOCnL4dB4ZG OMQSlYgC5EjmqfAh6q3UYIQmagPqG9Ch4bLJX57E0IHwNKmd+1tQw8kuti1Oo3Cz Kf9jRjAlFTt5ALjKhKBD7rA1xrCU+TlgA9WxBGo1gdqN+XDa8hP27ySanGXGZAj/ O+OT2BPf8Fd9V5uLCyiylu1anRQBTdUq0y5HiAAJh8o5xkav4wJc022/voqZVp8e BejwKb21YYnFlL+KE32KwyvInde+dsQ= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:28 2026 by rpki-client