$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa File: 99b607dc-2978-3b44-84fa-7abdd10b450a.roa (raw, json) Hash identifier: 4Biu9eHh/w4m1rEliEY9o8APhVLNcF1vV19PKF6NPPo= Subject key identifier: CE:88:28:77:3A:96:EF:BC:82:A7:20:39:DC:ED:29:28:7A:29:C2:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9EFC808BDE465BE70A67C080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.21.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:80:8b:de:46:5b:e7:0a:67:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=d1781ac5-85a8-488b-8263-d2814cf3f91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:28:3c:72:d4:0a:81:b1:dd:12:be:fb:32: 65:f6:47:eb:5b:b8:db:a6:ce:c2:ee:0b:1b:c1:3f: 38:fa:20:e2:33:11:f1:fd:92:bf:16:ce:c3:c2:01: d1:4c:03:9e:d3:b8:c0:e9:0b:42:9d:f7:88:c0:11: 33:97:32:9e:85:90:93:b3:2d:9f:a9:c9:00:40:71: 41:c4:26:22:58:3d:58:22:8d:7c:b4:d0:40:ac:a6: 28:60:37:29:a4:76:77:2f:b5:33:4b:95:f7:85:f3: 6b:82:66:51:a3:01:59:bd:b1:7b:b6:6e:a9:50:b7: bb:52:f9:e4:5f:96:69:a4:20:6f:60:e9:19:eb:72: d8:c4:0a:64:4b:10:fe:83:2c:97:3e:12:f1:99:dc: 8d:2b:62:c4:a6:eb:10:72:35:cb:bf:dd:f4:54:a6: 6a:1e:7d:ee:0d:6c:38:43:6a:73:67:af:2c:a8:b9: 43:91:52:19:a6:ff:a9:59:bd:db:06:57:c6:e1:4a: a1:52:6d:c7:56:eb:d6:74:65:c1:48:85:fb:e9:ee: b0:9b:32:99:8b:db:a8:6a:00:6a:11:6a:70:25:0c: 37:1f:ab:da:7c:da:c8:e5:62:b1:10:3d:7a:b4:8b: ec:1d:e4:95:99:8c:58:00:0f:e4:d4:02:af:74:b9: 36:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:28:77:3A:96:EF:BC:82:A7:20:39:DC:ED:29:28:7A:29:C2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e7:bc:f2:d4:fb:c7:ba:48:d8:03:9e:fa:e7:ff:1a:71:18: 37:2e:01:55:69:50:0e:cb:45:55:83:1c:07:56:dc:ca:a0:17: 06:62:6c:38:2a:f0:b9:da:13:9e:19:79:f5:0f:f4:ea:1f:85: c6:4f:79:65:90:ed:0c:48:c5:62:79:e9:15:85:14:74:59:f9: 5b:75:7e:16:05:ae:4c:1a:2c:1e:b3:21:3d:91:4e:66:67:62: 34:53:f0:62:71:f5:6f:64:0a:96:54:dd:33:20:b1:8f:0d:07: e4:2c:1f:ac:93:3e:c4:ca:9e:74:56:eb:0d:05:84:d2:4f:21: 83:8c:29:aa:6c:a2:16:44:2b:a7:a3:27:e9:19:22:8a:06:a0: a7:de:33:d0:bf:35:2f:da:4d:b7:22:7a:b9:82:3c:0a:a1:b6: 3a:b5:b8:e7:63:0c:b7:7a:60:f1:99:9b:d5:05:94:c7:ea:34: 81:41:4e:38:81:a6:36:3c:96:c7:47:ac:3e:a5:ff:b2:9c:29: 8f:30:3e:72:f6:85:2c:08:88:fd:ce:86:c7:84:9b:f5:64:a4: 38:ac:e6:45:3f:b4:eb:8d:dc:83:a3:7f:2f:a9:a1:79:88:bf: ed:b8:5a:c7:b1:f7:f6:1b:39:4f:53:81:eb:d5:45:46:6b:8e: 97:ad:54:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/ICL3kZb5wpnwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk ZDE3ODFhYzUtODVhOC00ODhiLTgyNjMtZDI4MTRjZjNmOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UooPHLUCoGx3RK++zJl9kfrW7jbps7C7gsb wT84+iDiMxHx/ZK/Fs7DwgHRTAOe07jA6QtCnfeIwBEzlzKehZCTsy2fqckAQHFB xCYiWD1YIo18tNBArKYoYDcppHZ3L7UzS5X3hfNrgmZRowFZvbF7tm6pULe7Uvnk X5ZppCBvYOkZ63LYxApkSxD+gyyXPhLxmdyNK2LEpusQcjXLv930VKZqHn3uDWw4 Q2pzZ68sqLlDkVIZpv+pWb3bBlfG4UqhUm3HVuvWdGXBSIX76e6wmzKZi9uoagBq EWpwJQw3H6vafNrI5WKxED16tIvsHeSVmYxYAA/k1AKvdLk2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6IKHc6lu+8gqcgOdztKSh6KcJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliNjA3ZGMtMjk3OC0z YjQ0LTg0ZmEtN2FiZGQxMGI0NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7nvPLU+8e6SNgDnvrn/xpxGDcuAVVpUA7LRVWDHAdW3MqgFwZibDgq 8LnaE54ZefUP9OofhcZPeWWQ7QxIxWJ56RWFFHRZ+Vt1fhYFrkwaLB6zIT2RTmZn YjRT8GJx9W9kCpZU3TMgsY8NB+QsH6yTPsTKnnRW6w0FhNJPIYOMKapsohZEK6ej J+kZIooGoKfeM9C/NS/aTbciermCPAqhtjq1uOdjDLd6YPGZm9UFlMfqNIFBTjiB pjY8lsdHrD6l/7KcKY8wPnL2hSwIiP3OhseEm/VkpDis5kU/tOuN3IOjfy+poXmI v+24Wsex9/YbOU9TgevVRUZrjpetVFk= -----END CERTIFICATE-----Generated at Thu Feb 26 06:32:50 2026 by rpki-client