$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa File: a1a78e31-2fd1-340f-9abd-830bb997d842.roa (raw, json) Hash identifier: sClJpNWR6Nmg7arLgUTLjINQ0H3LCuV5Cn+sZRXgXa0= Subject key identifier: 6B:35:76:77:09:B7:18:92:21:CF:14:6C:A6:EC:19:5B:9B:1A:44:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9EFC805CB325449C3DDF7F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 98.19.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:80:5c:b3:25:44:9c:3d:df:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=51b00236-4824-4126-be8e-d13c052314ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:a4:47:bd:cd:f4:b8:23:d7:3d:88:6d:7a: a2:d1:20:fc:68:d9:03:cb:26:33:50:8a:f1:c1:8b: 11:76:88:ea:6d:e0:58:df:59:a5:39:ac:5b:0d:df: 3a:d9:d0:58:64:ff:36:d6:e9:b3:26:8c:e0:7d:5d: e3:1e:36:4d:83:0d:ad:73:48:3b:6f:31:7d:02:bf: 1d:3d:d6:2a:34:38:25:84:03:99:a0:f1:91:0f:20: d4:39:7f:6a:dd:e7:ab:c4:38:02:d3:a5:4e:61:08: 53:9a:8f:d4:0a:db:48:61:2f:4d:24:18:1b:af:53: 5a:3f:3f:4b:59:7e:e1:d8:ff:6f:75:92:84:9c:be: 51:fd:c3:9f:64:e1:67:33:1e:f7:cf:71:74:c6:ad: bb:a6:62:d6:9f:80:59:b9:4a:46:7c:b7:b1:3d:b3: e5:fc:56:ce:03:25:02:c9:8f:a0:c7:c0:02:b8:82: b0:f2:ad:39:83:60:23:39:51:7c:9d:24:27:4f:69: e4:7e:92:81:8e:22:eb:5c:f0:bd:00:76:e8:37:cd: 43:cf:43:ad:dd:80:07:df:53:e6:22:19:4b:ea:62: 61:51:db:fb:e6:90:d8:cc:fa:80:f4:38:34:ce:15: dd:54:ab:54:f2:48:48:15:c1:fc:75:90:8d:86:a6: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:35:76:77:09:B7:18:92:21:CF:14:6C:A6:EC:19:5B:9B:1A:44:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b5:5c:5e:12:f4:41:77:4e:19:b3:f4:1a:39:ad:15:64:ae: 38:95:ce:37:51:bd:ef:44:22:13:c2:4e:ae:f7:91:2f:ba:2d: 11:1c:33:d7:c4:fb:08:4f:31:6f:57:b2:f3:39:af:12:9d:4f: cc:37:34:e0:ec:14:9b:02:26:5b:5b:61:f6:b1:7e:ac:09:ee: c8:af:8a:ff:5e:44:98:1b:c4:9e:05:40:1f:b9:34:60:93:7b: 77:37:bf:b6:ca:d6:dd:8f:1f:45:2d:cb:61:5f:3a:92:4e:6b: d7:73:a4:82:b3:c8:41:f7:55:06:72:c9:d2:6a:35:88:69:3e: 22:23:3f:a6:9c:86:dc:5a:26:1e:a4:cc:ac:0d:13:4b:01:23: 48:37:88:bd:58:c3:78:e7:e6:c8:68:e8:54:76:19:db:b8:b8: 3f:60:9f:eb:cb:4a:8b:6a:98:ea:26:d5:92:77:4e:1f:2f:39: 5c:27:f3:f4:0c:b9:69:69:5b:b6:af:ff:14:70:cc:23:06:28: 88:67:44:11:d0:53:fd:ba:d6:eb:22:4f:c0:00:78:d3:51:68: 35:68:a7:ab:ac:f1:75:45:5b:55:fb:70:ca:c8:c7:01:19:a8: ca:46:bf:a7:79:2a:5f:08:66:aa:52:b5:c3:b0:4a:b5:74:5b: 15:b0:cf:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/IBcsyVEnD3ff4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk NTFiMDAyMzYtNDgyNC00MTI2LWJlOGUtZDEzYzA1MjMxNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrmkR73N9Lgj1z2IbXqi0SD8aNkDyyYzUIrx wYsRdojqbeBY31mlOaxbDd862dBYZP821umzJozgfV3jHjZNgw2tc0g7bzF9Ar8d PdYqNDglhAOZoPGRDyDUOX9q3eerxDgC06VOYQhTmo/UCttIYS9NJBgbr1NaPz9L WX7h2P9vdZKEnL5R/cOfZOFnMx73z3F0xq27pmLWn4BZuUpGfLexPbPl/FbOAyUC yY+gx8ACuIKw8q05g2AjOVF8nSQnT2nkfpKBjiLrXPC9AHboN81Dz0Ot3YAH31Pm IhlL6mJhUdv75pDYzPqA9Dg0zhXdVKtU8khIFcH8dZCNhqbq3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs1dncJtxiSIc8UbKbsGVubGkT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFhNzhlMzEtMmZkMS0z NDBmLTlhYmQtODMwYmI5OTdkODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG21XF4S9EF3Thmz9Bo5rRVkrjiVzjdRve9EIhPCTq73kS+6LREcM9fE +whPMW9XsvM5rxKdT8w3NODsFJsCJltbYfaxfqwJ7siviv9eRJgbxJ4FQB+5NGCT e3c3v7bK1t2PH0Uty2FfOpJOa9dzpIKzyEH3VQZyydJqNYhpPiIjP6achtxaJh6k zKwNE0sBI0g3iL1Yw3jn5sho6FR2Gdu4uD9gn+vLSotqmOom1ZJ3Th8vOVwn8/QM uWlpW7av/xRwzCMGKIhnRBHQU/261usiT8AAeNNRaDVop6us8XVFW1X7cMrIxwEZ qMpGv6d5Kl8IZqpStcOwSrV0WxWwzy0= -----END CERTIFICATE-----Generated at Thu Feb 26 06:28:52 2026 by rpki-client