$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac767f08-783a-34b6-ab52-d322dc60e4d1.roa File: ac767f08-783a-34b6-ab52-d322dc60e4d1.roa (raw, json) Hash identifier: Sz1aXxS905MFxLm5GyuakcGRfpWf623tWCMw/sHZUxA= Subject key identifier: 67:F6:CE:2F:27:32:F7:43:AA:3F:28:CD:2E:78:FF:53:54:B7:B7:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BDD296DA0A01D729AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac767f08-783a-34b6-ab52-d322dc60e4d1.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 98.18.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:bd:d2:96:da:0a:01:d7:29:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ea91476a-a165-4c21-861f-f67721fb22e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:30:4c:11:a0:60:5a:19:7c:f8:4d:e2:9f: f7:42:50:21:92:6f:08:a7:ce:c6:33:0d:d4:60:bc: ca:8f:8d:3f:a3:96:20:1a:78:46:f1:d3:5d:44:72: 75:b3:b4:cd:32:d7:1e:48:da:f7:63:a6:55:75:c3: 11:ab:65:ad:bd:76:2d:61:94:a8:98:70:45:98:82: b6:88:49:88:3d:c9:3c:21:34:0f:1d:3e:88:4d:fc: c8:a1:95:47:49:53:c5:bb:51:0b:8f:ff:4f:da:56: f3:f2:35:ab:1c:55:f9:14:ca:23:6c:7c:6b:82:ea: 72:4e:75:e1:4a:b2:f6:57:49:54:b9:7b:f7:63:84: 86:13:9b:67:f4:e8:54:7a:fe:c4:6d:b9:41:bc:d3: 61:79:75:e4:9a:70:76:4e:e8:fb:e7:b5:87:9e:ef: 84:cb:d6:41:b6:11:07:9e:d7:32:17:aa:e3:38:93: 7f:5d:1d:f6:48:36:21:6b:89:9e:e9:47:3b:6a:9a: c9:8e:1c:69:97:1b:f1:8a:79:fb:d7:a9:11:0b:b6: e0:ed:1a:49:91:cd:e2:03:98:9e:1a:79:93:ee:61: 93:62:f7:98:bc:8e:02:7e:f6:e3:a3:74:e8:c3:e1: 27:7c:e1:3f:fc:ef:de:ed:9e:6d:bc:32:e2:b1:35: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:CE:2F:27:32:F7:43:AA:3F:28:CD:2E:78:FF:53:54:B7:B7:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac767f08-783a-34b6-ab52-d322dc60e4d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d9:c4:1e:c2:51:c9:57:b6:77:ac:a7:d5:f5:d8:67:7a:a0: 74:ef:ae:98:69:f8:8a:05:8d:47:8e:bf:14:19:ea:d2:3f:5b: 6d:de:8d:ae:bd:4c:93:dc:b8:43:ff:07:5a:d7:8b:2b:c1:64: 22:a0:40:0c:7b:40:0f:ef:03:52:fd:f0:4a:49:d4:b5:ab:25: 2f:fa:1c:d1:30:71:50:ec:2c:18:73:50:f0:b1:fe:4c:d5:57: 98:8d:2a:db:59:51:98:95:d2:fc:24:5b:9b:b0:2a:66:a0:cb: 73:4c:01:a6:d7:28:5d:46:d7:79:8b:d9:a3:09:3d:4e:2d:40: f0:1b:f7:c9:77:48:9b:ee:dd:f3:e7:35:15:65:a2:84:cb:65: c0:07:03:e2:c7:d1:66:1c:78:2e:7c:31:17:6d:f2:54:f9:cd: 04:47:05:c1:f1:a0:0c:a1:6e:0b:60:05:44:43:c1:11:c6:21: c0:e5:89:2e:42:04:25:b6:a7:d5:29:86:aa:a6:13:bb:70:b6: 7a:9d:79:95:c8:56:c0:8d:85:c3:fd:0c:ff:cb:3f:61:91:f9: 61:50:b9:b2:89:a9:18:03:66:a5:ea:ba:03:fd:ca:13:9c:8e: e9:76:8a:b0:56:15:6f:14:4d:c6:8a:7d:a3:be:2e:f6:47:9f: e5:f1:dd:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ73SltoKAdcpqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZWE5MTQ3NmEtYTE2NS00YzIxLTg2MWYtZjY3NzIxZmIyMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3cwTBGgYFoZfPhN4p/3QlAhkm8Ip87GMw3U YLzKj40/o5YgGnhG8dNdRHJ1s7TNMtceSNr3Y6ZVdcMRq2WtvXYtYZSomHBFmIK2 iEmIPck8ITQPHT6ITfzIoZVHSVPFu1ELj/9P2lbz8jWrHFX5FMojbHxrgupyTnXh SrL2V0lUuXv3Y4SGE5tn9OhUev7EbblBvNNheXXkmnB2Tuj757WHnu+Ey9ZBthEH ntcyF6rjOJN/XR32SDYha4me6Uc7aprJjhxplxvxinn716kRC7bg7RpJkc3iA5ie GnmT7mGTYveYvI4Cfvbjo3Tow+EnfOE//O/e7Z5tvDLisTVyKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf2zi8nMvdDqj8ozS54/1NUt7fLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWM3NjdmMDgtNzgzYS0z NGI2LWFiNTItZDMyMmRjNjBlNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHZxB7CUclXtnesp9X12Gd6oHTvrphp+IoFjUeOvxQZ6tI/W23eja69 TJPcuEP/B1rXiyvBZCKgQAx7QA/vA1L98EpJ1LWrJS/6HNEwcVDsLBhzUPCx/kzV V5iNKttZUZiV0vwkW5uwKmagy3NMAabXKF1G13mL2aMJPU4tQPAb98l3SJvu3fPn NRVlooTLZcAHA+LH0WYceC58MRdt8lT5zQRHBcHxoAyhbgtgBURDwRHGIcDliS5C BCW2p9UphqqmE7twtnqdeZXIVsCNhcP9DP/LP2GR+WFQubKJqRgDZqXqugP9yhOc jul2irBWFW8UTcaKfaO+LvZHn+Xx3XY= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:57 2026 by rpki-client