$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa File: af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa (raw, json) Hash identifier: hNFQnAvw71Rwt5FKiKOpFQkkZBZBZKM11Rmpnt4gWEY= Subject key identifier: E7:20:BA:B1:3A:A4:DD:C6:D7:82:E7:0F:4C:94:DB:F2:4A:D9:30:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438B37F3D9E136B6F98820 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 98.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8b:37:f3:d9:e1:36:b6:f9:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ccac3912-afb7-4d51-86cf-38fa67faf5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:82:ec:9a:5e:d4:9c:e3:11:f2:d6:fb:d9: 73:aa:5d:4b:ca:8c:ec:50:ea:c3:93:1f:f8:2f:f3: 9d:d9:a0:35:09:05:a8:58:cb:6f:2e:2b:a2:63:b5: 0b:4a:e7:44:9c:c2:d7:f9:ed:00:2f:30:f6:ef:cd: a5:17:ea:a8:8b:c8:14:73:06:2d:86:3d:9d:f5:59: 12:80:14:c2:5a:1d:57:0e:f3:28:d3:e6:2b:9e:4b: fa:f0:4f:ce:8a:83:e2:67:a8:f8:cd:9d:b8:f9:fd: d1:e6:32:a4:0a:7a:42:4a:f0:fc:ad:92:e8:08:f5: b4:e9:62:8a:64:51:e7:10:a6:20:17:aa:36:51:01: 27:72:fe:a6:0f:89:39:58:c2:73:e0:ed:71:ed:22: 57:aa:01:76:e5:d5:a8:a2:b2:1f:db:8e:61:c5:37: d4:38:9c:d1:cd:74:ad:2d:c0:18:f4:6f:c7:a5:c3: 28:b5:4b:c6:22:7f:d2:3c:26:59:f0:9a:52:70:8c: a0:57:b8:be:ae:ce:94:de:2b:e5:24:a5:65:48:2e: 5d:ff:f9:11:42:96:aa:77:10:a5:f4:88:48:20:2f: 24:cf:16:a9:d2:1a:c6:05:98:b1:4c:b3:4f:87:1c: 05:c7:6b:d8:92:3d:c3:ef:71:69:c5:b5:05:8e:38: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:BA:B1:3A:A4:DD:C6:D7:82:E7:0F:4C:94:DB:F2:4A:D9:30:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dd:f7:45:dc:cd:ac:76:8d:81:b5:42:3e:71:86:0c:af:45: 3f:62:a0:f7:f4:81:0f:0d:4d:08:b3:7c:63:ed:48:ed:67:69: a5:4b:99:3e:bd:f1:36:55:57:88:e6:ea:5e:64:9f:48:3f:56: cd:af:1b:cf:7a:87:40:45:e2:cd:6b:42:a5:37:f0:3b:86:74: da:db:2c:ee:df:96:a8:23:a5:53:d4:dd:b5:11:46:70:cc:e2: 32:b1:b2:20:2c:a1:42:85:82:d7:f4:62:27:31:7d:5e:2d:b1: 33:b9:75:74:c6:35:92:21:3d:ff:05:b2:24:1b:32:c0:78:89: ad:25:50:fd:91:21:62:e3:c1:be:61:22:22:55:59:55:ca:a4: a3:3e:a9:dc:4d:9f:26:8e:ad:44:95:d1:e4:f0:31:aa:1d:b2: ef:fd:88:3e:d8:0b:54:08:a3:4b:f8:e0:d9:06:56:d4:08:c2: 27:03:16:e1:6f:b7:27:0f:41:f2:94:3b:22:cd:26:f3:32:59: 43:33:4a:86:87:5e:69:28:22:04:8e:8b:72:6b:ec:a0:25:05: 80:a4:0c:39:b6:5e:7f:e1:56:d2:12:f6:f9:d1:a9:0e:09:04: d1:2e:7d:6f:d7:b7:0a:be:c0:16:eb:50:37:a8:e3:51:6f:b7: 1a:a8:f4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4s389nhNrb5iCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Y2NhYzM5MTItYWZiNy00ZDUxLTg2Y2YtMzhmYTY3ZmFmNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XyC7Jpe1JzjEfLW+9lzql1LyozsUOrDkx/4 L/Od2aA1CQWoWMtvLiuiY7ULSudEnMLX+e0ALzD2782lF+qoi8gUcwYthj2d9VkS gBTCWh1XDvMo0+Yrnkv68E/OioPiZ6j4zZ24+f3R5jKkCnpCSvD8rZLoCPW06WKK ZFHnEKYgF6o2UQEncv6mD4k5WMJz4O1x7SJXqgF25dWoorIf245hxTfUOJzRzXSt LcAY9G/HpcMotUvGIn/SPCZZ8JpScIygV7i+rs6U3ivlJKVlSC5d//kRQpaqdxCl 9IhIIC8kzxap0hrGBZixTLNPhxwFx2vYkj3D73FpxbUFjjhOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcgurE6pN3G14LnD0yU2/JK2TAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY5YjA4MGItY2RjMy0z Yjk4LWFhOWItZjg3MjUzZDdhNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHd90Xczax2jYG1Qj5xhgyvRT9ioPf0gQ8NTQizfGPtSO1naaVLmT69 8TZVV4jm6l5kn0g/Vs2vG896h0BF4s1rQqU38DuGdNrbLO7flqgjpVPU3bURRnDM 4jKxsiAsoUKFgtf0YicxfV4tsTO5dXTGNZIhPf8FsiQbMsB4ia0lUP2RIWLjwb5h IiJVWVXKpKM+qdxNnyaOrUSV0eTwMaodsu/9iD7YC1QIo0v44NkGVtQIwicDFuFv tycPQfKUOyLNJvMyWUMzSoaHXmkoIgSOi3Jr7KAlBYCkDDm2Xn/hVtIS9vnRqQ4J BNEufW/Xtwq+wBbrUDeo41Fvtxqo9Ec= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:22 2026 by rpki-client