$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa File: bf629dc2-f852-3d47-a607-0e222991c7a9.roa (raw, json) Hash identifier: viyYUfVPAmBRAWDm98frJm1yEqPJRCZHpg4oR/RdLeE= Subject key identifier: 21:87:C8:39:F6:19:05:D9:0F:2A:A8:F5:79:13:E5:50:27:4A:6B:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BED0D0A03EC759620C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 98.17.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:d0:d0:a0:3e:c7:59:62:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=61d8f0e5-7370-459d-bbb1-c2072d591c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:0f:8d:ad:fc:7c:db:14:9a:d2:98:e4:36: 74:7a:14:9c:45:23:5b:69:3a:2b:d5:35:33:29:92: 51:da:b6:00:a5:17:21:57:ef:bd:54:73:ab:24:16: 59:b0:f6:9b:00:c5:60:85:3b:8b:35:41:dd:d9:de: 83:6a:f6:d0:42:91:1e:32:50:73:40:57:fe:c1:4c: 00:6f:d1:b8:a3:d8:35:12:59:c0:2f:8a:ae:8d:3d: f6:c0:5e:29:e5:5c:ef:5b:ea:50:2b:5c:cb:ea:af: 82:4b:c6:ba:16:75:80:94:7e:bc:a8:af:29:e1:8a: 0e:c1:74:a8:09:71:94:a1:64:1a:18:67:6b:28:b4: b1:6c:d5:ff:ec:98:7f:e7:2a:17:a5:2a:07:ed:ba: 5e:fb:67:9e:22:ff:11:c9:09:65:2b:38:f0:c9:32: cd:20:dd:b5:7c:f4:1a:60:71:f9:54:33:ea:50:62: b8:b4:6d:cc:da:6c:f6:38:14:4a:a5:29:d9:06:4d: 34:84:71:ba:83:f8:c6:24:01:02:3a:db:64:f0:ba: d1:54:91:ea:a4:03:8d:75:b6:05:5e:c2:9b:b1:9f: 58:d8:ab:a5:1f:c8:71:5e:ad:0e:c5:61:47:29:b2: 19:ca:ac:dc:f3:13:11:35:46:c8:52:32:8a:9d:39: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:C8:39:F6:19:05:D9:0F:2A:A8:F5:79:13:E5:50:27:4A:6B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6d:0a:fd:db:3c:08:93:e1:4e:73:f0:4b:b4:f9:73:f7:3f: 3a:18:5f:ae:f8:99:18:b1:94:b9:86:4e:96:85:d3:82:8c:7b: 66:e7:3e:99:85:fc:34:1f:88:74:98:10:3a:86:00:8e:9b:5f: b2:49:2c:06:09:b8:87:f2:19:3e:fe:1e:3d:83:fb:5b:60:1b: 87:7a:65:f0:84:6f:f4:6b:df:cb:03:2d:29:8a:20:18:e7:1d: ac:33:aa:a5:4c:ea:1e:13:43:88:3d:91:bc:1a:0e:cc:28:28: fe:f9:5d:76:83:07:21:af:08:89:86:57:8b:cf:ac:93:71:4c: ef:73:a6:97:c6:e2:ce:5c:ed:dc:10:af:52:7c:d0:9b:56:55: d3:9a:e6:9e:72:43:33:be:a2:23:b9:e3:95:a1:2d:3a:c6:1b: 72:60:6c:ce:5a:70:f9:0a:92:ff:33:0b:6b:d0:00:21:a3:6e: 1f:ce:34:dc:9f:66:bc:25:b6:7c:42:bb:84:ec:61:6a:35:30: 76:45:95:a1:8c:05:98:f8:8f:a3:9e:8e:6e:ed:90:45:d0:10: be:48:0f:c7:19:b9:7e:01:1c:e2:7f:d6:e5:26:75:c9:4b:8b: a9:37:75:42:dd:0e:83:f4:51:f0:f4:07:ae:0c:c5:f2:4f:a2: 9d:25:38:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ77Q0KA+x1liDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NjFkOGYwZTUtNzM3MC00NTlkLWJiYjEtYzIwNzJkNTkxYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yoPja38fNsUmtKY5DZ0ehScRSNbaTor1TUz KZJR2rYApRchV++9VHOrJBZZsPabAMVghTuLNUHd2d6DavbQQpEeMlBzQFf+wUwA b9G4o9g1ElnAL4qujT32wF4p5VzvW+pQK1zL6q+CS8a6FnWAlH68qK8p4YoOwXSo CXGUoWQaGGdrKLSxbNX/7Jh/5yoXpSoH7bpe+2eeIv8RyQllKzjwyTLNIN21fPQa YHH5VDPqUGK4tG3M2mz2OBRKpSnZBk00hHG6g/jGJAECOttk8LrRVJHqpAONdbYF XsKbsZ9Y2KulH8hxXq0OxWFHKbIZyqzc8xMRNUbIUjKKnTl9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGHyDn2GQXZDyqo9XkT5VAnSmvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY2MjlkYzItZjg1Mi0z ZDQ3LWE2MDctMGUyMjI5OTFjN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5tCv3bPAiT4U5z8Eu0+XP3PzoYX674mRixlLmGTpaF04KMe2bnPpmF /DQfiHSYEDqGAI6bX7JJLAYJuIfyGT7+Hj2D+1tgG4d6ZfCEb/Rr38sDLSmKIBjn HawzqqVM6h4TQ4g9kbwaDswoKP75XXaDByGvCImGV4vPrJNxTO9zppfG4s5c7dwQ r1J80JtWVdOa5p5yQzO+oiO545WhLTrGG3JgbM5acPkKkv8zC2vQACGjbh/ONNyf ZrwltnxCu4TsYWo1MHZFlaGMBZj4j6Oejm7tkEXQEL5ID8cZuX4BHOJ/1uUmdclL i6k3dULdDoP0UfD0B64MxfJPop0lOGQ= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:25 2026 by rpki-client