$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa File: ca8ad885-891a-3218-b71b-69d42f35fd5c.roa (raw, json) Hash identifier: tAnf8bmezAL8puzuKmleRRGWCcJVPTTVr9+PilswcG8= Subject key identifier: 44:94:8A:8A:A4:5E:6B:7E:E2:73:FA:63:CC:6B:59:11:82:1E:19:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D52438A4154243F2E488C9C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 98.18.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8a:41:54:24:3f:2e:48:8c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ee614712-3d62-422e-9c96-d7d2c34b5fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:da:b4:4d:28:1c:25:92:b0:cd:25:9c:25: 37:d2:7d:4d:50:4e:71:98:6f:90:11:d3:af:ec:95: 50:cd:bb:57:45:77:3a:df:2d:b2:6b:11:37:9c:1c: f5:7c:1f:c5:f9:61:73:e2:8c:f4:67:33:a9:2f:69: 86:e1:2c:91:83:2b:09:2b:a4:78:32:c4:ca:54:83: 55:1b:0b:77:71:a8:b4:48:60:bb:c8:86:23:0a:3d: ff:96:5a:18:a6:c0:fd:3e:2c:5d:40:3b:0c:6d:6b: f3:bb:30:e2:0f:83:3a:0e:17:f4:46:13:f3:62:bc: cc:33:fb:d0:12:8e:00:73:8b:22:e1:33:d5:bc:7b: 64:58:f0:2c:01:03:04:8b:ea:03:04:e9:e3:fc:39: 64:eb:e5:12:48:90:51:40:98:2f:71:aa:9f:5e:95: 7d:e3:18:d4:37:ec:c5:81:e7:2f:d9:f7:8a:cf:a1: 4f:df:92:52:09:32:b7:91:be:dc:b6:77:3d:ef:04: 3d:e6:fe:bb:12:78:e3:dc:65:70:0b:29:e8:0d:6e: 3a:67:99:f1:77:08:c9:16:10:cf:21:85:c0:5f:48: 5d:40:2b:51:f8:0d:23:62:fb:c8:a6:77:74:70:79: a1:29:4f:19:98:28:7c:a6:02:1f:eb:a0:d9:97:a7: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:94:8A:8A:A4:5E:6B:7E:E2:73:FA:63:CC:6B:59:11:82:1E:19:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a0:49:1a:3b:69:d2:ee:cc:e4:34:7e:85:08:08:1f:3f:f2: e7:6a:bb:2e:98:e8:61:ef:1e:80:4f:e4:9c:06:fa:e7:07:30: a1:bb:70:5e:96:69:d4:f1:e0:39:5e:50:5a:57:eb:b4:e2:24: 71:03:7e:9b:06:aa:be:d3:ba:a3:35:02:11:7f:bc:54:2d:7a: ae:13:17:4f:fb:97:a1:2e:42:2d:e8:eb:57:9d:16:ad:09:5f: 8a:70:9a:03:a1:ef:6c:2f:9e:26:44:3a:38:d3:7f:57:d8:a9: 3e:59:9e:24:1c:03:c6:e5:85:8a:92:e4:38:3c:e3:73:7d:bc: 78:d2:eb:c8:2c:85:33:18:09:cc:7c:5c:7f:69:53:5c:21:92: 5d:a9:dd:99:1e:13:92:b8:e6:5f:ba:56:8e:5a:04:d9:9a:a1: 59:e0:cc:48:74:d8:a2:47:ac:16:7a:63:d7:7f:ce:3a:62:87: 1b:db:dc:0b:43:06:20:d0:6f:50:20:82:ea:64:4c:4c:f9:a8: bc:7a:e1:9e:0d:4c:54:d2:c4:68:12:56:64:ce:86:25:92:85: 02:31:45:f0:bb:ef:7b:1f:0c:7c:3b:db:04:98:9a:51:72:5d: b5:d3:de:b9:5f:60:db:0e:b0:36:e8:6f:b1:e2:89:4c:24:8b: 61:f7:d2:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4pBVCQ/LkiMnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZWU2MTQ3MTItM2Q2Mi00MjJlLTljOTYtZDdkMmMzNGI1ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGbatE0oHCWSsM0lnCU30n1NUE5xmG+QEdOv 7JVQzbtXRXc63y2yaxE3nBz1fB/F+WFz4oz0ZzOpL2mG4SyRgysJK6R4MsTKVINV Gwt3cai0SGC7yIYjCj3/lloYpsD9PixdQDsMbWvzuzDiD4M6Dhf0RhPzYrzMM/vQ Eo4Ac4si4TPVvHtkWPAsAQMEi+oDBOnj/Dlk6+USSJBRQJgvcaqfXpV94xjUN+zF gecv2feKz6FP35JSCTK3kb7ctnc97wQ95v67Enjj3GVwCynoDW46Z5nxdwjJFhDP IYXAX0hdQCtR+A0jYvvIpnd0cHmhKU8ZmCh8pgIf66DZl6dRvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESUioqkXmt+4nP6Y8xrWRGCHhnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E4YWQ4ODUtODkxYS0z MjE4LWI3MWItNjlkNDJmMzVmZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEugSRo7adLuzOQ0foUICB8/8udquy6Y6GHvHoBP5JwG+ucHMKG7cF6W adTx4DleUFpX67TiJHEDfpsGqr7TuqM1AhF/vFQteq4TF0/7l6EuQi3o61edFq0J X4pwmgOh72wvniZEOjjTf1fYqT5ZniQcA8blhYqS5Dg843N9vHjS68gshTMYCcx8 XH9pU1whkl2p3ZkeE5K45l+6Vo5aBNmaoVngzEh02KJHrBZ6Y9d/zjpihxvb3AtD BiDQb1AggupkTEz5qLx64Z4NTFTSxGgSVmTOhiWShQIxRfC773sfDHw72wSYmlFy XbXT3rlfYNsOsDbob7HiiUwki2H30t8= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:57 2026 by rpki-client