$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa File: dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa (raw, json) Hash identifier: R86pCDhENCDA/13Yon6HsNLHcShThA87UteO7YtftAw= Subject key identifier: 34:8B:26:D3:13:78:76:05:61:BA:F8:53:57:F9:CF:A3:21:24:CF:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D571FBC66448ABABC60CA2C1C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 98.19.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bc:66:44:8a:ba:bc:60:ca:2c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=91fd714e-b1a0-4b11-b7c3-9319c8217f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:37:94:fa:e9:9e:62:19:a1:0d:21:ac:5c: 94:a6:48:a4:92:fc:3b:65:72:89:b6:4c:7a:3f:94: 92:e2:22:f7:be:9e:b4:b8:e2:19:16:8d:7c:b6:3f: 0f:ee:f1:11:4a:b2:34:22:b8:97:7a:a3:bc:fc:a3: 64:e3:54:e3:dc:1a:24:15:51:5e:22:a5:d0:c8:ff: be:a8:55:bb:57:70:12:7c:bd:2f:8b:01:04:1a:27: 00:a5:31:ad:7e:09:86:40:97:c2:ef:fe:a2:8a:b4: fb:53:ce:df:7a:62:09:24:8a:e1:c3:e6:ae:29:1e: a5:6f:02:5a:ac:76:4d:f9:86:00:92:f9:cc:e2:49: 2c:ca:5e:42:39:e1:76:71:09:13:c9:a0:ef:18:2c: 39:a3:1a:e9:5f:df:b7:08:1c:a5:c9:47:77:a9:7a: ef:fa:a5:7c:9e:cc:d2:1b:9e:36:55:75:2f:ab:e3: 8b:f8:d0:79:40:ae:1c:4a:fd:d4:a2:a3:da:09:ae: ac:ab:4d:a6:04:3d:b6:aa:67:19:a8:2f:51:70:ff: 15:6e:6b:a6:a4:2f:20:6a:89:40:f6:df:af:0c:29: 51:a8:9c:b6:78:20:6f:5c:27:b7:0f:a8:2a:a2:9b: d8:63:a3:60:6c:65:ce:ba:74:ad:bd:db:7c:89:39: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:26:D3:13:78:76:05:61:BA:F8:53:57:F9:CF:A3:21:24:CF:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:9b:19:cc:96:02:f0:09:c3:54:60:90:ca:11:38:6f:23:71: 1b:b4:54:a3:05:06:9d:09:15:63:1c:7a:27:d1:74:71:05:6e: 4d:97:61:cf:87:e8:21:d4:a7:e8:71:06:46:ee:8d:cf:2e:4e: 1e:18:2f:b3:b0:71:6b:d3:e6:b4:44:b4:d2:e2:e7:09:32:d0: 2c:c7:d1:fe:f8:4a:7e:fc:4d:a2:47:5c:73:c0:79:db:51:aa: 16:5b:40:58:49:ea:d2:80:8a:7a:c9:d0:fc:8b:a4:9d:bd:c4: 4b:8d:b3:7f:8e:1a:f4:1f:d7:c7:2e:c9:e3:41:f2:38:76:a3: db:af:a5:08:67:d4:15:d0:73:ca:c7:a1:0c:55:6c:9a:7b:41: 27:c3:29:80:69:6f:71:e4:0b:97:83:64:6c:59:ab:80:23:0c: 3c:de:23:73:68:df:3a:c3:1f:16:66:11:91:5f:2c:c2:01:81: b4:af:e8:4c:2c:0f:5c:95:fd:da:80:c4:b0:6d:28:98:b8:1a: 5f:a8:a8:ae:7c:95:ca:f5:70:44:e5:76:d4:ea:0c:4a:92:4c: 46:22:33:d0:96:8c:a2:92:d7:7d:0a:8f:1e:60:9a:b2:b9:a0: 85:45:29:b4:ca:dc:67:8a:69:6d:14:0f:92:f1:42:c9:3f:1b: 29:98:0c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7xmRIq6vGDKLBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OTFmZDcxNGUtYjFhMC00YjExLWI3YzMtOTMxOWM4MjE3ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxA3lPrpnmIZoQ0hrFyUpkikkvw7ZXKJtkx6 P5SS4iL3vp60uOIZFo18tj8P7vERSrI0IriXeqO8/KNk41Tj3BokFVFeIqXQyP++ qFW7V3ASfL0viwEEGicApTGtfgmGQJfC7/6iirT7U87femIJJIrhw+auKR6lbwJa rHZN+YYAkvnM4kksyl5COeF2cQkTyaDvGCw5oxrpX9+3CBylyUd3qXrv+qV8nszS G542VXUvq+OL+NB5QK4cSv3UoqPaCa6sq02mBD22qmcZqC9RcP8VbmumpC8gaolA 9t+vDClRqJy2eCBvXCe3D6gqopvYY6NgbGXOunStvdt8iTldLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSLJtMTeHYFYbr4U1f5z6MhJM+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGNmZjRlNGEtODE3Ni0z MWFjLTg2OGItZTIyZjM1MjhlN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJObGcyWAvAJw1RgkMoROG8jcRu0VKMFBp0JFWMceifRdHEFbk2XYc+H 6CHUp+hxBkbujc8uTh4YL7OwcWvT5rREtNLi5wky0CzH0f74Sn78TaJHXHPAedtR qhZbQFhJ6tKAinrJ0PyLpJ29xEuNs3+OGvQf18cuyeNB8jh2o9uvpQhn1BXQc8rH oQxVbJp7QSfDKYBpb3HkC5eDZGxZq4AjDDzeI3No3zrDHxZmEZFfLMIBgbSv6Ews D1yV/dqAxLBtKJi4Gl+oqK58lcr1cETldtTqDEqSTEYiM9CWjKKS130Kjx5gmrK5 oIVFKbTK3GeKaW0UD5LxQsk/GymYDBY= -----END CERTIFICATE-----Generated at Mon Apr 13 13:06:06 2026 by rpki-client