$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870e583e-d970-3600-bf08-f9584438e1b2.roa File: 870e583e-d970-3600-bf08-f9584438e1b2.roa (raw, json) Hash identifier: 7T51/gq4WwmX6MCO6j81bQSiGG/+zYy6mHKzl15ztLw= Subject key identifier: FB:93:34:6C:BB:AF:80:1E:06:55:01:DC:85:B7:E0:13:FB:D3:25:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE964F5BFB2F8EF1B59D340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870e583e-d970-3600-bf08-f9584438e1b2.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22909 IP address blocks: 98.240.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:64:f5:bf:b2:f8:ef:1b:59:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=82702d5f-c4b4-45d4-b9f7-60eba7d9c137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:5d:3c:0d:c0:c1:c4:f7:ee:ec:c2:42:56: 2e:92:f3:2f:43:80:d1:63:6d:1e:9b:62:07:13:fe: 81:6c:f0:04:93:16:f1:08:cd:3b:e3:21:fd:36:3b: 48:a0:ef:a2:5d:b5:ed:e1:48:8c:e1:28:cc:8c:cf: c1:77:56:2a:73:1b:eb:a5:bb:ef:16:fa:fd:56:5c: 37:45:cd:62:f2:1c:7a:b3:3c:c7:21:e3:e7:98:5c: dc:4b:20:45:32:61:06:8f:1e:07:31:46:00:cc:ee: ab:f4:cd:7e:a1:1f:0a:eb:83:25:99:47:d5:82:fd: b4:36:42:f4:32:cb:96:71:27:ab:bd:94:12:9a:3b: 9b:73:40:33:36:db:de:e2:af:2f:b4:cc:0c:41:2a: 13:6b:3b:4a:42:a9:42:79:66:f2:6a:28:8d:c8:04: 19:71:6c:7e:da:53:4f:2d:de:00:12:d6:94:15:5d: 6a:90:4e:17:0c:f8:08:60:fb:77:62:03:7c:35:d3: f7:1e:9f:18:f4:f2:a1:45:0b:99:bc:55:9d:87:07: b3:f8:b6:e9:cb:f0:b8:57:e7:f6:6e:59:9a:56:e0: e4:d3:7b:ef:b8:e3:68:da:22:56:3d:8e:63:06:97: f7:9c:3d:46:8a:36:67:4d:d5:e5:6a:05:71:1b:ed: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:93:34:6C:BB:AF:80:1E:06:55:01:DC:85:B7:E0:13:FB:D3:25:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870e583e-d970-3600-bf08-f9584438e1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d5:87:d8:be:30:8a:aa:56:c9:0b:99:21:f7:4d:f4:59:0c: ec:5a:54:69:1a:8a:50:7a:8f:71:e1:82:f6:57:be:ba:cb:7c: 76:b8:53:5b:d9:b3:97:92:1c:0a:76:38:e4:fc:6d:e3:08:27: f6:aa:8f:cc:c1:96:6a:4d:ad:8b:bb:7f:56:81:4f:14:76:ae: 6b:b6:cb:8f:69:76:9b:01:83:e2:32:72:b3:f8:66:3e:09:1e: 0d:88:84:32:f9:05:8e:d4:e5:3b:55:de:91:9b:3c:18:f0:3b: 4b:a7:a8:ba:00:01:fa:2e:80:2b:7b:c6:c1:af:13:92:37:c3: 44:f3:75:a3:65:17:2f:cc:26:23:d4:67:bf:0c:b2:f2:56:26: 47:17:49:e8:4a:a3:42:02:85:d6:bb:98:00:22:1e:af:16:9e: 4b:87:c7:ad:2b:10:9a:d7:fb:e7:4c:e8:ac:06:b5:38:ad:f2: c3:82:05:4f:d8:52:56:5e:d5:5b:19:74:e7:b0:aa:c2:24:b3: 64:c9:64:c2:e2:51:29:12:c3:84:8e:7c:47:2b:8b:99:10:fc: 21:95:d4:de:43:b9:af:61:38:d0:5e:c1:99:92:2c:e8:1a:13: af:dc:a8:26:87:a9:5f:33:58:25:db:44:a3:3a:75:74:4c:90: e6:d5:92:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96WT1v7L47xtZ00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ODI3MDJkNWYtYzRiNC00NWQ0LWI5ZjctNjBlYmE3ZDljMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNBdPA3AwcT37uzCQlYukvMvQ4DRY20em2IH E/6BbPAEkxbxCM074yH9NjtIoO+iXbXt4UiM4SjMjM/Bd1YqcxvrpbvvFvr9Vlw3 Rc1i8hx6szzHIePnmFzcSyBFMmEGjx4HMUYAzO6r9M1+oR8K64MlmUfVgv20NkL0 MsuWcServZQSmjubc0AzNtve4q8vtMwMQSoTaztKQqlCeWbyaiiNyAQZcWx+2lNP Ld4AEtaUFV1qkE4XDPgIYPt3YgN8NdP3Hp8Y9PKhRQuZvFWdhwez+Lbpy/C4V+f2 blmaVuDk03vvuONo2iJWPY5jBpf3nD1GijZnTdXlagVxG+0KvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuTNGy7r4AeBlUB3IW34BP70yXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcwZTU4M2UtZDk3MC0z NjAwLWJmMDgtZjk1ODQ0MzhlMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXVh9i+MIqqVskLmSH3TfRZDOxaVGkailB6j3HhgvZXvrrLfHa4U1vZ s5eSHAp2OOT8beMIJ/aqj8zBlmpNrYu7f1aBTxR2rmu2y49pdpsBg+IycrP4Zj4J Hg2IhDL5BY7U5TtV3pGbPBjwO0unqLoAAfougCt7xsGvE5I3w0TzdaNlFy/MJiPU Z78MsvJWJkcXSehKo0IChda7mAAiHq8WnkuHx60rEJrX++dM6KwGtTit8sOCBU/Y UlZe1VsZdOewqsIks2TJZMLiUSkSw4SOfEcri5kQ/CGV1N5Dua9hONBewZmSLOga E6/cqCaHqV8zWCXbRKM6dXRMkObVkks= -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:01 2026 by rpki-client