$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71bc270-0d46-3c12-a580-aa51ab18f29f.roa File: d71bc270-0d46-3c12-a580-aa51ab18f29f.roa (raw, json) Hash identifier: gwFrRvdc7HkNxvQ5Q8plkvsA4qN2PKX7EBJ0E3GN0OA= Subject key identifier: 0B:18:90:E4:02:90:89:99:E5:86:AF:88:2F:98:E7:F3:D6:6B:96:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8B80BF328126034749500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71bc270-0d46-3c12-a580-aa51ab18f29f.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 13367 IP address blocks: 98.61.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:b8:0b:f3:28:12:60:34:74:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=2e77e8c0-5af1-483a-a403-46e1796d7900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:55:61:d6:1e:15:35:fa:a7:1e:ee:09:78: 4e:ca:33:29:3c:8a:6b:ff:76:44:25:fb:7d:2b:51: 4c:c3:37:56:2a:2d:74:1d:81:ae:e5:80:c2:93:4a: 43:31:30:08:51:1a:ae:36:9b:ed:66:c2:1e:2a:e5: cd:cf:c8:d9:e7:9b:00:2d:90:0c:7d:f6:1a:de:4a: 1f:f8:e4:5b:99:d0:99:a3:e8:1b:f0:10:0c:a4:e5: bb:af:21:e0:93:02:66:e2:4e:d4:91:38:82:ff:b1: 65:59:76:24:5a:d4:7f:71:28:dc:66:c1:25:e7:29: 3b:a2:4c:24:30:ac:6c:0b:8e:ad:6e:4a:b1:41:45: 4f:da:cb:3b:b5:5e:17:09:c5:c4:98:7c:3f:b3:43: 9a:db:1a:04:58:5d:c2:7c:eb:6e:14:7a:a0:a7:b0: c5:f0:67:28:11:74:84:a9:34:ac:b1:db:fa:86:2b: 61:19:bb:e7:e4:a9:36:97:34:48:65:54:bc:0a:69: dd:2a:74:79:12:7e:de:36:48:2a:2d:de:fb:83:52: b4:75:b6:f8:93:cf:71:ba:45:84:f3:23:44:4a:f1: 77:24:48:00:69:0e:4c:d0:5f:c9:b3:de:f7:7a:7a: 00:0e:eb:d3:dd:c9:99:41:7c:ad:2e:9a:7c:d2:71: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:90:E4:02:90:89:99:E5:86:AF:88:2F:98:E7:F3:D6:6B:96:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71bc270-0d46-3c12-a580-aa51ab18f29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.61.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:73:d4:33:83:82:94:8a:ac:95:36:53:86:92:06:de:bc:03: 16:4d:b6:02:41:ba:b8:0b:ff:38:2e:61:72:dd:18:b8:2b:23: 59:6a:79:c7:36:4b:e4:44:55:a4:3d:b0:25:92:f4:fb:c7:79: 73:5d:c8:ff:a0:37:13:41:4f:0c:19:bf:d2:7a:6f:a4:f1:ba: a0:fc:04:bb:02:5b:2f:ee:c2:61:66:ea:93:94:02:6a:80:3a: 6c:d8:d0:75:d1:8e:6a:6e:41:29:66:e4:91:b7:d2:e8:9c:dd: 30:89:97:be:db:45:44:40:34:b5:0c:68:67:40:27:00:9d:0c: 40:09:e2:75:a2:79:4e:81:d6:3a:51:27:67:81:d1:cf:2c:c4: 60:ce:c1:14:46:34:e1:22:38:b2:f2:6a:bb:65:a0:36:2f:0d: 3d:66:0a:8f:3a:e9:59:b6:70:2e:ff:c6:30:ee:8c:f6:fb:1a: 87:46:19:1f:94:b4:5c:fb:5c:d1:e4:80:7d:f4:fb:a8:05:fb: 9b:cd:43:a0:2f:06:3f:cd:44:39:1e:37:01:f3:e1:6e:ef:79: 06:0a:dd:89:bc:32:3a:a2:78:7c:fc:5a:48:c2:ad:c3:23:6d: e5:54:16:a9:7a:74:17:e8:b5:06:09:ac:4c:5c:27:6f:ba:72: 98:39:3e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96LgL8ygSYDR0lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MmU3N2U4YzAtNWFmMS00ODNhLWE0MDMtNDZlMTc5NmQ3OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD5VYdYeFTX6px7uCXhOyjMpPIpr/3ZEJft9 K1FMwzdWKi10HYGu5YDCk0pDMTAIURquNpvtZsIeKuXNz8jZ55sALZAMffYa3kof +ORbmdCZo+gb8BAMpOW7ryHgkwJm4k7UkTiC/7FlWXYkWtR/cSjcZsEl5yk7okwk MKxsC46tbkqxQUVP2ss7tV4XCcXEmHw/s0Oa2xoEWF3CfOtuFHqgp7DF8GcoEXSE qTSssdv6hithGbvn5Kk2lzRIZVS8CmndKnR5En7eNkgqLd77g1K0dbb4k89xukWE 8yNESvF3JEgAaQ5M0F/Js973enoADuvT3cmZQXytLpp80nHSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsYkOQCkImZ5YaviC+Y5/PWa5bEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDcxYmMyNzAtMGQ0Ni0z YzEyLWE1ODAtYWE1MWFiMThmMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVz1DODgpSKrJU2U4aSBt68AxZNtgJBurgL/zguYXLdGLgrI1lqecc2 S+REVaQ9sCWS9PvHeXNdyP+gNxNBTwwZv9J6b6TxuqD8BLsCWy/uwmFm6pOUAmqA OmzY0HXRjmpuQSlm5JG30uic3TCJl77bRURANLUMaGdAJwCdDEAJ4nWieU6B1jpR J2eB0c8sxGDOwRRGNOEiOLLyartloDYvDT1mCo866Vm2cC7/xjDujPb7GodGGR+U tFz7XNHkgH30+6gF+5vNQ6AvBj/NRDkeNwHz4W7veQYK3Ym8MjqieHz8WkjCrcMj beVUFql6dBfotQYJrExcJ2+6cpg5PnM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:17 2026 by rpki-client