$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa File: 28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa (raw, json) Hash identifier: LgUcTh1Le3jEBNSuRS14Pzt2qyzd+vT3TWvnbjWb87k= Subject key identifier: 44:71:F1:9B:BD:FA:64:7D:3C:07:00:EF:58:BC:B4:CD:2B:F8:7B:BB Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D8C2A9F49C9D0D4C6A6070300 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 4213 IP address blocks: 98.126.166.0/24 maxlen: 24 98.126.213.0/24 maxlen: 24 98.126.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:9f:49:c9:d0:d4:c6:a6:07:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=3b701fdc-3f14-4e6c-8155-9de8f03f96ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:fb:5c:24:45:3f:6e:05:8f:2f:93:94:89: 57:c9:2d:40:f1:09:76:2c:70:1b:29:82:36:eb:2d: da:e9:69:42:48:13:81:be:5c:e9:2b:6f:c8:8e:d4: 0a:42:30:56:c9:ec:9c:ba:4d:23:8f:29:94:cf:5c: b8:20:2b:f3:93:18:48:be:45:27:dd:45:21:5a:87: e7:81:b1:ee:7e:ca:3e:62:42:dd:29:02:4d:0c:26: 3c:00:58:c6:0e:bb:d9:18:38:61:00:40:57:fa:93: 76:a7:00:ca:9d:a2:95:21:71:5f:54:85:69:d4:f5: 55:e9:b3:e3:9f:09:93:16:e1:93:b6:17:a8:d2:21: ac:9d:d5:ce:a9:02:7b:bc:04:8a:e9:33:d9:81:63: 76:73:b1:79:1a:4e:1f:da:97:81:eb:56:0a:55:bd: ad:44:29:e3:b3:54:a4:97:09:60:2a:58:e6:72:85: ee:e9:bb:b5:92:16:10:3f:4b:18:f5:06:5f:48:52: 42:c6:db:f5:e4:3c:f7:33:c6:76:c1:7a:1c:15:f0: 70:34:0b:05:58:50:bf:f0:4d:9e:0d:99:cb:ac:52: 70:1c:1b:1b:10:4d:16:b1:5d:c7:bc:03:94:2f:16: 36:bb:33:ef:e9:15:08:70:22:02:ce:20:95:ee:86: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:F1:9B:BD:FA:64:7D:3C:07:00:EF:58:BC:B4:CD:2B:F8:7B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.166.0/24 98.126.213.0-98.126.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3c:75:02:7c:96:34:0a:ab:68:f4:7c:04:ae:a9:a8:1c:e0: 55:69:58:9e:5c:c1:81:5b:99:17:0c:53:1a:1c:ed:25:66:f7: 2b:00:76:f9:81:f3:3e:0e:e6:40:81:dd:c7:43:a9:7b:34:ff: 22:ab:6f:cd:81:66:4f:97:ff:8c:f7:a3:1d:a4:5f:2a:1b:bd: d2:be:f7:09:06:a2:71:cc:7d:67:60:77:ac:cd:9f:61:fe:3b: 01:27:13:f8:27:87:57:fc:c6:85:d9:20:fc:1a:82:11:2d:25: 1f:aa:a5:a1:73:a7:80:4a:74:e1:e0:99:a7:08:45:89:07:55: b3:3b:5c:f5:43:95:08:99:ca:5e:64:62:bd:ac:fd:df:a5:47: 49:d0:1e:91:d5:65:0b:b7:fc:a7:e6:3d:7c:cd:05:12:26:81: 27:48:08:49:45:aa:ee:45:6c:b1:7d:48:fa:c9:61:ba:62:d6: f1:14:72:61:85:dd:14:21:8b:18:77:25:a1:8d:43:fc:95:5e: 84:03:4f:51:fb:7a:d0:c4:59:59:73:3a:eb:1d:2e:d0:66:c0: a2:6c:13:dd:c0:a1:03:e1:fb:3c:02:02:8b:14:86:c7:03:66: 77:c5:07:19:80:c5:5d:da:fa:15:32:19:0a:dc:25:36:14:6d: 54:22:bf:18 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE2MKp9JydDUxqYHAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk M2I3MDFmZGMtM2YxNC00ZTZjLTgxNTUtOWRlOGYwM2Y5NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHv7XCRFP24Fjy+TlIlXyS1A8Ql2LHAbKYI2 6y3a6WlCSBOBvlzpK2/IjtQKQjBWyeycuk0jjymUz1y4ICvzkxhIvkUn3UUhWofn gbHufso+YkLdKQJNDCY8AFjGDrvZGDhhAEBX+pN2pwDKnaKVIXFfVIVp1PVV6bPj nwmTFuGTtheo0iGsndXOqQJ7vASK6TPZgWN2c7F5Gk4f2peB61YKVb2tRCnjs1Sk lwlgKljmcoXu6bu1khYQP0sY9QZfSFJCxtv15Dz3M8Z2wXocFfBwNAsFWFC/8E2e DZnLrFJwHBsbEE0WsV3HvAOULxY2uzPv6RUIcCICziCV7oZEWwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFERx8Zu9+mR9PAcA71i8tM0r+Hu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjhlMWFhNWMtNmZjYi0z MzQyLThhZjEtODk4YzhiNjUzZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAYn6mMAwD BABiftUDBANiftAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAjDx1AnyWNAqraPR8BK6pqBzgVWlYnlzBgVuZ FwxTGhztJWb3KwB2+YHzPg7mQIHdx0OpezT/IqtvzYFmT5f/jPejHaRfKhu90r73 CQaiccx9Z2B3rM2fYf47AScT+CeHV/zGhdkg/BqCES0lH6qloXOngEp04eCZpwhF iQdVsztc9UOVCJnKXmRivaz936VHSdAekdVlC7f8p+Y9fM0FEiaBJ0gISUWq7kVs sX1I+slhumLW8RRyYYXdFCGLGHcloY1D/JVehANPUft60MRZWXM66x0u0GbAomwT 3cChA+H7PAICixSGxwNmd8UHGYDFXdr6FTIZCtwlNhRtVCK/GA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:46 2026 by rpki-client