$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa File: c43593d9-a65b-3cb2-a082-f5a291790122.roa (raw, json) Hash identifier: JErh7/Ib+XcKLgLF8efoks4uFTqGiC11WEj4BZUG95o= Subject key identifier: 98:5A:98:99:96:AD:33:60:72:9C:EF:11:D1:00:F6:BC:8C:45:2B:13 Certificate issuer: /CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Certificate serial: 010D0C9F4328584CF6ECDC951CC740FA5251FF00 Authority key identifier: 18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 19555 IP address blocks: 98.159.0.0/20 maxlen: 24 2620:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:dc:95:1c:c7:40:fa:52:51:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=635bdfad-c19a-43c8-98de-03d278ba3f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c5:a6:89:bf:33:42:c4:f7:89:8a:14:4d:f1: 36:0a:e2:00:ed:89:7a:71:fa:7e:3b:8c:76:d6:80: 6d:ab:83:f0:cc:4c:e6:08:69:a2:44:52:af:a8:17: 00:98:f6:36:fa:26:92:0f:81:5d:2d:1a:b3:d0:10: f1:52:fc:9b:34:99:b0:81:1b:0f:bd:59:af:fd:cd: b9:9e:35:bc:68:34:af:e3:13:22:93:4a:b1:a9:4d: 95:91:6b:aa:fa:be:81:f3:b6:6b:9a:68:37:c4:eb: b1:fc:d6:39:a7:c2:30:ef:1f:4d:c4:c5:91:3e:52: 81:70:0d:ce:6d:39:a9:d6:0b:44:ce:d9:03:83:8f: c8:20:1f:de:70:34:7b:b1:86:27:77:6d:9a:d9:f4: c5:b4:56:de:91:b4:ff:21:01:f3:c5:f6:88:f0:7d: 61:0b:45:f5:b1:a7:70:e0:40:96:33:37:64:51:cc: 50:8e:98:6b:34:d0:40:c7:b3:0c:da:67:59:a2:0c: 2a:c0:db:57:df:32:fd:7c:a4:86:fb:70:ed:96:7a: 80:02:f9:3c:e9:77:d6:eb:b6:c5:bf:ee:66:c6:d3: a7:77:36:43:be:e6:05:22:a1:e2:1a:8b:7c:23:f4: 2f:bb:83:b0:ed:36:ac:c9:d0:6e:a9:92:08:fe:44: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5A:98:99:96:AD:33:60:72:9C:EF:11:D1:00:F6:BC:8C:45:2B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl X509v3 Authority Key Identifier: keyid:18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer sbgp-ipAddrBlock: critical IPv4: 98.159.0.0/20 IPv6: 2620:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:34:f7:0f:70:e4:50:4f:eb:63:cf:d8:de:18:6d:cc:a7:cb: 2f:e3:a2:9c:1d:5c:82:08:bd:72:19:f2:05:29:da:9d:8c:61: 36:9c:7f:64:ac:98:0a:6b:b3:5a:d6:22:df:f3:10:91:a9:e8: e4:39:3b:d7:0d:8b:4f:74:5a:c9:3c:85:26:b3:d5:bf:3a:a2: 17:f8:7f:9f:32:2f:d5:76:8a:8d:41:a3:14:fe:3e:19:02:fa: 9e:3d:f2:cb:85:07:d7:33:b9:5c:ec:d8:4d:8b:42:be:de:d5: 53:4a:44:a7:79:94:48:43:a4:7f:86:22:dc:7e:ab:c9:5d:9c: 60:5c:96:ba:02:36:36:43:7d:18:5e:5b:b9:d4:66:02:91:57: a7:ea:f3:9a:2d:3d:ec:c5:57:2e:09:19:53:30:bb:bd:45:1d: 8d:c5:e8:0b:f4:4f:de:fa:91:28:78:48:06:5b:5c:04:cc:15: bc:fc:b4:70:72:e7:9e:b7:61:5f:e4:f6:c1:47:d7:d2:ab:f4: f4:34:0b:4e:b8:0a:4d:68:4d:c9:b4:bd:da:17:7b:0d:9d:49: 00:9c:6b:ab:64:ac:19:c5:cb:01:0e:d4:08:04:1b:47:a4:48: 4d:d9:e7:21:d4:93:03:19:be:20:40:ab:c6:46:f0:9f:e6:85: a5:8a:53:d5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEz27NyVHMdA+lJR/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFkZDZlMzAtNDA5OS00ZTA5LWIyMWEtMmQ1ODZmYzEy NWY5MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NjM1YmRmYWQtYzE5YS00M2M4LTk4ZGUtMDNkMjc4YmEzZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Wmib8zQsT3iYoUTfE2CuIA7Yl6cfp+O4x2 1oBtq4PwzEzmCGmiRFKvqBcAmPY2+iaSD4FdLRqz0BDxUvybNJmwgRsPvVmv/c25 njW8aDSv4xMik0qxqU2VkWuq+r6B87Zrmmg3xOux/NY5p8Iw7x9NxMWRPlKBcA3O bTmp1gtEztkDg4/IIB/ecDR7sYYnd22a2fTFtFbekbT/IQHzxfaI8H1hC0X1sadw 4ECWMzdkUcxQjphrNNBAx7MM2mdZogwqwNtX3zL9fKSG+3DtlnqAAvk86XfW67bF v+5mxtOndzZDvuYFIqHiGot8I/Qvu4Ow7TasydBuqZII/kR8/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJhamJmWrTNgcpzvEdEA9ryMRSsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRk NmUzMC00MDk5LTRlMDktYjIxYS0yZDU4NmZjMTI1ZjkvYzQzNTkzZDktYTY1Yi0z Y2IyLWEwODItZjVhMjkxNzkwMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjFkZDZlMzAtNDA5OS00ZTA5LWIy MWEtMmQ1ODZmYzEyNWY5L2IxZGQ2ZTMwLTQwOTktNGUwOS1iMjFhLTJkNTg2ZmMx MjVmOS5jcmwwHwYDVR0jBBgwFoAUGD3FRIcc4AJlsVD51k+Y0X/ZirkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRkNmUzMC00MDk5LTRlMDktYjIxYS0yZDU4 NmZjMTI1ZjkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEYp8AMA8E AgACMAkDBwAmIAAoAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHjT3D3DkUE/rY8/Y3hhtzKfLL+OinB1c ggi9chnyBSnanYxhNpx/ZKyYCmuzWtYi3/MQkano5Dk71w2LT3RayTyFJrPVvzqi F/h/nzIv1XaKjUGjFP4+GQL6nj3yy4UH1zO5XOzYTYtCvt7VU0pEp3mUSEOkf4Yi 3H6ryV2cYFyWugI2NkN9GF5budRmApFXp+rzmi097MVXLgkZUzC7vUUdjcXoC/RP 3vqRKHhIBltcBMwVvPy0cHLnnrdhX+T2wUfX0qv09DQLTrgKTWhNybS92hd7DZ1J AJxrq2SsGcXLAQ7UCAQbR6RITdnnIdSTAxm+IECrxkbwn+aFpYpT1Q== -----END CERTIFICATE-----Generated at Mon Mar 2 13:40:45 2026 by rpki-client