$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa File: 5fe97fce-61be-3557-b7c1-edbd8078a492.roa (raw, json) Hash identifier: x0U06UZCafcP8SAftV+94nLEb5WwuGrp4gilABboHds= Subject key identifier: AA:D1:35:7C:0F:9E:0F:F2:9D:E7:93:FF:FC:23:F9:1C:7B:8D:5C:FD Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584CE7EFD5605D28516442A72800 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa Signing time: Wed 18 Feb 2026 17:09:36 +0000 ROA not before: Wed 18 Feb 2026 17:09:36 +0000 ROA not after: Tue 19 May 2026 16:09:36 +0000 asID: 400662 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e7:ef:d5:60:5d:28:51:64:42:a7:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Feb 18 17:09:36 2026 GMT Not After : May 19 16:09:36 2026 GMT Subject: CN=953ea19b-20ed-4907-a343-458a293fc1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:ba:68:3f:6d:74:29:b1:2a:7a:ed:dc:91: 1b:d2:cb:a6:ac:82:83:4e:03:b6:dc:dc:47:35:3e: 5a:1f:5c:76:be:73:7d:5e:6d:7a:eb:f3:d1:50:e1: e3:3b:25:f7:89:eb:f1:63:96:5b:1e:fd:c4:d3:2b: b3:bc:c6:05:46:e2:ea:be:b6:0c:90:cc:c1:9d:67: f7:52:d2:77:1a:1e:30:dc:eb:c3:d5:27:da:61:d1: 1b:2b:68:e2:d8:9c:51:ab:dd:96:c6:40:3f:05:b2: 59:92:87:5a:40:a5:98:9c:d9:e6:6d:fa:c6:c5:81: 1d:a0:21:32:4d:41:09:c5:2d:40:1d:1b:b4:88:3c: 8c:a7:c2:22:f0:55:5b:c4:d9:2d:77:8a:b0:1c:2c: 24:3e:b6:9a:1e:45:03:79:c3:aa:92:59:77:21:c4: 71:be:21:e0:12:ac:50:0c:17:e3:6c:94:d8:db:f1: 5a:40:42:12:01:0d:9d:5a:8f:55:a2:0a:1e:f3:04: 62:05:e4:f1:02:72:49:bb:8c:cb:c6:59:72:f2:c8: 1f:7e:31:67:30:9b:82:55:db:0e:5f:1c:03:6e:e2: eb:09:48:55:be:e9:66:cc:70:ee:a9:05:26:40:84: 66:51:a1:5b:a2:d4:12:2b:bd:62:3c:70:b4:12:32: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:35:7C:0F:9E:0F:F2:9D:E7:93:FF:FC:23:F9:1C:7B:8D:5C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8d:a0:5a:0c:92:02:ff:3c:ff:ac:61:e5:fe:18:4f:60:a8: 38:0d:84:01:47:cd:23:f8:71:3c:8a:bc:2a:3b:28:d3:1c:d1: 10:3f:6a:1f:4d:a8:3b:36:e6:0e:f9:6f:dd:3a:0f:a6:fa:6f: 22:a4:f1:6c:4e:97:54:01:4a:8d:3c:db:40:04:b3:95:c4:98: 24:c6:7a:c9:ba:a0:56:a1:2c:dd:3c:c3:16:26:7a:94:e8:b1: e2:08:39:bd:07:c7:bc:e4:92:ff:94:29:1a:c3:09:ec:b8:3e: 0f:04:d0:9a:d6:01:6f:a8:eb:35:3e:8f:eb:74:6a:f6:05:0e: e7:40:36:bc:f5:e9:f2:1b:d3:c9:c0:1d:35:1e:bc:12:2d:99: 58:30:f3:ac:22:32:8e:6e:44:1d:7b:ce:20:d6:68:03:de:d5: 2d:8a:f5:1d:e6:d1:01:29:0f:e1:73:32:d7:0a:e7:7a:4a:dc: dd:01:8f:86:b8:56:66:6a:e7:b2:2f:cd:d0:5b:14:ed:e0:ba: 6e:19:c3:3e:a5:6d:28:bc:38:fc:ef:fd:0f:af:8b:ee:7d:70: e8:af:6e:17:13:72:d3:68:bc:4d:6e:53:2a:59:bf:df:54:d3: 80:e9:27:a4:66:e6:22:e5:e8:c0:a2:df:6d:a8:58:5e:3d:22: a7:cf:38:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzn79VgXShRZEKnKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDIxODE3MDkzNloXDTI2MDUxOTE2MDkzNlowLzEtMCsGA1UEAxMk OTUzZWExOWItMjBlZC00OTA3LWEzNDMtNDU4YTI5M2ZjMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqa6aD9tdCmxKnrt3JEb0sumrIKDTgO23NxH NT5aH1x2vnN9Xm166/PRUOHjOyX3ievxY5ZbHv3E0yuzvMYFRuLqvrYMkMzBnWf3 UtJ3Gh4w3OvD1SfaYdEbK2ji2JxRq92WxkA/BbJZkodaQKWYnNnmbfrGxYEdoCEy TUEJxS1AHRu0iDyMp8Ii8FVbxNktd4qwHCwkPraaHkUDecOqkll3IcRxviHgEqxQ DBfjbJTY2/FaQEISAQ2dWo9Vogoe8wRiBeTxAnJJu4zLxlly8sgffjFnMJuCVdsO XxwDbuLrCUhVvulmzHDuqQUmQIRmUaFbotQSK71iPHC0EjJdGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrRNXwPng/yneeT//wj+Rx7jVz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvNWZlOTdmY2UtNjFiZS0z NTU3LWI3YzEtZWRiZDgwNzhhNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGNoFoMkgL/PP+sYeX+GE9gqDgNhAFHzSP4cTyKvCo7KNMc0RA/ah9N qDs25g75b906D6b6byKk8WxOl1QBSo0820AEs5XEmCTGesm6oFahLN08wxYmepTo seIIOb0Hx7zkkv+UKRrDCey4Pg8E0JrWAW+o6zU+j+t0avYFDudANrz16fIb08nA HTUevBItmVgw86wiMo5uRB17ziDWaAPe1S2K9R3m0QEpD+FzMtcK53pK3N0Bj4a4 VmZq57IvzdBbFO3gum4Zwz6lbSi8OPzv/Q+vi+59cOivbhcTctNovE1uUypZv99U 04DpJ6Rm5iLl6MCi322oWF49IqfPODY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:43:48 2026 by rpki-client