$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558d3f90-e64c-31cc-b104-e791bcde23c7.roa File: 558d3f90-e64c-31cc-b104-e791bcde23c7.roa (raw, json) Hash identifier: sbMqjZneAQyY442L50MC/gx0LwIP52XB0qYh+cur0sw= Subject key identifier: 21:FE:CA:70:4D:2B:3B:E0:7C:5C:97:B9:98:00:05:E0:4E:73:1B:63 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CED27BD2CF59347F62B38FF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558d3f90-e64c-31cc-b104-e791bcde23c7.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 6167 IP address blocks: 97.235.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:bd:2c:f5:93:47:f6:2b:38:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=8827ee8f-9895-4d0e-9ec2-f87315d52e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:cc:bd:30:84:c0:ec:c9:18:dc:cf:dd:2e: cb:d9:78:b7:a1:86:9c:82:55:d8:f0:40:51:6a:79: 34:c1:1a:9e:a9:8a:aa:ad:1a:6a:3f:f1:41:46:13: 7c:9f:99:7f:e5:f8:60:71:4d:6a:66:85:6b:87:c0: b8:65:2f:bd:8b:6f:05:08:8e:d8:3d:74:7d:60:c2: 8d:a3:f7:17:c8:26:96:84:35:54:e7:16:6b:10:99: 40:78:6f:a5:e6:8c:1a:27:a7:6f:21:5b:3b:f3:d1: a8:5e:14:a6:a6:7a:f1:da:72:a6:07:f6:6b:ee:44: 3b:56:e5:99:ef:71:73:c2:ef:b3:56:b3:be:ed:78: 60:80:db:25:a2:88:81:cd:08:89:b5:e7:aa:7f:ee: 66:24:df:62:e8:dd:9d:47:89:d8:e0:26:e7:80:d0: 4a:2c:cb:3c:5e:17:4d:95:5a:6f:0d:21:43:74:b6: 6c:6c:66:b3:a4:b2:57:1f:b4:58:de:27:fb:05:78: 2d:b7:c7:88:c8:f0:70:9a:b0:a8:d9:23:77:2e:89: d1:c8:86:9a:35:ce:39:b4:a6:3e:67:63:b9:b9:7a: a8:c1:d2:0b:88:c3:aa:97:0f:29:43:d0:f3:3b:2d: c2:db:93:09:ed:3c:be:28:37:a9:f4:8c:44:ba:7a: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:CA:70:4D:2B:3B:E0:7C:5C:97:B9:98:00:05:E0:4E:73:1B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558d3f90-e64c-31cc-b104-e791bcde23c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.235.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:67:10:47:b1:45:71:07:a6:2b:d8:c5:b3:8c:98:b1:5b:5b: 83:1c:f9:d8:3b:51:02:ad:65:ab:b0:99:14:14:4f:39:ab:3c: 4a:5c:84:b4:af:87:f1:83:c7:a4:89:38:f1:c1:39:53:d2:60: 73:07:6d:1b:ae:48:d9:94:8b:28:17:7b:33:75:c2:7e:66:08: 4d:e7:9e:e3:08:ea:bf:8b:85:37:a1:d4:3c:79:96:0c:cc:c2: 76:98:b3:ae:9b:30:0e:ca:2e:0f:4b:53:29:45:e5:df:2e:38: 10:fa:b0:17:8e:a6:55:09:90:a4:2e:24:cd:51:7f:9a:0a:ee: 43:36:70:cc:45:6f:d6:b1:1f:4b:e2:d9:43:96:aa:b9:47:0e: ae:a9:83:d5:6e:92:c1:fa:f8:19:89:42:86:4f:78:98:1a:e4: 92:68:c7:58:46:87:ec:f1:cd:f9:df:71:24:e8:ab:1d:23:31: 7b:bf:e8:04:4b:0f:e3:3a:3d:27:30:a9:94:19:23:e2:c5:43: 68:89:66:a0:c8:17:1b:f7:5e:e9:9e:3c:c8:07:e3:bf:67:14: d0:10:8c:91:63:3e:f3:41:c6:ef:52:60:4b:f0:3b:38:20:1d: 89:5a:93:76:92:37:11:af:be:c6:81:a0:97:ad:60:26:be:2f: 8c:d5:7b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ70s9ZNH9is4/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk ODgyN2VlOGYtOTg5NS00ZDBlLTllYzItZjg3MzE1ZDUyZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUDMvTCEwOzJGNzP3S7L2Xi3oYacglXY8EBR ank0wRqeqYqqrRpqP/FBRhN8n5l/5fhgcU1qZoVrh8C4ZS+9i28FCI7YPXR9YMKN o/cXyCaWhDVU5xZrEJlAeG+l5owaJ6dvIVs789GoXhSmpnrx2nKmB/Zr7kQ7VuWZ 73Fzwu+zVrO+7XhggNslooiBzQiJteeqf+5mJN9i6N2dR4nY4CbngNBKLMs8XhdN lVpvDSFDdLZsbGazpLJXH7RY3if7BXgtt8eIyPBwmrCo2SN3LonRyIaaNc45tKY+ Z2O5uXqowdILiMOqlw8pQ9DzOy3C25MJ7Ty+KDep9IxEunqZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH+ynBNKzvgfFyXuZgABeBOcxtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTU4ZDNmOTAtZTY0Yy0z MWNjLWIxMDQtZTc5MWJjZGUyM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYeuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtnEEexRXEHpivYxbOMmLFbW4Mc+dg7UQKtZauwmRQUTzmrPEpchLSv h/GDx6SJOPHBOVPSYHMHbRuuSNmUiygXezN1wn5mCE3nnuMI6r+LhTeh1Dx5lgzM wnaYs66bMA7KLg9LUylF5d8uOBD6sBeOplUJkKQuJM1Rf5oK7kM2cMxFb9axH0vi 2UOWqrlHDq6pg9VuksH6+BmJQoZPeJga5JJox1hGh+zxzfnfcSToqx0jMXu/6ARL D+M6PScwqZQZI+LFQ2iJZqDIFxv3XumePMgH479nFNAQjJFjPvNBxu9SYEvwOzgg HYlak3aSNxGvvsaBoJetYCa+L4zVe3A= -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:21 2026 by rpki-client