$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa File: 3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa (raw, json) Hash identifier: brVhlb/IY0KHA3aYrPHpCBNJhGf9ryavh7DWdWzSdkk= Subject key identifier: 2E:E4:75:F5:55:FB:27:36:E2:0B:F2:9B:F7:A0:D8:D8:9D:00:AD:D2 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584D9A200F132284D85CE455C380 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 13213 IP address blocks: 98.159.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0f:13:22:84:d8:5c:e4:55:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=d7c6239e-396e-49d8-868d-4f137066e783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:fb:83:b6:87:39:28:a2:ad:ba:96:3c:2b: b9:04:42:84:c1:1f:6a:99:78:6d:0a:51:a0:18:ed: d7:20:bb:5a:64:37:6c:63:ee:8e:01:72:4e:df:c7: 5f:2e:52:a6:6d:86:38:1e:00:92:02:69:0f:9d:41: a6:64:21:d1:39:79:66:66:b4:43:44:9c:e2:47:87: 0a:77:e9:be:ad:ba:ce:c5:e2:81:54:05:6d:de:eb: 1d:14:2a:bb:5e:fd:24:ab:77:8f:83:54:40:f0:23: a3:6c:16:bf:fb:ab:dc:5b:bb:58:82:fb:55:41:6e: a2:cb:1c:26:a9:65:a9:be:f7:50:e9:58:7d:ba:b8: 6e:23:1f:8d:6b:2f:3f:86:60:c7:19:fb:f0:41:09: ed:02:97:a5:eb:68:fb:c0:a8:f9:b8:73:5c:ae:09: c7:3e:f9:14:ba:d3:65:ad:9d:62:31:35:43:8c:99: 50:6f:70:9f:30:e1:be:06:ef:b4:6a:ea:49:8f:8e: 34:45:db:9c:2c:c2:53:f5:fb:30:48:dc:28:86:fd: 52:62:70:52:a1:d9:9a:b5:8f:32:6b:e4:1d:a9:ad: 1b:43:70:89:67:24:c0:83:cf:5a:9e:61:19:8e:ab: 85:e4:18:2b:86:f9:94:2f:f3:8b:dd:bc:30:27:ef: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:75:F5:55:FB:27:36:E2:0B:F2:9B:F7:A0:D8:D8:9D:00:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:24:55:79:46:7e:a6:44:1c:b3:b2:19:50:d9:0d:d6:a0:50: c2:b1:cf:64:04:9b:96:c7:d6:0d:88:10:5a:4c:75:60:12:76: 7d:13:8b:97:51:d9:cb:79:eb:4f:56:9b:2e:79:98:f5:91:a1: 8a:51:7a:ae:ae:2d:31:d1:17:4e:68:72:7b:1e:72:64:7c:0b: 93:09:43:32:67:8f:a8:6f:0b:b7:8c:1c:61:fd:09:f5:79:93: 01:ec:59:9c:1a:84:d6:1f:c4:5c:9b:d9:9d:fd:6f:e9:0a:fa: ca:ab:1b:18:03:d8:ac:7e:13:2d:b1:37:bc:fe:5a:8f:ac:5d: bb:0d:49:f1:60:44:00:31:35:97:5a:32:74:67:ab:20:9e:28: 29:fe:b2:35:94:8e:d8:86:2b:68:e2:e4:fb:ca:e6:b4:15:ef: 36:aa:35:35:07:50:78:ce:75:88:a6:2c:56:83:bf:50:be:e8: 96:77:d5:c1:f5:fc:7f:0f:b2:87:68:f4:e5:6a:76:d6:d6:0b: 85:19:32:f2:39:ec:2a:9b:5a:f7:de:c2:fe:64:76:56:96:3c: 07:ea:5d:51:8e:18:90:8f:74:c8:bd:9d:95:a9:52:b3:0a:39: b1:ac:85:8a:60:14:4d:ca:15:c3:5e:28:2a:63:fb:45:06:75: a6:3f:fe:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIA8TIoTYXORVw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZDdjNjIzOWUtMzk2ZS00OWQ4LTg2OGQtNGYxMzcwNjZlNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdT7g7aHOSiirbqWPCu5BEKEwR9qmXhtClGg GO3XILtaZDdsY+6OAXJO38dfLlKmbYY4HgCSAmkPnUGmZCHROXlmZrRDRJziR4cK d+m+rbrOxeKBVAVt3usdFCq7Xv0kq3ePg1RA8COjbBa/+6vcW7tYgvtVQW6iyxwm qWWpvvdQ6Vh9urhuIx+Nay8/hmDHGfvwQQntApel62j7wKj5uHNcrgnHPvkUutNl rZ1iMTVDjJlQb3CfMOG+Bu+0aupJj440RducLMJT9fswSNwohv1SYnBSodmatY8y a+Qdqa0bQ3CJZyTAg89anmEZjquF5BgrhvmUL/OL3bwwJ+9fhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7kdfVV+yc24gvym/eg2NidAK3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvM2Y5YmM0YTMtNGE2Zi0z YTcyLWIyZDItODQ4ODEzNWNkODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp/iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgkVXlGfqZEHLOyGVDZDdagUMKxz2QEm5bH1g2IEFpMdWASdn0Ti5dR 2ct5609Wmy55mPWRoYpReq6uLTHRF05ocnsecmR8C5MJQzJnj6hvC7eMHGH9CfV5 kwHsWZwahNYfxFyb2Z39b+kK+sqrGxgD2Kx+Ey2xN7z+Wo+sXbsNSfFgRAAxNZda MnRnqyCeKCn+sjWUjtiGK2ji5PvK5rQV7zaqNTUHUHjOdYimLFaDv1C+6JZ31cH1 /H8Psodo9OVqdtbWC4UZMvI57CqbWvfewv5kdlaWPAfqXVGOGJCPdMi9nZWpUrMK ObGshYpgFE3KFcNeKCpj+0UGdaY//nA= -----END CERTIFICATE-----Generated at Wed May 13 08:01:23 2026 by rpki-client