$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa File: 1c40bd0a-db57-39f3-8195-eea505b34707.roa (raw, json) Hash identifier: 08On+BpW8R3mRnyOyQRNekTeUEWM7Khe+6S2nkUAvKM= Subject key identifier: 0D:54:C1:4C:8E:26:D5:AA:5D:60:56:99:0E:8F:14:F2:D9:54:0B:9B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E6C6F690DF73A6E2AC0C3DC00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 35908 IP address blocks: 98.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:69:0d:f7:3a:6e:2a:c0:c3:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=b64f2fac-51b6-42d6-978a-f82fee203513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:57:26:0a:40:0f:17:b2:11:90:0f:8d:b8: cc:34:19:10:e2:bb:e7:6f:17:de:0d:17:cc:ce:d7: c3:7d:6b:0d:aa:ab:3b:0d:ae:2d:c3:f4:92:99:bb: bd:05:39:50:ba:03:2f:9a:69:17:a5:ac:0e:74:6f: 84:4a:a9:77:92:4f:fa:f4:d3:80:8b:19:0d:7d:e7: ac:c4:56:c0:24:55:bd:ca:d5:dc:5f:8a:8f:54:88: 35:da:10:02:7a:d4:d2:4e:32:fa:b5:05:bf:db:15: 02:d5:3e:02:d4:24:df:13:03:8c:65:12:35:b2:2f: 39:06:a7:b8:51:3b:d7:e9:fd:1d:1d:00:e9:42:30: 44:ad:85:1b:8c:1e:01:d6:ec:4d:3c:e6:9e:a3:1c: 8d:c1:8e:8a:8a:f2:8e:8b:53:49:0f:de:95:a4:cb: 06:c8:94:0f:2f:bc:5f:a5:8b:31:fa:2f:8d:cb:f8: 4b:eb:fa:75:29:8a:d7:5e:e1:e8:24:cb:77:9c:b1: 80:2b:e2:73:d1:58:40:fd:0b:87:55:d7:fa:3c:39: 6e:f2:93:ff:bf:80:02:ee:fd:47:2a:9e:e6:15:40: d0:01:b8:38:37:10:88:7b:98:32:74:e4:ce:e2:ff: 61:c8:fd:58:0d:8c:19:c2:3f:5e:0f:21:59:77:bc: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:54:C1:4C:8E:26:D5:AA:5D:60:56:99:0E:8F:14:F2:D9:54:0B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:b3:48:e4:44:a3:07:fd:62:6a:e7:30:91:f6:5c:73:5d: 1e:56:74:eb:17:97:16:03:71:47:b5:01:e7:c9:88:5e:85:4e: 27:24:45:99:93:20:c2:dc:e1:7e:10:8c:57:99:d8:d4:c2:b3: 18:22:3c:a5:99:3b:6a:c0:0c:b0:11:07:12:6f:3a:c2:86:4a: 5d:fe:9a:a4:f3:1c:cf:de:2f:08:d7:8f:78:81:f0:ad:9f:20: d1:e7:00:84:48:de:d5:07:89:e1:a0:ea:a6:71:ea:2f:cd:f9: 22:06:92:de:35:dd:c0:5d:2d:8e:89:2b:82:66:e2:e0:3f:6f: 54:4e:46:a8:b6:a9:44:54:ae:34:e7:5e:eb:00:10:fa:e8:a6: b6:56:4e:6c:cc:f1:a6:e0:64:a5:58:5a:ae:f3:ec:ad:6f:e8: eb:1d:33:99:dd:30:d6:5d:29:04:c9:9a:4f:80:58:e9:78:f7: 08:da:2e:4e:8d:82:76:35:a0:cf:21:4e:6e:dc:16:85:56:7a: cc:3d:0d:a4:99:72:72:1c:6e:0e:99:0e:25:9c:5e:c3:22:ac: 9b:06:38:89:03:53:71:b1:f1:5e:11:6b:96:a5:bf:88:30:e6: fa:43:9c:f2:ef:60:41:57:32:d6:d6:d1:6e:72:16:95:ca:75: ac:40:a7:e5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5sb2kN9zpuKsDD3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YjY0ZjJmYWMtNTFiNi00MmQ2LTk3OGEtZjgyZmVlMjAzNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PlXJgpADxeyEZAPjbjMNBkQ4rvnbxfeDRfM ztfDfWsNqqs7Da4tw/SSmbu9BTlQugMvmmkXpawOdG+ESql3kk/69NOAixkNfees xFbAJFW9ytXcX4qPVIg12hACetTSTjL6tQW/2xUC1T4C1CTfEwOMZRI1si85Bqe4 UTvX6f0dHQDpQjBErYUbjB4B1uxNPOaeoxyNwY6KivKOi1NJD96VpMsGyJQPL7xf pYsx+i+Ny/hL6/p1KYrXXuHoJMt3nLGAK+Jz0VhA/QuHVdf6PDlu8pP/v4AC7v1H Kp7mFUDQAbg4NxCIe5gydOTO4v9hyP1YDYwZwj9eDyFZd7w3DQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA1UwUyOJtWqXWBWmQ6PFPLZVAubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWM0MGJkMGEtZGI1Ny0z OWYzLTgxOTUtZWVhNTA1YjM0NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYn4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjHizSOREowf9YmrnMJH2XHNdHlZ06xeXFgNxR7UB58mIXoVOJyRFmZMg wtzhfhCMV5nY1MKzGCI8pZk7asAMsBEHEm86woZKXf6apPMcz94vCNePeIHwrZ8g 0ecAhEje1QeJ4aDqpnHqL835IgaS3jXdwF0tjokrgmbi4D9vVE5GqLapRFSuNOde 6wAQ+uimtlZObMzxpuBkpVharvPsrW/o6x0zmd0w1l0pBMmaT4BY6Xj3CNouTo2C djWgzyFObtwWhVZ6zD0NpJlychxuDpkOJZxewyKsmwY4iQNTcbHxXhFrlqW/iDDm +kOc8u9gQVcy1tbRbnIWlcp1rECn5Q== -----END CERTIFICATE-----Generated at Fri Jul 24 07:18:50 2026 by rpki-client