$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa File: 5fe97fce-61be-3557-b7c1-edbd8078a492.roa (raw, json) Hash identifier: P7UBNz4enuHJRZKolItDI12MmQ4PtyCuQ2CsK/xPVfU= Subject key identifier: 17:9B:33:6C:B7:23:57:6A:32:8E:75:0F:D6:D8:FB:62:FB:FB:1F:74 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584DC830567D3707C499023FDC80 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 400662 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:56:7d:37:07:c4:99:02:3f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=d47e09bf-d1f6-4e54-af50-8094b4e51e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:6e:f5:99:3b:31:41:0f:d4:ed:ae:02:80: 13:c4:3b:b1:99:e4:c6:12:dd:ea:da:ca:ee:16:4f: ca:f1:65:2f:0a:7e:ec:b1:5f:07:44:df:0e:29:ff: 26:82:53:42:65:b2:b7:73:07:05:fe:6c:89:88:3f: 9b:36:94:92:ee:ab:f4:93:3b:db:ff:a5:a0:b5:31: 0a:c8:7a:17:84:16:cb:08:6d:e0:4c:f9:b0:90:01: 7b:f3:ed:2d:44:e0:59:22:8a:4c:cc:75:2f:06:f4: ac:23:f8:7a:b5:c2:c0:92:e4:fe:25:32:ee:7f:0a: be:9e:91:ae:68:17:83:30:ef:1e:36:cf:16:bc:cc: 40:82:d3:0b:1b:5c:4a:50:c1:0e:23:a0:4b:81:96: c7:a0:94:06:b0:3a:de:03:d6:ff:5f:67:c5:2d:1e: bf:77:1a:31:54:e7:1b:84:3b:0e:6b:15:ff:a4:4b: 4f:18:cf:07:d7:65:0e:de:17:1b:dc:82:37:23:b2: 0a:f4:be:af:d1:ed:5c:3a:ad:bd:84:29:1a:61:5d: 3a:7a:d7:f1:f0:15:e4:2f:cf:fe:03:4e:99:d1:64: db:0f:b3:1a:39:2c:ac:2a:f3:26:67:a2:4e:a3:87: 2b:36:28:b0:2f:53:9d:b7:fe:35:05:c9:2d:92:f9: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9B:33:6C:B7:23:57:6A:32:8E:75:0F:D6:D8:FB:62:FB:FB:1F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5fe97fce-61be-3557-b7c1-edbd8078a492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e3:ad:8d:fe:b4:cc:48:77:e4:8e:9a:62:09:a8:07:fd:57: 94:e9:41:37:45:f4:2d:24:f1:f6:be:10:1b:07:aa:b2:22:a3: b6:1a:b5:02:f3:c3:6e:bf:c9:e0:1f:0b:63:73:cb:dd:f9:ae: 23:bf:21:6a:f9:16:ca:3b:20:d6:81:af:4e:2b:44:1a:b8:99: 46:03:ce:e4:ca:7c:6f:2f:ab:db:49:da:1c:b2:c0:a8:dd:50: cc:4d:08:5a:4f:a4:0c:70:d7:22:db:89:95:83:e0:02:a4:b9: bf:4e:eb:9b:c4:03:54:8f:ca:50:c3:f6:15:81:4e:7b:aa:99: 36:8d:5c:a3:21:27:63:50:50:4a:5b:75:db:47:02:d1:d7:60: 2a:d3:35:6f:52:ab:41:a2:a4:06:ca:17:34:19:5d:75:b1:8d: a4:a3:85:d4:af:de:fc:58:c5:55:30:5a:bf:63:e1:ae:9c:76: 13:77:23:40:05:a0:37:1f:8f:8c:fd:cd:d3:45:0c:62:87:f3: c7:ad:2f:66:bb:94:5c:2d:44:7d:c5:33:2c:d5:ca:ce:be:53: be:8d:b2:50:b9:c1:3f:ef:dd:5f:ab:f1:96:80:45:11:c6:82: e8:38:cb:ec:11:8e:b5:39:28:45:ce:f2:39:15:9d:77:c5:ad: 87:4a:60:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMFZ9NwfEmQI/3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk ZDQ3ZTA5YmYtZDFmNi00ZTU0LWFmNTAtODA5NGI0ZTUxZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYJu9Zk7MUEP1O2uAoATxDuxmeTGEt3q2sru Fk/K8WUvCn7ssV8HRN8OKf8mglNCZbK3cwcF/myJiD+bNpSS7qv0kzvb/6WgtTEK yHoXhBbLCG3gTPmwkAF78+0tROBZIopMzHUvBvSsI/h6tcLAkuT+JTLufwq+npGu aBeDMO8eNs8WvMxAgtMLG1xKUMEOI6BLgZbHoJQGsDreA9b/X2fFLR6/dxoxVOcb hDsOaxX/pEtPGM8H12UO3hcb3II3I7IK9L6v0e1cOq29hCkaYV06etfx8BXkL8/+ A06Z0WTbD7MaOSysKvMmZ6JOo4crNiiwL1Odt/41Bcktkvn15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBebM2y3I1dqMo51D9bY+2L7+x90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvNWZlOTdmY2UtNjFiZS0z NTU3LWI3YzEtZWRiZDgwNzhhNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzjrY3+tMxId+SOmmIJqAf9V5TpQTdF9C0k8fa+EBsHqrIio7YatQLz w26/yeAfC2Nzy935riO/IWr5Fso7INaBr04rRBq4mUYDzuTKfG8vq9tJ2hyywKjd UMxNCFpPpAxw1yLbiZWD4AKkub9O65vEA1SPylDD9hWBTnuqmTaNXKMhJ2NQUEpb ddtHAtHXYCrTNW9Sq0GipAbKFzQZXXWxjaSjhdSv3vxYxVUwWr9j4a6cdhN3I0AF oDcfj4z9zdNFDGKH88etL2a7lFwtRH3FMyzVys6+U76NslC5wT/v3V+r8ZaARRHG gug4y+wRjrU5KEXO8jkVnXfFrYdKYK0= -----END CERTIFICATE-----Generated at Wed May 13 11:00:31 2026 by rpki-client