$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa File: bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa (raw, json) Hash identifier: VMZtXH/F6muLniDG86oY8o4nhcNTnH1mufb5YIj67yo= Subject key identifier: 16:25:AF:A7:D4:69:FA:49:2E:7B:E5:5C:8E:5C:21:C0:DF:8B:CE:18 Certificate issuer: /CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Certificate serial: 010D0C9F4328584DA3E56C043063FBA645893620 Authority key identifier: C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 399033 IP address blocks: 98.158.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:6c:04:30:63:fb:a6:45:89:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0638a41c-1a08-44d2-a17c-c5272b5171a2 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=894f941b-5560-419f-9890-dc2fb77ab3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:f6:9c:5c:2e:12:b8:8a:03:ee:c7:c7:5b: d7:f4:1e:87:05:c4:ac:e7:cb:04:fe:24:8f:6f:e1: 66:02:ba:b1:95:97:f7:06:db:b9:91:e9:72:93:17: e6:6d:25:cc:a0:f8:e2:59:52:b5:0f:0d:00:a3:4d: 9c:a8:2a:9d:67:10:70:a3:94:c2:1c:03:e3:01:3d: 4a:b5:ff:58:aa:56:f1:a0:55:ee:73:ba:6a:d7:5f: 4b:b7:0d:94:6e:30:bc:ce:55:c0:bb:d6:b7:5d:c5: 8d:0c:9e:c9:bc:66:a7:29:a7:36:7d:9f:f7:1f:0a: 6d:8f:93:93:43:eb:cd:17:08:d4:98:37:93:45:36: e6:c0:7f:f2:e8:2b:a7:c8:84:5b:34:7d:32:be:48: 53:5d:40:b2:63:74:dc:fa:1d:68:d0:b1:bd:1d:f3: 31:76:a7:f9:dc:68:13:23:3e:62:44:61:fa:9a:55: d8:21:b6:20:e2:3b:0a:ff:86:53:19:a9:29:95:b8: ec:8f:6b:28:56:53:d4:4b:d0:87:93:58:b2:f8:10: 22:87:c9:ed:2b:c7:44:1d:c1:ea:21:1b:41:82:c7: ec:74:ee:7c:9d:19:2b:1a:90:a7:7d:dd:93:26:8f: 2b:12:ba:7c:83:1d:92:8c:d7:84:29:0b:5e:19:9f: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:AF:A7:D4:69:FA:49:2E:7B:E5:5C:8E:5C:21:C0:DF:8B:CE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/bb0cb880-ae81-36ef-b70e-c7eab5062a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2/0638a41c-1a08-44d2-a17c-c5272b5171a2.crl X509v3 Authority Key Identifier: keyid:C1:F7:3F:D2:75:CC:DF:E9:FF:07:1B:07:E0:8B:EC:06:6F:28:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0638a41c-1a08-44d2-a17c-c5272b5171a2.cer sbgp-ipAddrBlock: critical IPv4: 98.158.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a5:a3:38:de:13:b8:db:43:a7:44:e1:d8:02:de:48:92:86: 56:07:4a:69:3b:2b:8b:b6:7c:de:89:59:4c:e2:1a:bb:3e:27: 05:82:76:8d:44:c0:62:35:01:37:28:e6:a8:13:d1:29:3f:b7: 09:8d:bc:56:4a:15:66:79:f6:bc:81:61:e1:8a:34:ad:e3:5c: 05:5a:3d:17:1f:4d:2b:c0:dc:07:2f:90:6f:6e:47:ad:59:5f: b9:01:0d:84:6c:a6:21:2f:3b:f1:2a:3c:9a:38:59:7b:ab:6c: 45:53:70:e0:3e:cd:cf:90:83:e5:9f:f4:af:7f:d8:a6:ba:88: ce:72:11:a5:bd:fd:d3:17:b1:5a:34:ed:90:d2:ed:2b:4c:88: 92:3a:df:47:fb:73:cb:41:7f:25:9e:01:d0:a9:13:69:04:d6: 89:c3:fc:d4:75:46:03:1f:6e:b2:03:73:c3:8a:14:ad:4f:ce: e7:28:3f:dd:17:69:c9:e5:9b:1a:a1:80:57:34:50:c2:93:e8: 7b:a2:d0:c6:e0:92:a3:31:31:1a:ca:e2:76:24:8f:98:62:76: 75:60:38:42:8e:dc:40:97:59:6b:0f:2e:1c:2f:fd:e9:4d:33: 23:57:c5:58:d5:af:98:a2:f8:dc:1f:99:d5:b4:77:cf:dd:64: 10:d4:f7:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WwEMGP7pkWJNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzOGE0MWMtMWEwOC00NGQyLWExN2MtYzUyNzJiNTE3 MWEyMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk ODk0Zjk0MWItNTU2MC00MTlmLTk4OTAtZGMyZmI3N2FiM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKn2nFwuEriKA+7Hx1vX9B6HBcSs58sE/iSP b+FmArqxlZf3Btu5kelykxfmbSXMoPjiWVK1Dw0Ao02cqCqdZxBwo5TCHAPjAT1K tf9YqlbxoFXuc7pq119Ltw2UbjC8zlXAu9a3XcWNDJ7JvGanKac2fZ/3Hwptj5OT Q+vNFwjUmDeTRTbmwH/y6CunyIRbNH0yvkhTXUCyY3Tc+h1o0LG9HfMxdqf53GgT Iz5iRGH6mlXYIbYg4jsK/4ZTGakplbjsj2soVlPUS9CHk1iy+BAih8ntK8dEHcHq IRtBgsfsdO58nRkrGpCnfd2TJo8rErp8gx2SjNeEKQteGZ8qaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYlr6fUafpJLnvlXI5cIcDfi84YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4 YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3MmI1MTcxYTIvYmIwY2I4ODAtYWU4MS0z NmVmLWI3MGUtYzdlYWI1MDYyYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDYzOGE0MWMtMWEwOC00NGQyLWEx N2MtYzUyNzJiNTE3MWEyLzA2MzhhNDFjLTFhMDgtNDRkMi1hMTdjLWM1MjcyYjUx NzFhMi5jcmwwHwYDVR0jBBgwFoAUwfc/0nXM3+n/BxsH4IvsBm8o0pAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wNjM4YTQxYy0xYTA4LTQ0ZDItYTE3Yy1jNTI3 MmI1MTcxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWlozjeE7jbQ6dE4dgC3kiShlYHSmk7K4u2fN6JWUziGrs+JwWCdo1E wGI1ATco5qgT0Sk/twmNvFZKFWZ59ryBYeGKNK3jXAVaPRcfTSvA3AcvkG9uR61Z X7kBDYRspiEvO/EqPJo4WXurbEVTcOA+zc+Qg+Wf9K9/2Ka6iM5yEaW9/dMXsVo0 7ZDS7StMiJI630f7c8tBfyWeAdCpE2kE1onD/NR1RgMfbrIDc8OKFK1PzucoP90X acnlmxqhgFc0UMKT6Hui0MbgkqMxMRrK4nYkj5hidnVgOEKO3ECXWWsPLhwv/elN MyNXxVjVr5ii+NwfmdW0d8/dZBDU94g= -----END CERTIFICATE-----Generated at Wed May 13 09:16:22 2026 by rpki-client