$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bde80014-c481-3eda-b4c1-a22abfd5bee3.roa File: bde80014-c481-3eda-b4c1-a22abfd5bee3.roa (raw, json) Hash identifier: zUec3QttiIor0Zaw/NJxTd+S8agZV5n65MCvwpiMgR4= Subject key identifier: A5:F1:D4:42:E8:C4:03:2D:E1:ED:A9:BF:F0:84:9E:F0:1C:AA:C6:E6 Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Certificate serial: 010D0C9F4328584D392D0B93F69EACAA06F1AB00 Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bde80014-c481-3eda-b4c1-a22abfd5bee3.roa Signing time: Thu 19 Mar 2026 19:33:25 +0000 ROA not before: Thu 19 Mar 2026 19:33:25 +0000 ROA not after: Wed 17 Jun 2026 19:33:25 +0000 asID: 8075 IP address blocks: 98.142.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:2d:0b:93:f6:9e:ac:aa:06:f1:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Validity Not Before: Mar 19 19:33:25 2026 GMT Not After : Jun 17 19:33:25 2026 GMT Subject: CN=2cef4a6b-cd75-48c6-8c8a-984dabad39ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:dc:5e:21:00:d7:2d:1e:64:42:c7:3f:d8: 51:ba:3a:56:0a:8f:bb:a5:86:9a:3a:2b:32:ce:6e: 95:01:77:fc:e5:4d:8a:30:e6:f7:96:2e:15:ed:26: dd:1a:3e:d2:f4:e4:ff:10:1f:41:b7:4a:f8:47:28: 96:ad:e7:c8:74:b0:c8:ea:96:ed:4d:c2:f4:66:9e: 65:30:e3:6e:60:8a:b5:f8:d9:2d:8d:ab:46:db:58: 36:1d:72:1c:ad:01:72:b7:11:c1:fc:af:98:f6:3d: fb:10:00:33:7f:1c:42:70:2b:45:26:20:16:59:44: 57:4a:21:70:0a:fd:a2:d5:44:4a:a8:5a:d2:46:20: 01:12:21:8e:b4:2e:93:03:28:76:03:f7:11:85:d3: 72:24:37:a0:ec:ce:eb:bb:5a:7c:cd:97:46:30:4b: e3:d6:b0:f7:bc:01:cf:0a:69:df:62:4e:f0:c9:1e: c1:60:a4:be:8c:35:6a:74:0c:fd:33:88:b5:8b:5d: 39:ad:41:33:f5:ba:ef:b1:25:e7:27:77:50:09:ee: 86:8a:43:1a:03:a3:d2:b9:c5:40:d0:40:ee:bc:74: 20:19:8d:79:26:0d:6d:36:95:b4:82:84:6e:50:a1: 92:31:dc:de:1e:4f:bc:cf:f0:68:99:ec:53:a2:ef: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:D4:42:E8:C4:03:2D:E1:ED:A9:BF:F0:84:9E:F0:1C:AA:C6:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bde80014-c481-3eda-b4c1-a22abfd5bee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl X509v3 Authority Key Identifier: keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer sbgp-ipAddrBlock: critical IPv4: 98.142.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:01:4b:53:c4:c6:ea:0d:d9:77:05:19:4a:a9:d5:cb:46:0d: 1f:b3:83:ba:cc:05:aa:e9:f9:d9:c0:0f:ec:03:57:f3:99:68: 84:e0:2d:ce:c5:3a:ef:5f:23:a6:5f:bb:75:99:21:c5:15:62: 64:1a:9f:5b:db:95:f5:d9:93:dc:4f:3f:5f:ee:73:10:76:5a: 27:9d:25:cc:cb:e3:7c:a2:cc:8e:9a:c8:0d:c7:66:8c:c4:8e: ca:fc:ed:3a:ac:44:3e:51:ae:83:f1:66:ad:79:2b:1f:11:a3: df:f8:04:d3:13:bb:5a:97:53:49:86:a9:1f:24:76:a1:43:45: bd:67:bf:6f:f0:e2:81:65:a7:20:e9:70:04:04:a8:63:7c:cb: 44:6f:d5:6e:7e:c1:41:73:40:6a:10:99:a0:d8:74:15:32:5d: 4c:bb:dc:23:99:0a:0d:cd:19:0d:9f:1a:23:d0:3b:ef:8c:64: 0a:4e:96:c9:28:b2:a8:5c:ae:02:d4:cb:97:79:fe:6e:f1:5f: 36:af:51:d5:b8:69:40:b4:58:36:99:19:24:f1:ac:44:7b:b2: 88:ea:dd:8f:ed:a7:da:ea:f4:a2:57:e6:4d:d1:90:5f:86:0b: 06:5a:fa:8c:06:3e:41:ea:ca:5d:6e:0d:1a:db:98:fe:53:9f: e1:24:8c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05LQuT9p6sqgbxqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3 OWMyMB4XDTI2MDMxOTE5MzMyNVoXDTI2MDYxNzE5MzMyNVowLzEtMCsGA1UEAxMk MmNlZjRhNmItY2Q3NS00OGM2LThjOGEtOTg0ZGFiYWQzOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuzcXiEA1y0eZELHP9hRujpWCo+7pYaaOisy zm6VAXf85U2KMOb3li4V7SbdGj7S9OT/EB9Bt0r4RyiWrefIdLDI6pbtTcL0Zp5l MONuYIq1+NktjatG21g2HXIcrQFytxHB/K+Y9j37EAAzfxxCcCtFJiAWWURXSiFw Cv2i1URKqFrSRiABEiGOtC6TAyh2A/cRhdNyJDeg7M7ru1p8zZdGMEvj1rD3vAHP CmnfYk7wyR7BYKS+jDVqdAz9M4i1i105rUEz9brvsSXnJ3dQCe6GikMaA6PSucVA 0EDuvHQgGY15Jg1tNpW0goRuUKGSMdzeHk+8z/BomexTou8+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXx1ELoxAMt4e2pv/CEnvAcqsbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvYmRlODAwMTQtYzQ4MS0z ZWRhLWI0YzEtYTIyYWJmZDViZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwBS1PExuoN2XcFGUqp1ctGDR+zg7rMBarp+dnAD+wDV/OZaITgLc7F Ou9fI6Zfu3WZIcUVYmQan1vblfXZk9xPP1/ucxB2WiedJczL43yizI6ayA3HZozE jsr87TqsRD5RroPxZq15Kx8Ro9/4BNMTu1qXU0mGqR8kdqFDRb1nv2/w4oFlpyDp cAQEqGN8y0Rv1W5+wUFzQGoQmaDYdBUyXUy73COZCg3NGQ2fGiPQO++MZApOlsko sqhcrgLUy5d5/m7xXzavUdW4aUC0WDaZGSTxrER7sojq3Y/tp9rq9KJX5k3RkF+G CwZa+owGPkHqyl1uDRrbmP5Tn+EkjPw= -----END CERTIFICATE-----Generated at Sun Mar 22 09:34:12 2026 by rpki-client