$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa File: d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa (raw, json) Hash identifier: rN7jLA7h3ff1MI+nbbwlDECZksOP1+wEAVnXFBabZYk= Subject key identifier: 82:25:FF:E6:9F:EA:DF:DF:3F:F2:42:67:71:CB:49:F5:7D:4B:ED:3C Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584D0EA7B4E33D309CDCF5E1C380 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18943 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b4:e3:3d:30:9c:dc:f5:e1:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=00b85291-13ef-466a-bfa1-cb812ca7f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:10:45:09:1c:a3:5d:be:2c:f8:28:b4:b6: fc:74:53:83:9e:19:4f:7c:57:c6:5c:c2:11:45:cd: 0a:a3:e2:ac:f6:28:6c:49:ba:51:54:d0:e3:50:31: 1a:e9:c2:2a:b3:70:a8:00:71:51:22:7e:1d:f2:75: 38:1f:6b:9a:b5:8c:05:3d:2e:74:46:97:50:1b:e4: 16:25:7c:d9:d9:65:1b:df:fc:04:c8:e6:e3:8a:e7: 07:a9:72:d2:43:95:2a:98:56:af:b2:29:e2:a3:83: d5:62:99:ad:44:fd:a8:73:02:10:4a:9f:6e:df:11: e4:23:28:2b:d8:eb:9b:e4:1f:3c:37:73:67:91:fd: ac:e5:bb:0e:f7:56:f4:0d:22:71:11:5e:ad:00:bd: 5a:e4:5f:38:db:c4:00:f1:d7:4d:68:92:9e:5b:cd: 95:fe:05:8a:3b:bd:a2:cb:e2:04:d2:f8:25:3f:a1: 5d:ef:10:a6:27:0d:ca:be:99:f3:b6:62:ed:5a:df: 2f:e4:d5:4d:15:55:84:50:02:a5:60:18:44:e7:e9: b0:b5:6b:cb:6a:8e:02:ce:1c:d1:9e:e6:71:9f:99: 51:3a:39:85:20:e9:79:4b:65:61:eb:1c:3f:e0:13: 9d:62:36:09:d1:d3:ff:b5:e3:2a:eb:7f:b9:7a:33: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:25:FF:E6:9F:EA:DF:DF:3F:F2:42:67:71:CB:49:F5:7D:4B:ED:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d828c22f-e3b3-3bb1-b164-8dc30da5a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ec:17:91:0f:dd:eb:ad:c9:59:5c:bd:61:12:a5:e2:c3:a5: a6:7d:37:be:b5:ba:71:33:eb:09:01:6a:84:6f:c1:45:50:af: ca:1b:55:91:3d:d3:13:64:fc:a8:7a:8b:84:89:f6:11:04:63: bc:00:f6:b7:16:7e:98:b9:62:33:ef:92:79:1a:83:30:f6:a0: 87:78:90:f9:38:a9:8a:26:c4:de:46:85:5f:00:c6:07:ef:2b: e7:dd:be:47:81:44:06:8c:f8:8f:b3:34:a3:b2:89:6b:fa:3c: 16:8f:0c:df:ed:78:82:19:af:c5:7d:84:0a:ec:52:5b:c6:05: c7:c3:1e:32:85:f6:db:c9:f8:fe:42:9d:a8:56:41:a3:7b:05: 9b:f2:3e:23:c2:f1:58:b6:8e:2c:0c:62:e6:cc:6b:93:17:ee: 68:96:0a:1f:86:43:83:75:33:5b:c5:12:1e:45:54:04:13:00: 82:ca:08:87:e1:b4:23:9e:f0:1e:59:49:3a:36:21:7f:21:84: ed:81:f8:b5:c6:81:67:65:a2:3f:7a:42:98:49:39:99:0d:9c: 47:de:09:46:18:3f:9f:43:d7:e9:0b:e8:70:78:4b:80:29:fa: b5:fe:c1:e3:0c:e7:c3:02:d5:30:70:d8:96:57:87:fc:68:e5: bc:fb:09:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7TjPTCc3PXhw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MDBiODUyOTEtMTNlZi00NjZhLWJmYTEtY2I4MTJjYTdmNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+gQRQkco12+LPgotLb8dFODnhlPfFfGXMIR Rc0Ko+Ks9ihsSbpRVNDjUDEa6cIqs3CoAHFRIn4d8nU4H2uatYwFPS50RpdQG+QW JXzZ2WUb3/wEyObjiucHqXLSQ5UqmFavsinio4PVYpmtRP2ocwIQSp9u3xHkIygr 2Oub5B88N3Nnkf2s5bsO91b0DSJxEV6tAL1a5F8428QA8ddNaJKeW82V/gWKO72i y+IE0vglP6Fd7xCmJw3KvpnztmLtWt8v5NVNFVWEUAKlYBhE5+mwtWvLao4CzhzR nuZxn5lROjmFIOl5S2Vh6xw/4BOdYjYJ0dP/teMq63+5ejOUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIl/+af6t/fP/JCZ3HLSfV9S+08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDgyOGMyMmYtZTNiMy0z YmIxLWIxNjQtOGRjMzBkYTVhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDsF5EP3eutyVlcvWESpeLDpaZ9N761unEz6wkBaoRvwUVQr8obVZE9 0xNk/Kh6i4SJ9hEEY7wA9rcWfpi5YjPvknkagzD2oId4kPk4qYomxN5GhV8Axgfv K+fdvkeBRAaM+I+zNKOyiWv6PBaPDN/teIIZr8V9hArsUlvGBcfDHjKF9tvJ+P5C nahWQaN7BZvyPiPC8Vi2jiwMYubMa5MX7miWCh+GQ4N1M1vFEh5FVAQTAILKCIfh tCOe8B5ZSTo2IX8hhO2B+LXGgWdloj96QphJOZkNnEfeCUYYP59D1+kL6HB4S4Ap +rX+weMM58MC1TBw2JZXh/xo5bz7CT0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:28 2026 by rpki-client