$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa File: f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa (raw, json) Hash identifier: VbqT1VXowCGOWR5q9CoM6nukMkoodE11srD24CbuUJs= Subject key identifier: 89:FE:B4:C4:B7:AE:6C:6D:FE:09:BD:A8:EA:C6:60:04:8E:D4:3B:D4 Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Certificate serial: 010D0C9F4328584D0EA7AF19A0FFB3FF30CBED58 Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 19108 IP address blocks: 198.168.122.0/23 maxlen: 23 198.168.122.0/24 maxlen: 24 198.168.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:af:19:a0:ff:b3:ff:30:cb:ed:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=c931f0fa-7cbc-46af-b745-621f791e7531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:9d:b5:f1:be:39:40:bb:f5:b0:29:c3:11: 64:2a:28:a4:01:ed:c0:16:40:04:c2:ca:56:60:4b: 88:46:9f:04:6b:6c:87:5e:f3:dc:df:14:f8:1d:58: ce:78:05:28:39:a2:45:ec:56:c4:81:59:ae:1e:50: 1b:37:75:e7:c3:44:fd:7d:be:a3:a2:b8:84:28:59: 05:9b:88:15:99:52:5b:ff:d8:5f:70:5d:98:8b:b5: 1d:83:29:4b:29:0b:21:fb:fc:ef:63:39:71:84:92: f9:2d:47:ab:7d:e5:5f:2e:a5:61:ba:33:d7:0d:87: 87:58:10:62:f7:dd:8f:81:e5:42:34:b5:7b:63:d4: 8f:99:b1:45:05:5f:f2:fb:79:a0:fa:a3:a5:6a:41: 0a:05:f6:95:d8:79:08:e0:3e:89:99:f6:30:cc:88: a3:44:6f:7f:d1:61:3a:54:6d:f8:e9:92:52:9a:45: a6:a3:60:52:91:63:4d:2b:ba:df:b5:0d:58:48:0e: ef:f1:89:46:16:ee:43:fe:c7:79:3f:c7:d5:b0:92: a4:85:2f:aa:99:ff:a6:da:3a:f0:f8:11:69:1a:17: 40:05:33:2b:7b:3a:16:70:cc:dc:fa:55:6a:e4:1b: 87:d8:49:67:74:39:54:88:4c:8b:d8:b1:aa:c1:ce: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:B4:C4:B7:AE:6C:6D:FE:09:BD:A8:EA:C6:60:04:8E:D4:3B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f8bd92f0-f69b-33c7-84b1-1ca1d81f9d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl X509v3 Authority Key Identifier: keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer sbgp-ipAddrBlock: critical IPv4: 198.168.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:39:4b:e0:e6:cd:5f:26:69:d6:fc:43:91:5d:02:1c:3d:53: 15:7e:ff:19:3e:e2:e4:8a:63:9b:af:f6:36:ce:10:83:fa:eb: ac:49:8d:34:76:9f:a4:75:13:86:ed:0c:f5:24:c6:dd:30:6d: 12:f0:27:34:3f:1e:55:20:68:f7:2d:ee:08:b9:5b:a7:45:5f: ea:b3:b0:4d:94:ad:e1:ba:89:2c:1b:f0:67:90:6d:4b:0b:ac: 17:62:93:f1:20:a1:2e:02:3e:c0:ec:29:c3:1e:17:d5:12:bd: 6a:3b:7d:c1:1e:0e:3b:92:d1:98:ca:47:e6:19:de:e2:a7:87: bf:5d:4b:c2:b6:10:9e:7d:39:65:0c:0c:f8:23:14:4b:ea:b7: ff:89:37:b1:8a:33:03:c9:4c:b8:cf:41:8b:00:79:17:b4:b8: 23:5c:00:3f:2e:44:bd:5e:cb:e0:7f:7a:61:fd:23:24:85:d3: ac:42:52:53:2c:96:8d:a5:01:02:bc:9a:64:a0:c2:a6:09:5d: 4c:3e:9e:f7:31:8e:e1:87:3a:d3:61:8c:3f:9e:49:cb:e2:aa: ad:7f:f8:d6:dd:1e:6f:18:4a:5c:3a:24:a2:1e:c8:88:e3:51: a2:0d:2d:2b:6b:8d:9a:c7:af:ef:be:af:75:d0:0d:de:93:e6: db:7a:d3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op68ZoP+z/zDL7VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx MzFlMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YzkzMWYwZmEtN2NiYy00NmFmLWI3NDUtNjIxZjc5MWU3NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVadtfG+OUC79bApwxFkKiikAe3AFkAEwspW YEuIRp8Ea2yHXvPc3xT4HVjOeAUoOaJF7FbEgVmuHlAbN3Xnw0T9fb6joriEKFkF m4gVmVJb/9hfcF2Yi7UdgylLKQsh+/zvYzlxhJL5LUerfeVfLqVhujPXDYeHWBBi 992PgeVCNLV7Y9SPmbFFBV/y+3mg+qOlakEKBfaV2HkI4D6JmfYwzIijRG9/0WE6 VG346ZJSmkWmo2BSkWNNK7rftQ1YSA7v8YlGFu5D/sd5P8fVsJKkhS+qmf+m2jrw +BFpGhdABTMrezoWcMzc+lVq5BuH2ElndDlUiEyL2LGqwc6PZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn+tMS3rmxt/gm9qOrGYASO1DvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZjhiZDkyZjAtZjY5Yi0z M2M3LTg0YjEtMWNhMWQ4MWY5ZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk5S+DmzV8madb8Q5FdAhw9UxV+/xk+4uSKY5uv9jbOEIP666xJjTR2 n6R1E4btDPUkxt0wbRLwJzQ/HlUgaPct7gi5W6dFX+qzsE2UreG6iSwb8GeQbUsL rBdik/EgoS4CPsDsKcMeF9USvWo7fcEeDjuS0ZjKR+YZ3uKnh79dS8K2EJ59OWUM DPgjFEvqt/+JN7GKMwPJTLjPQYsAeRe0uCNcAD8uRL1ey+B/emH9IySF06xCUlMs lo2lAQK8mmSgwqYJXUw+nvcxjuGHOtNhjD+eScviqq1/+NbdHm8YSlw6JKIeyIjj UaINLStrjZrHr+++r3XQDd6T5tt60/I= -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:57 2026 by rpki-client