$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa File: da48e2b0-51a1-3344-a379-970483f014db.roa (raw, json) Hash identifier: qdTiIg2zB3N2j8PHUlEGEu++dJCJPYIZXpdVvzOMuqc= Subject key identifier: A9:4A:D4:89:73:C3:CE:9E:63:05:9E:F9:97:4F:DB:70:EF:2F:C5:B9 Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F4328584D3DFFB4F9CB3C49AB9736C880 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 6528 IP address blocks: 67.213.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b4:f9:cb:3c:49:ab:97:36:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f7c48abb-6769-48f4-a24c-c7c01746f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:88:c7:5c:06:4a:8b:ba:4b:fd:af:06:15: 90:cd:99:1e:b1:8a:55:21:18:25:4f:a9:b9:0e:89: 63:99:5d:cf:a0:04:61:f2:8e:bb:b5:e7:e3:f8:71: be:3c:01:14:bc:01:f0:0f:85:2e:a8:90:18:63:dc: ab:34:25:30:7b:42:1c:17:50:07:09:29:77:8a:d1: b2:df:29:ff:50:95:47:ab:71:47:ab:5c:25:85:41: 91:5c:00:e2:9e:8f:b5:dd:b1:94:5f:9f:cb:4d:b2: 21:71:12:fe:39:95:17:6f:83:46:0d:b5:55:b4:cd: d4:cd:e5:f2:d7:e5:23:64:4a:04:dd:58:26:88:ed: ee:87:1f:6b:9f:f2:74:8d:2a:fb:a2:1f:5b:d3:94: 4c:c6:79:f6:f0:20:0c:59:2e:e5:1f:48:7b:32:c7: 11:e7:d1:e7:40:10:1c:30:75:79:61:17:3f:38:79: 29:a4:7b:23:63:7c:cd:f5:ef:77:3c:4a:84:a1:ba: e8:2c:12:f5:d7:08:9d:af:4f:7e:0a:de:f0:6f:82: d4:fb:87:52:4b:4d:d4:c4:b3:7b:db:66:14:59:41: ab:4e:44:1e:59:a3:6e:41:b7:2b:33:d5:cf:bb:6e: 23:53:a2:60:c1:13:48:ba:97:7a:50:86:96:db:5c: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:D4:89:73:C3:CE:9E:63:05:9E:F9:97:4F:DB:70:EF:2F:C5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv4: 67.213.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:36:35:3b:94:5a:87:2e:92:8a:84:89:49:2b:d8:4b:8e:e2: 98:b5:a8:b2:90:b7:c7:ea:37:9f:70:04:5d:d4:42:de:ee:0c: 88:1c:13:e0:a9:c6:f0:a4:23:a6:16:59:d3:ab:75:07:f9:a3: 3a:69:df:eb:74:78:ea:bc:93:16:d7:f5:4c:c9:55:68:e6:8f: fc:47:79:ea:b8:fc:6f:48:76:a2:36:28:ab:09:54:3c:6d:70: 04:67:23:6d:7f:32:ab:ab:f5:82:76:58:3d:dd:33:24:aa:51: d5:5f:a7:87:e0:12:ac:e9:8c:70:a6:12:18:00:b8:ad:2f:ff: 65:ee:5b:13:45:88:b6:be:06:98:04:88:c9:54:b2:a8:f6:e5: 9c:1c:cf:65:9e:a7:52:00:87:cc:a0:8e:8e:2d:44:8f:4d:a8: 2d:dd:f4:d2:ac:9e:c7:61:87:f6:dd:e8:9a:3b:90:b8:f8:c2: 50:57:69:8d:81:86:5c:34:cf:1b:06:ec:18:f1:29:90:72:36: f2:e3:7e:62:56:da:97:2f:35:98:35:e0:a1:03:ed:dc:4a:bf: 8d:92:85:17:58:c2:aa:3a:67:35:dc:0f:2c:5a:28:18:89:41: 1a:3f:b3:a4:31:b7:2d:d4:c8:55:53:df:05:48:28:8d:ab:81: 23:9e:a1:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7T5yzxJq5c2yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjdjNDhhYmItNjc2OS00OGY0LWEyNGMtYzdjMDE3NDZmOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1uIx1wGSou6S/2vBhWQzZkesYpVIRglT6m5 DoljmV3PoARh8o67tefj+HG+PAEUvAHwD4UuqJAYY9yrNCUwe0IcF1AHCSl3itGy 3yn/UJVHq3FHq1wlhUGRXADino+13bGUX5/LTbIhcRL+OZUXb4NGDbVVtM3UzeXy 1+UjZEoE3VgmiO3uhx9rn/J0jSr7oh9b05RMxnn28CAMWS7lH0h7MscR59HnQBAc MHV5YRc/OHkppHsjY3zN9e93PEqEobroLBL11widr09+Ct7wb4LU+4dSS03UxLN7 22YUWUGrTkQeWaNuQbcrM9XPu24jU6JgwRNIupd6UIaW21xe2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlK1Ilzw86eYwWe+ZdP23DvL8W5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvZGE0OGUyYjAtNTFhMS0z MzQ0LWEzNzktOTcwNDgzZjAxNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk2NTuUWocukoqEiUkr2EuO4pi1qLKQt8fqN59wBF3UQt7uDIgcE+Cp xvCkI6YWWdOrdQf5ozpp3+t0eOq8kxbX9UzJVWjmj/xHeeq4/G9IdqI2KKsJVDxt cARnI21/Mqur9YJ2WD3dMySqUdVfp4fgEqzpjHCmEhgAuK0v/2XuWxNFiLa+BpgE iMlUsqj25Zwcz2Wep1IAh8ygjo4tRI9NqC3d9NKsnsdhh/bd6Jo7kLj4wlBXaY2B hlw0zxsG7BjxKZByNvLjfmJW2pcvNZg14KED7dxKv42ShRdYwqo6ZzXcDyxaKBiJ QRo/s6Qxty3UyFVT3wVIKI2rgSOeodM= -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:22 2026 by rpki-client