$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa File: b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa (raw, json) Hash identifier: Qa8ryEpAdw1Kl378FX9uiKn0fxsNV9pGi/1POT0CiwE= Subject key identifier: B5:32:41:6A:BC:07:20:48:84:64:CB:50:26:DA:22:DC:B4:6C:A8:85 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584D492A50511AFC50F0F759C280 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14555 IP address blocks: 198.23.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:50:51:1a:fc:50:f0:f7:59:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=6cd3e2bf-67a9-4754-9841-8c5d6d321267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:d7:60:95:f8:e4:34:5a:19:ce:38:e1:88: 46:65:f2:d1:ac:23:56:60:ef:d3:91:09:8e:d1:eb: 73:40:bf:9b:d4:e5:c9:ac:4d:f8:d2:b1:08:7d:11: 48:22:e8:c8:8f:b7:27:7a:58:a5:ba:1b:e4:42:91: ca:08:80:22:02:4a:91:27:6d:c0:ec:4b:95:a4:77: e9:28:4d:13:be:8b:ef:63:6c:7d:f2:b5:d5:7e:09: b8:56:fa:f2:0f:f5:51:6a:db:de:7f:7e:8d:13:b0: ed:72:9f:2e:df:61:ea:46:6d:9e:77:42:c2:cb:9e: b1:b2:b8:12:6a:1e:d1:f8:15:de:49:34:7b:6c:46: 47:1c:ae:a7:21:db:f9:54:58:25:78:02:84:6f:a5: 51:af:dd:84:62:6a:6b:c4:5d:6e:c9:92:d8:7c:31: c8:51:c0:59:c7:4c:c6:f2:6f:b9:1c:a7:d3:ce:c5: 4c:61:0c:c2:19:a9:63:6b:44:90:8d:eb:d9:8c:3b: f8:28:bc:93:3f:ef:ee:fe:0f:76:ce:08:76:f2:61: a3:86:f6:84:0b:07:54:95:9b:84:52:ce:ff:20:be: 41:f6:4b:6f:16:26:02:63:d4:cf:b4:38:c6:94:9d: ed:53:e7:6b:06:37:42:9c:fa:93:4d:38:c5:de:64: 85:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:41:6A:BC:07:20:48:84:64:CB:50:26:DA:22:DC:B4:6C:A8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/b58ea8dc-de4c-3765-81b8-39248b9bd5f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:75:dc:27:62:27:6f:c8:07:2f:bf:67:7e:02:9b:87:b7:74: 82:db:94:fe:83:44:69:b2:da:bb:f3:4f:bb:a0:cc:14:8f:54: 27:97:eb:44:b7:6f:5e:2c:84:12:1c:b8:b0:fd:f6:bd:58:81: 44:c2:1f:f1:fc:70:ce:70:80:30:0f:b7:4a:83:d6:e5:4b:20: 08:d2:d2:35:cf:f9:42:5f:96:f0:7b:a7:00:ba:2c:67:5f:1b: 68:a2:63:ad:27:ca:32:12:51:e7:88:7b:e7:ef:6d:fd:55:63: d4:f9:20:06:a2:c8:82:41:d9:a2:fc:f2:35:59:7d:1d:fe:0a: d8:30:2d:36:34:96:33:84:08:69:fd:8f:9a:1a:ce:f0:a9:ea: b6:48:e5:7f:09:42:d5:e9:4d:5d:66:c1:b6:c5:82:d8:14:25: 87:bc:5f:8d:92:20:80:5f:12:a2:4a:23:b5:25:24:e3:4c:59: 8e:ec:59:c2:e3:56:5b:3f:83:62:57:f9:1f:5f:71:1d:20:e7: 29:90:69:ff:c7:a9:27:b9:15:94:4a:90:6e:9b:c2:89:86:df: f8:5d:08:fd:29:b8:a1:99:5f:1e:99:11:7d:3e:6a:a6:b8:c4: b6:4b:2d:81:20:81:0c:42:45:7d:7a:c5:0f:f5:74:c8:11:bc: d4:a1:fd:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlBRGvxQ8PdZwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NmNkM2UyYmYtNjdhOS00NzU0LTk4NDEtOGM1ZDZkMzIxMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJnXYJX45DRaGc444YhGZfLRrCNWYO/TkQmO 0etzQL+b1OXJrE340rEIfRFIIujIj7cneliluhvkQpHKCIAiAkqRJ23A7EuVpHfp KE0TvovvY2x98rXVfgm4VvryD/VRatvef36NE7Dtcp8u32HqRm2ed0LCy56xsrgS ah7R+BXeSTR7bEZHHK6nIdv5VFgleAKEb6VRr92EYmprxF1uyZLYfDHIUcBZx0zG 8m+5HKfTzsVMYQzCGalja0SQjevZjDv4KLyTP+/u/g92zgh28mGjhvaECwdUlZuE Us7/IL5B9ktvFiYCY9TPtDjGlJ3tU+drBjdCnPqTTTjF3mSFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUyQWq8ByBIhGTLUCbaIty0bKiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvYjU4ZWE4ZGMtZGU0Yy0z NzY1LTgxYjgtMzkyNDhiOWJkNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ13CdiJ2/IBy+/Z34Cm4e3dILblP6DRGmy2rvzT7ugzBSPVCeX60S3 b14shBIcuLD99r1YgUTCH/H8cM5wgDAPt0qD1uVLIAjS0jXP+UJflvB7pwC6LGdf G2iiY60nyjISUeeIe+fvbf1VY9T5IAaiyIJB2aL88jVZfR3+CtgwLTY0ljOECGn9 j5oazvCp6rZI5X8JQtXpTV1mwbbFgtgUJYe8X42SIIBfEqJKI7UlJONMWY7sWcLj Vls/g2JX+R9fcR0g5ymQaf/HqSe5FZRKkG6bwomG3/hdCP0puKGZXx6ZEX0+aqa4 xLZLLYEggQxCRX16xQ/1dMgRvNSh/ak= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:22 2026 by rpki-client