$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cdd67ff2-97d5-3579-93be-e5765981e16f.roa File: cdd67ff2-97d5-3579-93be-e5765981e16f.roa (raw, json) Hash identifier: +/X7RjYc7riChCu0MvJRnb7u1+iIZgVsP+Eu2tFkNqg= Subject key identifier: 16:8D:E0:2A:F4:F2:F5:BD:6D:2E:F1:31:20:AB:8D:FE:FF:7C:F7:51 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584D492A516477A91B825137E4F0 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cdd67ff2-97d5-3579-93be-e5765981e16f.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14555 IP address blocks: 198.23.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:51:64:77:a9:1b:82:51:37:e4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=e84a87d0-1978-42a4-a915-aff7597aa465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:d5:bf:83:ad:96:1e:21:ff:25:76:f9:a0: a4:b3:dd:cb:2a:54:c3:f5:77:05:c5:b9:b4:1b:78: c8:1c:94:47:41:50:6c:55:20:6f:80:65:40:8e:eb: 8e:17:9a:72:63:c1:e5:60:2d:86:2f:cc:42:dd:5b: b4:06:ac:95:5d:6c:60:14:c3:da:e1:41:50:4c:82: 2c:23:8a:f2:0f:c0:65:e8:75:8c:31:25:e2:b7:a6: 8b:cb:57:b9:d7:5a:af:fb:2f:12:6f:47:f6:51:dd: 07:db:95:8a:38:5d:8a:21:f6:1b:7c:dc:a8:1f:48: 10:0c:bf:60:ba:ee:71:51:fa:b2:bb:89:89:db:83: 36:f8:72:a9:c7:00:bd:d1:3e:c2:56:df:7b:20:a5: 20:30:da:94:70:91:77:4b:5b:9b:a5:d6:96:d9:1d: 8c:68:77:69:1e:a2:ce:8a:ee:e8:a1:35:9c:2b:65: 2a:db:8c:fd:93:c5:6c:4d:22:e7:60:b2:db:39:e0: 03:71:2e:bc:53:10:bc:eb:fb:c6:70:a4:a6:2e:a6: b2:cf:3c:62:2f:bc:7e:36:2e:98:b0:fc:a8:1a:55: 4f:82:f4:b4:85:c7:cc:74:f8:3e:c6:d6:f7:a1:67: 20:43:9e:2a:b0:5c:e5:df:c8:84:fe:e1:9b:b4:32: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8D:E0:2A:F4:F2:F5:BD:6D:2E:F1:31:20:AB:8D:FE:FF:7C:F7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cdd67ff2-97d5-3579-93be-e5765981e16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a8:29:26:7b:26:a0:27:f9:cf:84:7c:99:43:42:7a:9c:eb: a8:58:85:8e:da:41:94:71:5e:4c:29:41:e3:67:60:da:2f:f4: b6:07:25:3a:8a:cd:2f:da:fa:db:6b:00:95:a0:94:64:de:42: 40:f3:b2:89:bd:5d:00:d4:8d:8d:1f:e0:5b:bc:05:8d:d7:23: a9:26:eb:d2:e5:61:eb:26:8f:6c:96:24:ba:75:23:1b:10:da: 8c:6a:6c:73:e6:e3:b0:f8:4c:3d:e6:0d:5d:2d:08:a8:68:b3: c5:b8:9e:8a:4b:1c:87:15:e9:76:f2:b1:db:93:d3:82:a0:9a: 34:3d:ae:f9:6e:d2:2b:97:cf:34:0d:24:e5:6c:52:af:ae:ff: d1:14:2c:44:05:b0:2a:ef:4d:96:09:38:a8:9b:be:aa:73:df: 24:a7:7e:30:6b:6d:75:65:8d:7a:75:49:dc:2a:87:c0:2c:22: 00:b4:eb:65:d1:08:f0:8f:ad:2a:5b:d0:ff:ae:53:6d:2e:37: e6:fb:1f:fd:64:4e:70:d7:96:20:4f:96:c9:08:2c:62:3d:4d: ad:9e:cd:99:6d:32:a2:97:20:a4:73:15:86:69:1b:3b:9c:c9: 05:da:5c:20:de:65:c4:1d:30:67:13:d0:07:38:d3:2f:1b:bd: 63:25:24:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlFkd6kbglE35PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZTg0YTg3ZDAtMTk3OC00MmE0LWE5MTUtYWZmNzU5N2FhNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowfVv4Otlh4h/yV2+aCks93LKlTD9XcFxbm0 G3jIHJRHQVBsVSBvgGVAjuuOF5pyY8HlYC2GL8xC3Vu0BqyVXWxgFMPa4UFQTIIs I4ryD8Bl6HWMMSXit6aLy1e511qv+y8Sb0f2Ud0H25WKOF2KIfYbfNyoH0gQDL9g uu5xUfqyu4mJ24M2+HKpxwC90T7CVt97IKUgMNqUcJF3S1ubpdaW2R2MaHdpHqLO iu7ooTWcK2Uq24z9k8VsTSLnYLLbOeADcS68UxC86/vGcKSmLqayzzxiL7x+Ni6Y sPyoGlVPgvS0hcfMdPg+xtb3oWcgQ54qsFzl38iE/uGbtDL04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaN4Cr08vW9bS7xMSCrjf7/fPdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvY2RkNjdmZjItOTdkNS0z NTc5LTkzYmUtZTU3NjU5ODFlMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHioKSZ7JqAn+c+EfJlDQnqc66hYhY7aQZRxXkwpQeNnYNov9LYHJTqK zS/a+ttrAJWglGTeQkDzsom9XQDUjY0f4Fu8BY3XI6km69LlYesmj2yWJLp1IxsQ 2oxqbHPm47D4TD3mDV0tCKhos8W4nopLHIcV6XbysduT04KgmjQ9rvlu0iuXzzQN JOVsUq+u/9EULEQFsCrvTZYJOKibvqpz3ySnfjBrbXVljXp1Sdwqh8AsIgC062XR CPCPrSpb0P+uU20uN+b7H/1kTnDXliBPlskILGI9Ta2ezZltMqKXIKRzFYZpGzuc yQXaXCDeZcQdMGcT0Ac40y8bvWMlJB0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:17 2026 by rpki-client