$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/58231aaf-3dc4-32ec-b04a-4083c30135fa.roa File: 58231aaf-3dc4-32ec-b04a-4083c30135fa.roa (raw, json) Hash identifier: kx8vdpz2HXW9j4c6MECiBn9G9C/qwDqBi+A8kuf2Y0A= Subject key identifier: D0:F9:CD:32:B0:5E:E8:9F:62:E9:B4:A7:28:74:AB:82:C0:43:62:89 Certificate issuer: /CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Certificate serial: 010D0C9F4328584D1F4A10FD5D03BFE64D14FF00 Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/58231aaf-3dc4-32ec-b04a-4083c30135fa.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54702 IP address blocks: 173.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:10:fd:5d:03:bf:e6:4d:14:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=f00d90bc-92b3-4a9e-be24-6bb8ffe8296a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:5c:2c:f0:d2:ff:88:3b:ec:6a:b3:8c:10: d2:a3:8a:36:89:83:71:ab:3d:d0:76:c9:aa:43:5f: b8:3a:56:39:37:80:8c:34:0f:5f:76:d4:bd:9f:b3: 75:d3:86:66:a0:39:21:09:14:8d:2b:fc:0f:1c:74: 13:9f:0c:93:25:59:2e:fe:82:92:31:a2:4b:34:f5: 8b:cf:26:5f:d1:9b:4f:a9:c8:5c:90:ae:1c:82:ea: 67:f0:b3:73:d1:39:dc:87:e1:fe:a9:0b:b6:c9:39: 0a:74:41:28:41:5a:55:90:d7:60:76:34:bf:51:af: 6c:0a:c9:0b:4e:64:94:4c:55:f6:80:92:48:96:bf: 5b:8b:6f:1a:53:8d:19:7d:d8:9b:71:a2:4c:82:ff: c1:36:8a:e7:d8:79:9e:7e:53:13:17:82:2d:58:ef: 5a:85:10:d0:59:93:86:e7:6e:15:04:25:da:94:e4: e9:99:d5:db:9c:5d:81:e8:62:1c:98:30:6e:06:7d: 70:7a:79:f3:96:d1:d8:2c:32:a6:f8:f1:0f:76:b6: d4:d3:99:ed:08:9c:2d:49:75:67:96:1a:6c:d0:8a: 5b:a7:74:2a:85:8f:97:34:54:48:14:9c:06:14:6a: 63:16:99:f8:1a:69:c5:fd:9a:9b:43:5b:fd:60:af: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:CD:32:B0:5E:E8:9F:62:E9:B4:A7:28:74:AB:82:C0:43:62:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/58231aaf-3dc4-32ec-b04a-4083c30135fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl X509v3 Authority Key Identifier: keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer sbgp-ipAddrBlock: critical IPv4: 173.0.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:77:dd:91:df:e8:29:95:fe:67:2b:7c:34:35:f4:df:81:ee: 12:ba:e2:b7:cd:53:21:3e:94:1c:46:e4:fb:e3:83:12:1a:d1: 1e:d0:a6:e8:d0:94:2f:ef:a2:c3:25:27:fe:84:61:c1:f4:57: bd:87:b5:1d:ce:aa:a3:2d:7f:4c:b2:60:f6:d5:cd:7d:dc:8a: fc:fb:91:d6:9c:fc:c0:80:09:e5:b5:c0:fb:46:c9:d9:2c:61: ae:78:9e:f3:7a:5f:ac:91:7c:97:7e:e4:86:c8:a4:a0:20:84: f3:db:76:bd:d9:1d:66:b9:f4:98:a3:a4:2a:03:8c:e2:c8:7d: 2c:f9:77:ce:f7:6f:dc:ae:69:27:37:54:94:f8:bd:a4:0f:11: 0a:51:96:2e:59:88:e4:7d:02:62:34:7c:b9:4f:64:72:86:f9: 13:73:4e:21:5d:6c:15:d5:f2:2e:a8:02:35:42:3d:92:e4:12: 65:a7:81:d0:38:0e:91:6f:6a:9a:e9:72:ea:d1:60:7c:e2:d1: 05:f0:df:ce:1e:ec:c5:e0:4a:07:3f:dc:c4:a1:48:80:0c:9f: 4f:7f:62:b1:33:09:b2:9f:d5:ff:4a:c3:26:e5:91:a3:a6:5a: 77:10:23:dc:a5:d9:fa:db:d0:c5:e7:3f:3a:bf:fe:5e:5f:43: d1:de:df:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShD9XQO/5k0U/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz ZmM1MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZjAwZDkwYmMtOTJiMy00YTllLWJlMjQtNmJiOGZmZTgyOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG5cLPDS/4g77GqzjBDSo4o2iYNxqz3Qdsmq Q1+4OlY5N4CMNA9fdtS9n7N104ZmoDkhCRSNK/wPHHQTnwyTJVku/oKSMaJLNPWL zyZf0ZtPqchckK4cgupn8LNz0Tnch+H+qQu2yTkKdEEoQVpVkNdgdjS/Ua9sCskL TmSUTFX2gJJIlr9bi28aU40ZfdibcaJMgv/BNorn2HmeflMTF4ItWO9ahRDQWZOG 524VBCXalOTpmdXbnF2B6GIcmDBuBn1wennzltHYLDKm+PEPdrbU05ntCJwtSXVn lhps0Ipbp3QqhY+XNFRIFJwGFGpjFpn4GmnF/ZqbQ1v9YK+FCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND5zTKwXuifYum0pyh0q4LAQ2KJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvNTgyMzFhYWYtM2RjNC0z MmVjLWIwNGEtNDA4M2MzMDEzNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1 M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANF33ZHf6CmV/mcrfDQ19N+B7hK64rfNUyE+lBxG5PvjgxIa0R7QpujQ lC/vosMlJ/6EYcH0V72HtR3OqqMtf0yyYPbVzX3civz7kdac/MCACeW1wPtGydks Ya54nvN6X6yRfJd+5IbIpKAghPPbdr3ZHWa59JijpCoDjOLIfSz5d873b9yuaSc3 VJT4vaQPEQpRli5ZiOR9AmI0fLlPZHKG+RNzTiFdbBXV8i6oAjVCPZLkEmWngdA4 DpFvaprpcurRYHzi0QXw384e7MXgSgc/3MShSIAMn09/YrEzCbKf1f9KwyblkaOm WncQI9yl2frb0MXnPzq//l5fQ9He31Q= -----END CERTIFICATE-----Generated at Wed Mar 25 23:20:58 2026 by rpki-client