$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53c21004-5f26-36c7-817e-6d9847634f3d.roa File: 53c21004-5f26-36c7-817e-6d9847634f3d.roa (raw, json) Hash identifier: nX1Y4qQDvsQyTzVm9FiADM7luGX8NGHP0y5Wbk302Fw= Subject key identifier: 13:85:60:98:D1:7C:A9:49:B6:6A:BB:01:50:27:A9:41:B5:2A:1B:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0FF4A9BA22CBB89A00600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53c21004-5f26-36c7-817e-6d9847634f3d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 23.236.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ff:4a:9b:a2:2c:bb:89:a0:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2abd69a7-2c40-4ae4-92be-a548b07ac92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:2b:19:3c:5a:7a:76:62:d3:6a:2d:45:73: 59:2d:01:44:6e:be:30:27:ad:c3:9d:bd:55:01:fd: 04:54:6e:bc:60:cc:d2:3a:8f:b9:05:d0:a3:e0:7b: 4c:ea:56:ae:0e:77:00:a7:de:8e:d9:7f:cf:db:8c: c4:33:da:13:0e:63:54:3a:48:9d:c2:97:a2:08:2a: 59:df:b6:a5:38:57:cb:0e:d7:7b:3b:8e:d8:03:c6: 91:02:ed:3e:d6:be:6f:23:7c:35:86:34:7f:76:33: f9:6d:e6:c3:84:94:d0:db:2b:4e:97:d6:79:a7:34: 72:54:c6:14:bf:fd:3a:9b:7d:f2:b0:96:a3:f8:45: 43:88:63:78:26:bd:34:d4:35:78:c3:38:e5:65:71: 26:55:4c:e6:ef:b8:78:92:12:b6:bf:50:5c:37:aa: ea:c4:09:4f:6e:b5:4f:29:dd:0c:8a:6e:0c:31:e8: af:65:d3:56:8e:82:e2:d3:4a:0b:28:50:93:d3:0b: 5f:bc:0a:d2:a9:46:a1:c7:c5:d3:77:2c:45:8c:b2: d4:e2:e8:d9:43:63:41:4e:03:6e:1a:4c:e2:35:07: d9:44:e6:6e:40:c5:a2:63:3d:60:dd:ba:c4:8b:b0: 59:ac:02:84:23:da:d4:b6:21:34:8c:a8:82:7c:35: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:85:60:98:D1:7C:A9:49:B6:6A:BB:01:50:27:A9:41:B5:2A:1B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53c21004-5f26-36c7-817e-6d9847634f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:87:ec:e2:53:c3:15:19:3a:1d:ad:d4:23:fa:a6:ae:4b:02: 73:bb:a5:e8:01:06:b5:04:8c:a7:71:c5:9f:ae:3b:ae:b7:8f: e8:86:fd:bf:21:d4:5c:b8:4d:9f:32:7d:d0:80:07:96:78:e2: 66:f1:58:7d:d9:95:9d:63:16:99:96:c1:cc:26:ac:ee:93:23: 05:7f:da:0f:c1:ba:57:61:44:e5:aa:d8:b2:53:be:3e:1e:8a: 1d:38:46:b0:b3:44:d3:a9:c3:e3:47:a2:97:fb:89:ad:0d:5b: 80:80:a8:b3:ea:ea:22:8f:f3:a5:e8:90:a1:7b:8c:9f:b1:0d: c0:af:1b:b8:22:f7:e4:5e:b9:2c:d7:8a:cf:b2:92:84:dc:d1: 9b:bb:3d:56:53:83:32:5b:13:45:db:5a:1c:8e:a4:6a:ba:7c: 36:88:58:6e:8b:16:0b:da:15:0c:b4:42:53:76:fe:56:6a:1f: 71:92:08:63:9e:95:ff:0e:d4:e6:32:79:a0:f6:6f:eb:b5:8d: 4b:ca:46:27:44:d2:cb:a0:06:9c:80:f4:9c:06:d1:46:c5:45: d0:ed:d7:5a:0c:b7:8d:e3:cc:ae:ad:0b:61:ed:a5:4c:5b:16: 1c:97:0f:12:27:2f:07:7d:05:38:9a:c5:d5:ca:10:3d:f1:67: 8a:bd:39:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4P9Km6Isu4mgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmFiZDY5YTctMmM0MC00YWU0LTkyYmUtYTU0OGIwN2FjOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF8rGTxaenZi02otRXNZLQFEbr4wJ63Dnb1V Af0EVG68YMzSOo+5BdCj4HtM6lauDncAp96O2X/P24zEM9oTDmNUOkidwpeiCCpZ 37alOFfLDtd7O47YA8aRAu0+1r5vI3w1hjR/djP5bebDhJTQ2ytOl9Z5pzRyVMYU v/06m33ysJaj+EVDiGN4Jr001DV4wzjlZXEmVUzm77h4khK2v1BcN6rqxAlPbrVP Kd0Mim4MMeivZdNWjoLi00oLKFCT0wtfvArSqUahx8XTdyxFjLLU4ujZQ2NBTgNu GkziNQfZROZuQMWiYz1g3brEi7BZrAKEI9rUtiE0jKiCfDVBMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOFYJjRfKlJtmq7AVAnqUG1KhupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTNjMjEwMDQtNWYyNi0z NmM3LTgxN2UtNmQ5ODQ3NjM0ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+w6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiH7OJTwxUZOh2t1CP6pq5LAnO7pegBBrUEjKdxxZ+uO663j+iG/b8h 1Fy4TZ8yfdCAB5Z44mbxWH3ZlZ1jFpmWwcwmrO6TIwV/2g/BuldhROWq2LJTvj4e ih04RrCzRNOpw+NHopf7ia0NW4CAqLPq6iKP86XokKF7jJ+xDcCvG7gi9+ReuSzX is+ykoTc0Zu7PVZTgzJbE0XbWhyOpGq6fDaIWG6LFgvaFQy0QlN2/lZqH3GSCGOe lf8O1OYyeaD2b+u1jUvKRidE0sugBpyA9JwG0UbFRdDt11oMt43jzK6tC2HtpUxb FhyXDxInLwd9BTiaxdXKED3xZ4q9OTY= -----END CERTIFICATE-----Generated at Thu Mar 19 01:50:53 2026 by rpki-client