$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa File: 7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa (raw, json) Hash identifier: laCqKxGV0uMvWMJwnC/BTUXFK6jhVkK3R4N0XCFTTcI= Subject key identifier: CE:F2:B0:44:8F:A1:88:5D:CD:9E:1B:65:F9:7D:8B:A1:25:59:73:15 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584D100CF25FCA87D329145A4F40 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 54198 IP address blocks: 198.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f2:5f:ca:87:d3:29:14:5a:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=dc23339a-0d78-40c1-871c-b468dc5a0d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e7:86:c3:9d:d9:f9:8c:f5:42:d0:58:c4:24: 50:ea:f6:fc:19:24:44:1c:23:b5:73:89:33:f0:fa: d1:a4:12:16:7c:8c:d7:1b:f1:37:ba:5c:73:1c:1d: f9:a0:d4:a0:8e:f6:4a:79:73:4c:d3:fc:08:dc:1e: 6c:81:a5:c3:06:bf:b2:28:ac:e2:f9:44:00:28:b7: f5:ed:44:18:f5:a5:02:b4:91:4e:35:6b:44:4c:3b: 65:b7:76:ae:59:57:6e:b9:72:5a:e6:06:9a:6b:22: ef:98:33:2b:9a:15:4a:a7:2a:e0:74:17:45:f8:2c: 3d:c3:03:77:b9:ae:ce:68:6b:ba:f5:76:f2:0b:58: 98:57:0b:9d:d2:a9:77:14:23:08:05:aa:82:11:bc: c7:89:6b:d4:6b:16:b9:62:72:55:00:f7:6e:26:3b: d9:3f:3b:78:d4:93:a2:07:f1:9e:45:73:eb:65:6c: 8d:1d:36:c6:7a:61:2a:96:dd:02:dc:1b:d1:dd:37: 71:8f:ed:6e:34:2d:3d:5c:2f:08:4b:9a:ca:eb:de: 82:11:fb:7b:9d:11:dc:08:51:5f:ee:24:81:ca:4a: de:6d:9d:af:34:06:3b:46:43:e2:15:e3:d0:87:26: fd:06:8c:ae:d4:c2:37:3b:96:2e:e6:ce:b4:8c:e9: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F2:B0:44:8F:A1:88:5D:CD:9E:1B:65:F9:7D:8B:A1:25:59:73:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 198.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:97:c1:f5:6e:8c:2f:6c:b5:30:52:0d:68:9b:16:60:85:1b: 58:b6:03:ca:72:6f:4b:16:84:2e:90:39:2a:41:47:6c:f7:c8: a2:fb:fa:d7:17:31:c2:14:5d:cd:8a:c4:20:4a:e1:53:2b:e6: 0d:27:15:f3:70:97:df:da:2d:6b:57:fb:43:d2:d6:94:ec:90: ce:53:21:0b:4b:9c:a4:c7:39:7f:e5:f4:46:ce:79:53:d7:29: 37:a6:b9:4e:d3:75:ff:ad:86:4b:4a:2d:08:9d:b9:e8:9c:2a: 51:9a:43:05:96:9e:5b:88:76:ae:a8:0d:74:50:43:7d:28:bb: 79:9d:4e:35:e4:e6:63:da:ff:0d:70:78:55:80:17:26:ba:43: a5:58:f9:14:8f:68:db:0b:35:da:03:d4:e0:bd:a2:25:54:6a: 91:33:1e:87:d4:82:3c:85:22:26:79:b4:49:00:5b:a0:1c:e1: 51:ed:26:9f:33:74:7c:c5:3c:ae:16:64:ab:6f:fa:5d:87:0b: 98:88:eb:ac:6c:53:09:b1:c6:ef:a6:e0:78:12:13:ae:2e:0a: d1:37:f4:d2:10:40:65:dc:d1:2e:f1:db:a3:77:29:da:26:10: f3:80:4c:ea:d7:5a:eb:2b:37:f3:4c:27:41:04:51:d9:10:f7: 61:f5:ac:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPJfyofTKRRaT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZGMyMzMzOWEtMGQ3OC00MGMxLTg3MWMtYjQ2OGRjNWEwZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+eGw53Z+Yz1QtBYxCRQ6vb8GSREHCO1c4kz 8PrRpBIWfIzXG/E3ulxzHB35oNSgjvZKeXNM0/wI3B5sgaXDBr+yKKzi+UQAKLf1 7UQY9aUCtJFONWtETDtlt3auWVduuXJa5gaaayLvmDMrmhVKpyrgdBdF+Cw9wwN3 ua7OaGu69XbyC1iYVwud0ql3FCMIBaqCEbzHiWvUaxa5YnJVAPduJjvZPzt41JOi B/GeRXPrZWyNHTbGemEqlt0C3BvR3Tdxj+1uNC09XC8IS5rK696CEft7nRHcCFFf 7iSBykrebZ2vNAY7RkPiFePQhyb9Boyu1MI3O5Yu5s60jOnsdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7ysESPoYhdzZ4bZfl9i6ElWXMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvN2RlMzMzYmMtYTQ3Yy0z ZWU4LWFlNDgtNzllMjVjZGRmNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSXwfVujC9stTBSDWibFmCFG1i2A8pyb0sWhC6QOSpBR2z3yKL7+tcX McIUXc2KxCBK4VMr5g0nFfNwl9/aLWtX+0PS1pTskM5TIQtLnKTHOX/l9EbOeVPX KTemuU7Tdf+thktKLQidueicKlGaQwWWnluIdq6oDXRQQ30ou3mdTjXk5mPa/w1w eFWAFya6Q6VY+RSPaNsLNdoD1OC9oiVUapEzHofUgjyFIiZ5tEkAW6Ac4VHtJp8z dHzFPK4WZKtv+l2HC5iI66xsUwmxxu+m4HgSE64uCtE39NIQQGXc0S7x26N3Kdom EPOATOrXWusrN/NMJ0EEUdkQ92H1rHs= -----END CERTIFICATE-----Generated at Sat Mar 14 22:52:29 2026 by rpki-client