$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/dec813f6-f841-3023-8fdf-50c0bc3546e1.roa File: dec813f6-f841-3023-8fdf-50c0bc3546e1.roa (raw, json) Hash identifier: yBCHpThuOUrIKac3gT3rU6TOnU7EE6elw/KQqz5/l84= Subject key identifier: A2:53:A0:65:BA:6E:40:B3:2A:86:8A:F5:50:4D:FB:BC:EB:11:51:2C Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584ECBD1C9CE5AAA98AE18D2C920 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/dec813f6-f841-3023-8fdf-50c0bc3546e1.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 14555 IP address blocks: 198.23.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:c9:ce:5a:aa:98:ae:18:d2:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=b87b6e87-5a74-4e13-9a16-10f88ae4d6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:c7:85:da:20:af:1e:d0:15:9b:7f:8e:52: 55:c0:0a:f4:5d:db:3f:d1:e8:12:58:c5:c9:9d:27: 72:c1:db:2e:ea:26:20:e3:01:75:80:5f:0b:35:a2: 4c:a5:85:29:7f:38:39:78:f7:a4:e3:12:1e:89:5b: 18:e6:a7:59:2a:86:b7:9b:e6:9e:f5:77:5c:03:80: d9:0d:93:15:56:59:af:95:21:73:10:e9:71:08:43: ff:57:8a:32:1c:a2:43:6a:97:85:b3:0e:fa:53:52: 66:a3:a3:8d:28:34:59:e3:33:61:8b:69:ca:8f:b6: 6e:5c:a7:c4:63:11:e8:b3:4d:8c:96:fe:77:65:90: 42:31:d0:6f:fa:e7:2e:b2:3c:33:7a:fb:2d:cf:bf: 46:44:29:72:d3:47:d5:7b:80:77:b7:6a:c9:10:70: 1d:ae:fa:e0:97:7d:92:d5:63:af:72:ba:81:65:4d: f9:81:6e:48:4d:e7:ed:24:49:1b:ee:69:a0:9c:24: 73:cb:84:cf:21:e3:6d:b3:32:f1:b2:4c:d8:53:e9: 4e:46:74:80:28:e4:33:c3:dd:4d:89:ca:79:b0:64: 98:5c:a0:32:37:26:b4:34:c6:d2:85:d1:79:c2:3a: 1d:bb:3a:59:bf:b8:7c:32:9f:78:43:27:99:54:96: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:A0:65:BA:6E:40:B3:2A:86:8A:F5:50:4D:FB:BC:EB:11:51:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/dec813f6-f841-3023-8fdf-50c0bc3546e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9a:ef:54:66:3f:70:55:95:f2:8b:ce:8c:5a:ca:e0:2f:ef: 5a:d2:7f:2f:b2:66:49:d7:53:ac:60:1a:a2:d0:54:c2:16:41: b4:da:b4:a0:89:ab:10:2e:5b:3e:85:43:e1:ff:ba:9e:62:20: 53:76:cc:af:82:ed:5f:52:c4:0c:4f:f5:b6:67:2e:7b:e0:f9: 9a:9c:e8:61:ce:44:a0:70:d3:12:4f:e6:11:a2:ce:47:31:8c: 51:51:b1:9a:11:d3:66:13:c5:ef:ab:c7:c5:f4:a7:96:16:12: 64:ab:00:3f:a2:2b:b4:91:b7:0f:be:19:45:5d:71:f6:5f:da: fa:bb:fe:6d:02:ce:94:05:35:0a:57:02:24:7a:55:c3:1e:fe: 93:7a:60:bf:5d:a7:df:d4:4f:34:bc:71:b1:9d:a1:88:c6:03: 03:a9:bb:3c:9f:c3:e0:55:1d:1c:f5:30:0a:7f:2d:65:18:9b: 4f:9b:ef:45:59:1a:00:a6:b4:d3:1c:7e:6b:c4:4f:68:14:cb: 6c:04:10:f4:7f:20:52:9c:f3:3c:e5:8f:16:71:b3:ce:0a:d1: ec:71:72:cf:06:ed:c5:eb:8e:9b:f8:20:11:c7:ad:f5:91:7c: 22:43:06:3a:68:6c:b6:9e:c4:43:f4:36:e8:e2:1b:28:37:52: df:66:5d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cnOWqqYrhjSySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk Yjg3YjZlODctNWE3NC00ZTEzLTlhMTYtMTBmODhhZTRkNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWLHhdogrx7QFZt/jlJVwAr0Xds/0egSWMXJ nSdywdsu6iYg4wF1gF8LNaJMpYUpfzg5ePek4xIeiVsY5qdZKoa3m+ae9XdcA4DZ DZMVVlmvlSFzEOlxCEP/V4oyHKJDapeFsw76U1Jmo6ONKDRZ4zNhi2nKj7ZuXKfE YxHos02Mlv53ZZBCMdBv+ucusjwzevstz79GRCly00fVe4B3t2rJEHAdrvrgl32S 1WOvcrqBZU35gW5ITeftJEkb7mmgnCRzy4TPIeNtszLxskzYU+lORnSAKOQzw91N icp5sGSYXKAyNya0NMbShdF5wjoduzpZv7h8Mp94QyeZVJbfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJToGW6bkCzKoaK9VBN+7zrEVEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvZGVjODEzZjYtZjg0MS0z MDIzLThmZGYtNTBjMGJjMzU0NmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWa71RmP3BVlfKLzoxayuAv71rSfy+yZknXU6xgGqLQVMIWQbTatKCJ qxAuWz6FQ+H/up5iIFN2zK+C7V9SxAxP9bZnLnvg+Zqc6GHORKBw0xJP5hGizkcx jFFRsZoR02YTxe+rx8X0p5YWEmSrAD+iK7SRtw++GUVdcfZf2vq7/m0CzpQFNQpX AiR6VcMe/pN6YL9dp9/UTzS8cbGdoYjGAwOpuzyfw+BVHRz1MAp/LWUYm0+b70VZ GgCmtNMcfmvET2gUy2wEEPR/IFKc8zzljxZxs84K0exxcs8G7cXrjpv4IBHHrfWR fCJDBjpobLaexEP0NujiGyg3Ut9mXRM= -----END CERTIFICATE-----Generated at Sat Sep 5 10:11:49 2026 by rpki-client