$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/18e19934-67c5-37b5-8717-528ae75668fb.roa File: 18e19934-67c5-37b5-8717-528ae75668fb.roa (raw, json) Hash identifier: d5zP56khcu+7axorqon5+GySTeGvmxkKasuF5RJS1Vc= Subject key identifier: 9A:8F:1F:7E:F4:53:0C:65:53:7C:F1:06:61:4B:47:A9:4A:E8:35:90 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D117265E6424DF108C7A82B80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/18e19934-67c5-37b5-8717-528ae75668fb.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 173.199.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:65:e6:42:4d:f1:08:c7:a8:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=4edb6aa5-6827-407a-9748-8c73c0827235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:13:f9:92:97:83:f5:2e:a2:de:bf:0a:04: 40:6a:44:fb:b8:75:28:27:6a:19:57:23:97:49:13: 46:e3:25:2d:06:ce:d6:af:83:d3:fa:41:68:e2:36: f9:41:86:62:47:04:ff:30:ed:c6:59:15:f8:86:1e: 50:8e:89:7e:94:a8:d3:42:be:0a:5c:6c:b8:41:36: 02:ad:0f:00:da:6b:b8:26:7e:30:79:07:85:39:3e: 13:09:9f:c4:6e:5b:9b:ca:a5:92:b6:d1:a3:2f:f1: 9e:61:57:58:5c:cc:9d:ab:ed:b2:9b:bc:50:7b:9b: b8:b1:9f:b6:6b:49:02:2f:8b:8b:33:f0:3a:90:57: 41:9a:4a:0c:3c:da:d1:17:e1:bc:ec:83:9b:92:54: 5c:16:fd:23:cb:50:5e:bc:08:81:1c:fa:d3:17:57: dc:11:80:bd:c3:f8:54:a8:ca:50:19:d1:87:0d:ca: f3:c1:cc:15:c6:d3:95:fe:0c:9d:7e:0e:1a:10:9f: 2c:ad:20:b9:3a:7f:c0:cc:6c:14:3b:f4:09:f0:3b: fa:ba:e0:4d:d7:a7:6e:7a:5a:e2:cc:09:7a:3c:71: 95:6f:e2:75:ab:3f:f5:b4:61:b0:2d:35:ad:81:57: dd:81:c4:cd:5f:64:6f:df:90:7d:f7:1e:3b:80:ca: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8F:1F:7E:F4:53:0C:65:53:7C:F1:06:61:4B:47:A9:4A:E8:35:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/18e19934-67c5-37b5-8717-528ae75668fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6e:a2:39:da:d0:96:1e:eb:94:40:81:b5:eb:5c:67:08:29: 18:5a:77:bf:6c:19:51:96:cd:4b:45:a3:df:d5:4a:7f:3d:58: b9:c4:e4:1d:34:00:bf:d4:73:d7:e0:a1:43:91:b9:48:69:88: 6a:77:60:e5:9f:45:79:df:60:a1:b8:05:bb:18:fd:f5:ff:69: 5e:94:7a:42:2d:f3:74:91:20:d0:44:00:91:3b:b1:5c:29:61: d6:fa:f5:38:96:af:70:2f:83:12:aa:00:db:b0:e5:25:ab:50: 10:84:8a:20:b6:78:e9:d4:1b:d7:9b:0d:79:e4:d2:40:78:68: 19:9b:b8:4c:f0:63:a7:02:fb:2c:e4:64:39:74:0b:08:db:bf: 50:5b:82:bf:aa:66:8c:f4:28:f1:90:b1:6f:61:a3:15:dd:72: f6:37:60:f5:31:5c:d7:9c:e0:61:0c:e6:17:28:f7:3a:ca:39: 11:37:fa:3e:7f:0a:79:2f:7c:88:08:f1:b9:26:27:d2:ea:61: a1:6c:70:bf:78:b3:7e:05:a4:bb:05:76:51:d0:5d:b7:13:9a: 13:af:6d:1e:9e:ce:35:09:8d:db:f1:77:c9:89:79:42:d2:e5: f9:94:a3:c0:bb:f1:09:9c:f8:32:15:d4:22:5b:b7:1e:e5:97: 0c:7d:9a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmXmQk3xCMeoK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NGVkYjZhYTUtNjgyNy00MDdhLTk3NDgtOGM3M2MwODI3MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlcT+ZKXg/Uuot6/CgRAakT7uHUoJ2oZVyOX SRNG4yUtBs7Wr4PT+kFo4jb5QYZiRwT/MO3GWRX4hh5Qjol+lKjTQr4KXGy4QTYC rQ8A2mu4Jn4weQeFOT4TCZ/EblubyqWSttGjL/GeYVdYXMydq+2ym7xQe5u4sZ+2 a0kCL4uLM/A6kFdBmkoMPNrRF+G87IObklRcFv0jy1BevAiBHPrTF1fcEYC9w/hU qMpQGdGHDcrzwcwVxtOV/gydfg4aEJ8srSC5On/AzGwUO/QJ8Dv6uuBN16duelri zAl6PHGVb+J1qz/1tGGwLTWtgVfdgcTNX2Rv35B99x47gMrgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqPH370UwxlU3zxBmFLR6lK6DWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMThlMTk5MzQtNjdjNS0z N2I1LTg3MTctNTI4YWU3NTY2OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhuojna0JYe65RAgbXrXGcIKRhad79sGVGWzUtFo9/VSn89WLnE5B00 AL/Uc9fgoUORuUhpiGp3YOWfRXnfYKG4BbsY/fX/aV6UekIt83SRINBEAJE7sVwp Ydb69TiWr3AvgxKqANuw5SWrUBCEiiC2eOnUG9ebDXnk0kB4aBmbuEzwY6cC+yzk ZDl0Cwjbv1Bbgr+qZoz0KPGQsW9hoxXdcvY3YPUxXNec4GEM5hco9zrKORE3+j5/ CnkvfIgI8bkmJ9LqYaFscL94s34FpLsFdlHQXbcTmhOvbR6ezjUJjdvxd8mJeULS 5fmUo8C78Qmc+DIV1CJbtx7llwx9mqQ= -----END CERTIFICATE-----Generated at Tue Mar 10 22:27:19 2026 by rpki-client