$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa File: 3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa (raw, json) Hash identifier: 4+mmZlCM6xEyTlhOjymWgkSfOYC7LO/XiJSyKCo4uOU= Subject key identifier: B6:D9:BA:99:63:49:5E:F1:D7:14:D4:2D:FC:32:63:87:27:52:6B:B0 Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552 Certificate serial: 010D0C9F4328584D59EA7A435583A93E6AB35F00 Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 26806 IP address blocks: 198.169.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:7a:43:55:83:a9:3e:6a:b3:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b52420b1-626c-4823-91b9-9e09fc250b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:b5:25:16:fd:02:5a:cb:ee:8c:14:6b:77: 5d:2f:90:64:23:c1:38:5e:d8:fc:a2:83:8f:d8:2d: 0e:cb:ca:c9:63:41:87:f1:65:d8:e2:9d:31:9c:1e: a3:29:03:28:17:ab:f9:3c:57:58:02:2f:24:e5:b4: 4a:9c:db:12:55:ce:87:bf:64:1d:be:f5:f9:1c:54: fc:6d:ad:82:62:fa:7f:26:3c:e7:ad:92:52:82:d0: 7a:93:c9:21:53:c4:d9:a2:84:21:04:67:c7:f1:31: 70:e1:33:f6:b3:0b:5d:b1:69:1c:84:d2:07:b1:cb: 86:c8:e5:52:4a:29:bf:ff:44:43:25:fd:18:68:d7: 07:d2:d0:fb:f8:f7:c7:0d:7f:7f:c1:f3:72:90:fd: cd:e3:f0:4f:e1:ff:9d:be:65:f3:b5:08:4b:6d:42: 8e:2d:f6:01:6f:a4:51:f8:9e:97:09:1c:de:35:10: 81:f4:38:5e:e8:37:cf:63:7c:3b:da:f2:b2:14:05: f5:92:b6:16:e6:04:4c:f8:19:88:c0:69:14:90:64: 64:62:81:a3:4f:3d:6d:e7:76:c2:7e:8f:db:09:29: 5c:1b:1e:8f:9a:8a:9d:4b:d5:e7:9c:37:e5:97:d8: 10:0f:5a:f1:83:f3:80:49:49:79:08:29:f7:fe:45: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D9:BA:99:63:49:5E:F1:D7:14:D4:2D:FC:32:63:87:27:52:6B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl X509v3 Authority Key Identifier: keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer sbgp-ipAddrBlock: critical IPv4: 198.169.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:08:0f:9e:3e:9a:e1:ca:cf:13:6d:b3:59:7c:30:4b:52:a8: bf:b0:48:5d:08:51:03:a3:4f:11:80:ef:e6:35:0a:66:5d:24: cd:21:f8:ad:38:ed:2d:2e:fc:e8:e4:36:8b:aa:d8:3d:e1:96: f1:8b:a6:9f:1b:7e:0f:ba:da:42:f4:8c:c8:33:c5:e1:2d:a0: 1a:64:7e:f1:84:ac:87:f1:81:16:62:54:f6:62:18:a9:b9:91: 1d:f5:38:c1:3b:c5:ff:6d:b6:c2:3e:31:d0:e4:28:85:24:40: 26:bd:f0:1c:65:e7:b7:98:b9:a1:84:63:78:88:92:0f:b0:4f: 81:08:03:0f:4c:be:df:45:b8:8d:a0:ce:9c:a2:d7:54:21:a1: 5c:5c:1f:36:4b:39:5f:6e:c9:e1:11:c5:ed:ca:13:2d:75:fb: 39:91:45:8a:0b:56:eb:3b:67:de:b0:cd:85:55:0f:9c:96:50: 7d:1c:d2:c8:68:a4:7d:3f:d9:7e:51:00:74:cf:27:af:f5:80: 77:9b:14:1f:bc:65:8f:92:7e:87:29:78:d4:ad:77:6d:1c:7f: db:37:0f:85:6c:cb:67:b7:95:84:63:f5:70:02:e4:77:19:03: 9d:38:8a:81:49:2c:df:5a:2a:61:5c:bb:39:6f:ff:a2:81:fc: 26:c7:ca:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6npDVYOpPmqzXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl NTUyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjUyNDIwYjEtNjI2Yy00ODIzLTkxYjktOWUwOWZjMjUwYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/u1JRb9AlrL7owUa3ddL5BkI8E4Xtj8ooOP 2C0Oy8rJY0GH8WXY4p0xnB6jKQMoF6v5PFdYAi8k5bRKnNsSVc6Hv2QdvvX5HFT8 ba2CYvp/JjznrZJSgtB6k8khU8TZooQhBGfH8TFw4TP2swtdsWkchNIHscuGyOVS Sim//0RDJf0YaNcH0tD7+PfHDX9/wfNykP3N4/BP4f+dvmXztQhLbUKOLfYBb6RR +J6XCRzeNRCB9Dhe6DfPY3w72vKyFAX1krYW5gRM+BmIwGkUkGRkYoGjTz1t53bC fo/bCSlcGx6PmoqdS9XnnDfll9gQD1rxg/OASUl5CCn3/kU1oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbZupljSV7x1xTULfwyY4cnUmuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0 NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvM2RiY2JhZWUtYTJhNi0z Y2EwLWI5ZjctZDI1ODQ2MzU2ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0 MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQID54+muHKzxNts1l8MEtSqL+wSF0IUQOjTxGA7+Y1CmZdJM0h+K04 7S0u/OjkNouq2D3hlvGLpp8bfg+62kL0jMgzxeEtoBpkfvGErIfxgRZiVPZiGKm5 kR31OME7xf9ttsI+MdDkKIUkQCa98Bxl57eYuaGEY3iIkg+wT4EIAw9Mvt9FuI2g zpyi11QhoVxcHzZLOV9uyeERxe3KEy11+zmRRYoLVus7Z96wzYVVD5yWUH0c0sho pH0/2X5RAHTPJ6/1gHebFB+8ZY+SfocpeNStd20cf9s3D4Vsy2e3lYRj9XAC5HcZ A504ioFJLN9aKmFcuzlv/6KB/CbHypU= -----END CERTIFICATE-----Generated at Sat Apr 18 03:03:36 2026 by rpki-client