$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c58bc9be-a35b-3a1e-94e4-977d10a7406e.roa File: c58bc9be-a35b-3a1e-94e4-977d10a7406e.roa (raw, json) Hash identifier: RwJWSM1G5hq/TprJD5Emw2VxAjJ6Q2kiiSEpLaxNSfc= Subject key identifier: 55:5B:D6:3D:B3:0E:86:3E:42:FE:D4:18:F9:46:95:34:38:E8:8E:78 Certificate issuer: /CN=c8b92d93-b32b-4aac-af77-5c47575a646e Certificate serial: 010D0C9F4328584E4C5485FCC2D8F316B1B3AE80 Authority key identifier: 85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c58bc9be-a35b-3a1e-94e4-977d10a7406e.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 401783 IP address blocks: 216.235.209.0/24 maxlen: 24 216.235.210.0/24 maxlen: 24 216.235.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:85:fc:c2:d8:f3:16:b1:b3:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8b92d93-b32b-4aac-af77-5c47575a646e Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=71aeb175-33b7-4f69-8ee6-4d6055bfd800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:d4:66:cc:96:87:5c:a2:2c:3d:ae:11:23: da:95:39:81:1c:11:cb:7d:47:37:c3:ed:81:c8:6b: 16:e2:3f:4b:f5:b3:fe:1c:71:21:49:d1:87:40:68: 54:42:95:0d:ee:61:b4:bb:5b:de:b7:11:83:81:60: f6:60:99:fe:ec:fa:5d:8a:f8:22:0e:29:a0:e3:18: fd:61:fb:72:9a:ae:e0:c7:ea:e0:ec:6d:e3:41:82: 35:11:d0:6a:40:56:9c:2a:17:f5:3c:6b:07:22:58: 68:6b:58:c2:88:63:ba:78:7e:6a:96:86:04:8f:5e: 58:40:fc:c7:2e:ad:91:59:4a:dc:39:68:89:f0:ba: 2e:26:89:42:b7:a6:2a:6a:a0:10:68:a1:ef:f1:83: bb:e0:e8:cb:e8:8d:ee:64:fb:6e:a3:91:f5:5f:db: 6b:5e:5a:6a:22:a0:b0:4b:0c:99:a2:9c:3b:63:49: e5:65:21:d1:df:ef:2b:3f:f0:98:aa:6c:06:01:55: a7:63:86:aa:32:c9:62:4b:8b:0a:7b:b9:c8:47:65: 7e:55:17:17:5b:e0:c8:c6:24:82:73:3f:25:12:44: 5d:f9:2e:1a:ec:62:8c:8e:04:d9:09:fd:05:65:6e: 6d:ac:d5:bb:9c:3c:3c:76:6d:38:35:70:fe:a9:fd: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:D6:3D:B3:0E:86:3E:42:FE:D4:18:F9:46:95:34:38:E8:8E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c58bc9be-a35b-3a1e-94e4-977d10a7406e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl X509v3 Authority Key Identifier: keyid:85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer sbgp-ipAddrBlock: critical IPv4: 216.235.209.0-216.235.211.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5d:6e:e9:54:c1:f0:cd:83:05:74:2f:fe:9c:a3:7c:c9:51: 6f:55:e5:c8:80:01:46:91:6f:e7:a8:c3:9d:eb:e2:51:ba:d9: 2d:14:9a:04:0e:db:bc:6f:43:36:9c:8b:15:e8:c4:c8:36:92: 41:e0:87:7e:1f:66:b4:72:63:0b:3d:a8:01:da:eb:70:7a:16: 88:42:a3:b7:f4:de:67:5a:b3:0f:8e:2e:ed:0e:2b:91:2e:ca: df:30:ea:27:26:37:48:c0:40:06:c8:0e:8b:41:36:71:ac:28: 26:09:ac:51:57:77:18:59:47:ea:6f:58:bc:d8:f5:4a:87:da: af:26:d2:d6:a0:46:52:cf:71:7c:86:46:eb:94:9c:d3:23:a7: 83:cd:9c:3f:db:ca:a5:6b:b4:4d:2f:a9:34:23:cf:8e:35:c0: 00:ee:7e:8d:7e:cb:35:c2:bf:a2:71:d9:d4:b3:e0:d4:6a:ee: 12:76:88:f8:d9:40:91:72:18:93:cd:34:64:f6:78:12:14:c3: 45:08:22:99:05:19:b3:7a:d8:5f:cb:5e:53:dc:50:2c:fd:50: e1:e5:02:3c:70:7a:35:bb:93:21:eb:54:ba:2f:4e:d4:b7:43: b7:d4:14:24:fe:d7:6b:78:c1:a2:28:30:f5:6b:68:22:61:20: c5:0f:f0:22 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5MVIX8wtjzFrGzroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhiOTJkOTMtYjMyYi00YWFjLWFmNzctNWM0NzU3NWE2 NDZlMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NzFhZWIxNzUtMzNiNy00ZjY5LThlZTYtNGQ2MDU1YmZkODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7rUZsyWh1yiLD2uESPalTmBHBHLfUc3w+2B yGsW4j9L9bP+HHEhSdGHQGhUQpUN7mG0u1vetxGDgWD2YJn+7PpdivgiDimg4xj9 Yftymq7gx+rg7G3jQYI1EdBqQFacKhf1PGsHIlhoa1jCiGO6eH5qloYEj15YQPzH Lq2RWUrcOWiJ8LouJolCt6YqaqAQaKHv8YO74OjL6I3uZPtuo5H1X9trXlpqIqCw SwyZopw7Y0nlZSHR3+8rP/CYqmwGAVWnY4aqMsliS4sKe7nIR2V+VRcXW+DIxiSC cz8lEkRd+S4a7GKMjgTZCf0FZW5trNW7nDw8dm04NXD+qf0m4wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFVb1j2zDoY+Qv7UGPlGlTQ46I54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGI5 MmQ5My1iMzJiLTRhYWMtYWY3Ny01YzQ3NTc1YTY0NmUvYzU4YmM5YmUtYTM1Yi0z YTFlLTk0ZTQtOTc3ZDEwYTc0MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhiOTJkOTMtYjMyYi00YWFjLWFm NzctNWM0NzU3NWE2NDZlL2M4YjkyZDkzLWIzMmItNGFhYy1hZjc3LTVjNDc1NzVh NjQ2ZS5jcmwwHwYDVR0jBBgwFoAUhcdY2SBSpbrKDms5fzH2xTuFM34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGI5MmQ5My1iMzJiLTRhYWMtYWY3Ny01YzQ3 NTc1YTY0NmUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADY69ED BALY69AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAY11u6VTB8M2DBXQv/pyjfMlRb1XlyIABRpFv56jDnevi UbrZLRSaBA7bvG9DNpyLFejEyDaSQeCHfh9mtHJjCz2oAdrrcHoWiEKjt/TeZ1qz D44u7Q4rkS7K3zDqJyY3SMBABsgOi0E2cawoJgmsUVd3GFlH6m9YvNj1SofarybS 1qBGUs9xfIZG65Sc0yOng82cP9vKpWu0TS+pNCPPjjXAAO5+jX7LNcK/onHZ1LPg 1GruEnaI+NlAkXIYk800ZPZ4EhTDRQgimQUZs3rYX8teU9xQLP1Q4eUCPHB6NbuT IetUui9O1LdDt9QUJP7Xa3jBoigw9WtoImEgxQ/wIg== -----END CERTIFICATE-----Generated at Tue Jul 21 12:43:25 2026 by rpki-client