$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa File: c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json) Hash identifier: b/mm/sg5oyWMZW+l/T9hS2k4czdzUko1Vn4GPvmETd8= Subject key identifier: F5:09:2A:97:A5:26:BB:85:16:61:3D:A0:BB:01:0C:EE:59:75:9C:5B Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F4328584B715CB9790230EA7AE736A340 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 23393 IP address blocks: 104.37.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b9:79:02:30:ea:7a:e7:36:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=db6c3b33-5738-4b38-8c23-a8604ec40189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:3a:a0:de:0f:1b:22:03:bf:7b:89:c8:2b: e1:eb:d7:ec:8d:7f:54:54:3f:63:b7:ea:4d:d3:fc: 05:9a:58:80:47:0b:0f:bd:b7:16:03:43:5e:b3:01: 37:fd:ed:08:86:0f:20:fd:1a:f4:6f:a5:1a:74:ca: 05:83:94:c7:76:f3:70:57:5c:47:e2:99:9b:bb:be: 84:57:5d:70:b4:96:f3:c2:26:56:88:ed:5e:41:0c: 11:dd:5d:27:33:d5:43:7a:0e:79:e8:c6:5b:c4:58: a3:5f:9b:6b:92:b7:ba:a6:b1:27:93:2a:f7:3e:95: 6c:02:13:44:ff:1a:7d:4e:b2:ba:48:0f:3d:02:50: 8c:c4:b1:1c:f1:99:f5:dd:c1:f2:bf:cc:60:21:47: 57:73:89:9c:c0:aa:2e:c1:60:89:69:d0:74:63:68: 6c:c4:75:19:a6:db:b4:21:8a:a0:1d:4a:2a:83:51: c9:5b:ce:49:79:95:cd:ff:6f:03:5d:e9:78:e6:df: 68:30:34:61:9c:89:34:c9:a6:ec:38:5f:3f:23:16: 4d:57:23:ab:53:66:50:cb:54:41:ff:bf:73:5b:54: 3f:3f:df:fb:e1:8c:b4:e9:f3:56:7e:77:77:ee:7c: 64:fe:ab:43:49:6a:28:80:93:f1:5a:aa:00:41:c1: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:2A:97:A5:26:BB:85:16:61:3D:A0:BB:01:0C:EE:59:75:9C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 104.37.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:79:d3:f1:6c:a1:cf:ed:db:7d:d3:c3:d7:a3:67:3c:5b:72: fb:66:4f:b2:42:91:76:75:b6:6a:29:63:1c:00:e2:4a:3b:16: 40:62:9e:0b:93:7b:2f:d8:e0:6b:7e:f9:67:a5:e5:97:88:15: 6f:89:b0:35:27:d5:d1:99:74:0e:15:dc:d0:19:b6:cb:46:17: 2c:a7:12:c0:99:ba:dc:46:b5:87:aa:e2:7c:4c:06:a4:c5:99: f0:5c:1f:5f:2f:f3:d6:2b:93:9e:7d:44:ec:c1:0c:ee:1e:4a: b1:b3:83:72:f6:2a:0b:4a:06:6f:71:d7:7d:60:1d:a8:61:92: 63:ae:7e:69:cc:cb:9d:d0:09:93:88:af:7d:99:1c:b7:e4:de: 86:0e:4a:3e:6e:eb:69:c1:91:10:e7:01:43:bb:7f:af:65:7e: 2a:8a:c0:17:ef:32:aa:c9:7d:b0:f4:2a:bb:bf:31:5e:3f:71: fb:ee:ce:07:35:a0:93:72:fa:fc:81:e0:df:91:02:5a:be:44: 2f:b2:04:b4:64:d6:f0:e0:2a:48:85:fd:24:04:47:14:b8:34: d6:97:e7:3d:32:a2:7e:26:6c:44:7e:43:cc:b3:9f:69:78:cd: 6d:1b:ca:f8:8a:ce:aa:97:f9:1c:f0:e3:de:dc:f4:46:76:56: 3e:67:5f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLl5AjDqeuc2o0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGI2YzNiMzMtNTczOC00YjM4LThjMjMtYTg2MDRlYzQwMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjso6oN4PGyIDv3uJyCvh69fsjX9UVD9jt+pN 0/wFmliARwsPvbcWA0NeswE3/e0Ihg8g/Rr0b6UadMoFg5THdvNwV1xH4pmbu76E V11wtJbzwiZWiO1eQQwR3V0nM9VDeg556MZbxFijX5trkre6prEnkyr3PpVsAhNE /xp9TrK6SA89AlCMxLEc8Zn13cHyv8xgIUdXc4mcwKouwWCJadB0Y2hsxHUZptu0 IYqgHUoqg1HJW85JeZXN/28DXel45t9oMDRhnIk0yabsOF8/IxZNVyOrU2ZQy1RB /79zW1Q/P9/74Yy06fNWfnd37nxk/qtDSWoogJPxWqoAQcG8uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUJKpelJruFFmE9oLsBDO5ZdZxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvYzIxYmI2YzUtOTU5Mi0z OWI0LThiNWYtNWFmOWE5MTMzNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt50/Fsoc/t233Tw9ejZzxbcvtmT7JCkXZ1tmopYxwA4ko7FkBinguT ey/Y4Gt++Wel5ZeIFW+JsDUn1dGZdA4V3NAZtstGFyynEsCZutxGtYeq4nxMBqTF mfBcH18v89Yrk559ROzBDO4eSrGzg3L2KgtKBm9x131gHahhkmOufmnMy53QCZOI r32ZHLfk3oYOSj5u62nBkRDnAUO7f69lfiqKwBfvMqrJfbD0Kru/MV4/cfvuzgc1 oJNy+vyB4N+RAlq+RC+yBLRk1vDgKkiF/SQERxS4NNaX5z0yon4mbER+Q8yzn2l4 zW0byviKzqqX+Rzw497c9EZ2Vj5nX8I= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:40 2025 by rpki-client