$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa File: d00129db-d5ad-33be-afac-2e76df39b2b2.roa (raw, json) Hash identifier: l1l+R6gdFzIurNGD3MZZrWVJ8KanQ1jRS7n15YLlTZ0= Subject key identifier: 56:EF:79:78:ED:5D:4B:2E:9D:0C:DF:A3:65:CC:E7:22:07:D4:47:61 Certificate issuer: /CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Certificate serial: 010D0C9F4328584D95F00112AB438CCFA7AA9180 Authority key identifier: 6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 6095 IP address blocks: 204.89.58.0/24 maxlen: 24 204.89.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:01:12:ab:43:8c:cf:a7:aa:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=979bb48f-2cd5-467f-934a-312465d2ce0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:32:88:ea:fa:16:67:e7:25:4b:03:9e:1b: 65:f9:2b:a2:c5:2b:57:c8:2e:1d:b0:68:73:df:39: 74:6d:10:14:f0:19:15:0e:e2:5c:7d:da:a3:ff:d0: ae:ca:cd:36:df:fa:9f:7b:3b:75:92:1c:30:07:15: 5c:0e:7a:24:1b:37:22:8c:03:d4:01:e3:fb:c7:a8: 7d:58:f9:58:e9:b4:af:2e:99:b2:07:34:12:ba:3c: 83:74:96:08:17:7e:87:2b:e9:a5:7a:71:f6:15:10: 17:f7:fa:41:36:06:0b:25:17:ab:ab:ca:b6:a0:ed: b4:35:28:02:c2:67:9e:e3:65:c9:c5:32:61:d5:de: e2:e7:10:20:49:1c:ca:4a:af:b0:70:8a:71:57:35: 5f:19:2b:54:b4:71:95:cc:1f:cd:fd:2a:44:45:c4: 82:e6:94:a5:ed:59:f9:65:4a:cf:4f:89:93:4d:97: 6c:2c:b7:91:f6:78:f1:70:4e:64:e8:b6:db:91:09: 26:60:d2:b5:cc:ba:f2:08:d9:80:9f:29:78:eb:e3: 9b:04:18:38:26:b0:ef:db:74:ac:78:97:4d:cc:c4: 92:0c:57:62:5f:5c:b2:09:c3:14:99:f9:4f:95:8f: b3:7e:27:fc:c8:9b:8a:e0:84:8e:09:d2:4b:ef:dd: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:79:78:ED:5D:4B:2E:9D:0C:DF:A3:65:CC:E7:22:07:D4:47:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/d00129db-d5ad-33be-afac-2e76df39b2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl X509v3 Authority Key Identifier: keyid:6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer sbgp-ipAddrBlock: critical IPv4: 204.89.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:44:ed:17:7d:51:fe:f0:bb:2e:0b:de:cd:1e:83:6f:c7:b7: ed:2e:a3:c1:9f:cc:df:62:89:e5:13:da:26:f1:83:1f:ae:25: 66:b8:07:9e:e8:ff:1d:89:26:48:b3:c0:aa:90:97:35:31:02: 5a:93:74:2b:ad:93:ce:53:47:37:a3:58:3c:63:aa:15:f5:b7: 04:08:4b:6f:8d:34:fd:47:f9:6d:35:fa:cb:26:c5:81:cf:7b: f2:61:1b:bc:d3:ed:0c:6d:eb:f7:f7:ef:f7:77:9c:0e:5b:25: bd:ab:c6:d5:58:79:61:de:9a:7f:4c:5e:59:4a:f3:b6:19:c7: 10:6f:4e:0c:88:9c:61:ed:0c:f1:d0:9c:05:0e:28:44:50:5f: c0:39:a3:a6:f3:65:aa:3e:6f:7f:52:d5:e2:e4:93:e3:4c:26: 51:d5:ca:2c:87:55:91:21:38:41:c8:44:5b:7c:22:f9:1e:05: 72:ad:41:22:43:d2:55:e5:21:44:09:42:fc:de:b6:ff:7d:79: 72:38:ce:b0:ce:09:97:a5:b8:df:c7:97:46:88:5c:eb:7a:e8: 69:e6:8c:68:d9:54:67:30:d9:0a:0b:9a:7a:42:56:61:bf:7d: 0d:84:16:5c:9e:55:03:41:0d:df:f8:ec:c4:9c:57:df:5b:40: bf:7b:93:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AESq0OMz6eqkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0Y2U1ZTYtMjlmNC00NTUyLWJmM2ItNTUxMGFhM2I1 MDUyMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OTc5YmI0OGYtMmNkNS00NjdmLTkzNGEtMzEyNDY1ZDJjZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtYyiOr6FmfnJUsDnhtl+SuixStXyC4dsGhz 3zl0bRAU8BkVDuJcfdqj/9Cuys023/qfezt1khwwBxVcDnokGzcijAPUAeP7x6h9 WPlY6bSvLpmyBzQSujyDdJYIF36HK+mlenH2FRAX9/pBNgYLJRerq8q2oO20NSgC wmee42XJxTJh1d7i5xAgSRzKSq+wcIpxVzVfGStUtHGVzB/N/SpERcSC5pSl7Vn5 ZUrPT4mTTZdsLLeR9njxcE5k6LbbkQkmYNK1zLryCNmAnyl46+ObBBg4JrDv23Ss eJdNzMSSDFdiX1yyCcMUmflPlY+zfif8yJuK4ISOCdJL792TXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbveXjtXUsunQzfo2XM5yIH1EdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRj ZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEwYWEzYjUwNTIvZDAwMTI5ZGItZDVhZC0z M2JlLWFmYWMtMmU3NmRmMzliMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE0Y2U1ZTYtMjlmNC00NTUyLWJm M2ItNTUxMGFhM2I1MDUyLzBhNGNlNWU2LTI5ZjQtNDU1Mi1iZjNiLTU1MTBhYTNi NTA1Mi5jcmwwHwYDVR0jBBgwFoAUb9kRablzH1xIfc4RiiHOsT/1+SUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRjZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEw YWEzYjUwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExE7Rd9Uf7wuy4L3s0eg2/Ht+0uo8GfzN9iieUT2ibxgx+uJWa4B57o /x2JJkizwKqQlzUxAlqTdCutk85TRzejWDxjqhX1twQIS2+NNP1H+W01+ssmxYHP e/JhG7zT7Qxt6/f37/d3nA5bJb2rxtVYeWHemn9MXllK87YZxxBvTgyInGHtDPHQ nAUOKERQX8A5o6bzZao+b39S1eLkk+NMJlHVyiyHVZEhOEHIRFt8IvkeBXKtQSJD 0lXlIUQJQvzetv99eXI4zrDOCZeluN/Hl0aIXOt66GnmjGjZVGcw2QoLmnpCVmG/ fQ2EFlyeVQNBDd/47MScV99bQL97k8k= -----END CERTIFICATE-----Generated at Fri May 8 16:24:37 2026 by rpki-client