$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa File: 3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa (raw, json) Hash identifier: ECf0SU2LyUICpFvfUdeJGgZE9emlhE9MPJAslhS+L5M= Subject key identifier: 92:E6:03:93:71:21:40:04:C5:0F:CE:74:11:50:6D:0F:0E:C5:F3:54 Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552 Certificate serial: 010D0C9F4328584EDC92127145A7AA44043E4480 Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 26806 IP address blocks: 198.169.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:12:71:45:a7:aa:44:04:3e:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=b6a37a0d-f068-4fd3-87e2-6b82faaac921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:57:dd:1f:1e:e1:b8:d3:26:79:33:9f:79: 66:8a:58:1b:4d:8b:a2:5a:bf:dd:30:f9:6a:30:e8: 53:9f:c2:92:89:a7:26:a4:67:07:9c:a5:9d:55:dd: 0a:55:64:52:bf:01:8f:af:07:b7:93:37:dd:b5:65: 3c:0e:e0:a3:e3:93:94:fa:9b:c7:ba:04:0e:6b:99: b8:12:bc:26:0f:0a:1b:ab:ce:07:a7:62:2d:b3:3b: 17:7d:06:6d:56:60:88:4f:75:fb:99:a8:e5:45:17: 78:57:6e:5b:23:2c:92:0f:55:f8:fe:1b:d7:c5:20: 52:98:c8:b8:16:74:b7:60:75:20:3a:e9:a5:57:92: 59:8a:46:fd:dc:64:59:3d:9d:b7:31:94:b5:68:10: 4c:c4:9d:9f:bc:1a:7d:b6:ef:96:78:a3:fa:4c:94: 3b:75:23:f9:9e:d7:ae:9c:71:71:df:aa:5f:2a:68: fc:e8:0e:b3:a5:50:f3:16:a7:21:69:fe:c8:6f:f9: b8:1d:73:72:12:1e:61:78:6f:47:aa:fd:f4:49:c3: 24:f1:90:bb:18:bb:55:5e:ad:49:56:e1:dc:db:6b: fa:0c:41:b4:eb:95:33:05:20:42:33:62:24:73:df: f1:72:b5:74:79:92:1e:d1:4e:d6:cc:33:1c:ef:ed: f9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:03:93:71:21:40:04:C5:0F:CE:74:11:50:6D:0F:0E:C5:F3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl X509v3 Authority Key Identifier: keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer sbgp-ipAddrBlock: critical IPv4: 198.169.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5b:a0:92:cc:29:e2:d1:25:77:85:16:b9:d6:a7:12:ae:6c: 55:43:1f:21:7b:fb:27:ba:16:81:b3:7c:4c:d2:2d:e2:83:77: 3e:5b:ef:52:74:7c:e7:ec:31:e4:29:20:a0:0c:94:9a:c6:39: 73:ef:20:19:e4:12:8c:ed:70:86:73:60:1a:7d:ba:03:16:bc: 79:cd:f4:6f:0e:59:aa:8e:a2:c2:6e:86:a7:0e:22:fa:87:e0: 44:90:0a:72:ad:0f:e4:24:6d:86:2c:0b:e8:d6:bb:f9:2e:4a: 70:ab:25:bf:5e:4a:f1:1c:a7:52:98:3b:46:f0:75:2d:7e:4e: a3:65:6e:63:0f:e0:d6:da:6b:1c:25:66:fc:e3:47:7a:5c:57: aa:9b:6f:e8:9e:41:d0:c4:63:c8:80:ec:2c:3e:7a:55:c1:37: 0a:29:fb:d2:f2:aa:b9:d3:f6:a6:60:38:99:31:28:e2:d4:fe: 0c:bc:0c:d1:1d:39:f6:51:be:db:39:06:f9:d3:9f:cf:03:fa: bd:b0:df:23:22:e8:3d:10:0d:cd:a1:1e:b0:4c:29:1c:8b:2e: 86:bd:74:3a:b8:e5:4e:17:e8:2e:5e:92:0a:47:89:3f:58:cf: cb:8f:35:28:79:af:12:a2:1c:81:6d:b9:45:a8:fc:38:95:77: e5:99:81:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckhJxRaeqRAQ+RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl NTUyMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk YjZhMzdhMGQtZjA2OC00ZmQzLTg3ZTItNmI4MmZhYWFjOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+BX3R8e4bjTJnkzn3lmilgbTYuiWr/dMPlq MOhTn8KSiacmpGcHnKWdVd0KVWRSvwGPrwe3kzfdtWU8DuCj45OU+pvHugQOa5m4 ErwmDwobq84Hp2ItszsXfQZtVmCIT3X7majlRRd4V25bIyySD1X4/hvXxSBSmMi4 FnS3YHUgOumlV5JZikb93GRZPZ23MZS1aBBMxJ2fvBp9tu+WeKP6TJQ7dSP5nteu nHFx36pfKmj86A6zpVDzFqchaf7Ib/m4HXNyEh5heG9Hqv30ScMk8ZC7GLtVXq1J VuHc22v6DEG065UzBSBCM2Ikc9/xcrV0eZIe0U7WzDMc7+35jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLmA5NxIUAExQ/OdBFQbQ8OxfNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0 NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvM2RiY2JhZWUtYTJhNi0z Y2EwLWI5ZjctZDI1ODQ2MzU2ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0 MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFboJLMKeLRJXeFFrnWpxKubFVDHyF7+ye6FoGzfEzSLeKDdz5b71J0 fOfsMeQpIKAMlJrGOXPvIBnkEoztcIZzYBp9ugMWvHnN9G8OWaqOosJuhqcOIvqH 4ESQCnKtD+QkbYYsC+jWu/kuSnCrJb9eSvEcp1KYO0bwdS1+TqNlbmMP4Nbaaxwl ZvzjR3pcV6qbb+ieQdDEY8iA7Cw+elXBNwop+9LyqrnT9qZgOJkxKOLU/gy8DNEd OfZRvts5BvnTn88D+r2w3yMi6D0QDc2hHrBMKRyLLoa9dDq45U4X6C5ekgpHiT9Y z8uPNSh5rxKiHIFtuUWo/DiVd+WZgV0= -----END CERTIFICATE-----Generated at Sat Sep 12 09:04:19 2026 by rpki-client