$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa File: c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json) Hash identifier: wknPZ3lHJpHP0M+sCRSvUw6tgSyZDsJjBKA4N8jLDaM= Subject key identifier: 1C:D8:3F:40:6A:78:CB:0B:EA:92:42:E6:49:81:53:08:2F:0E:FC:BC Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F4328584D300A61B093E6960191CDEB60 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 23393 IP address blocks: 104.37.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:61:b0:93:e6:96:01:91:cd:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5d7832ee-4a53-48a3-8834-9ecbba35a813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:b0:63:fb:ee:35:20:5e:f1:6b:1c:4a:38: d0:06:e6:0f:45:ed:10:58:0d:c1:9f:71:77:d3:23: 71:13:cd:0d:ec:f7:cb:8a:b1:92:74:ee:e5:d3:35: 9d:7f:d6:ab:62:f8:8d:67:70:ac:d9:14:76:2c:d9: e8:3b:15:89:e8:19:f7:60:ac:d5:47:4d:4e:95:21: 29:8c:12:2d:c5:b4:b9:86:14:8f:cb:c4:ca:75:46: ef:22:bd:fe:ba:b7:b8:2a:96:42:3b:f8:45:da:d7: a6:96:7c:39:d4:60:96:46:4a:8c:61:dc:a0:2e:da: 41:f4:ed:0f:2f:6e:cc:a6:9e:59:a2:6c:c3:11:0d: ea:47:73:c6:e2:d3:ad:57:c4:23:d6:e5:af:b5:d6: 9f:aa:62:c2:83:8d:eb:35:8c:13:ea:4d:66:8d:e7: 4e:cd:0b:1f:71:13:f1:54:5e:88:84:dc:f1:5f:95: f7:ca:e1:11:8a:8e:b0:3b:3f:bb:5d:28:f5:e9:5c: 8c:a7:f0:ff:50:a0:8d:6a:81:a7:73:a7:39:56:e4: 61:63:8b:5d:df:ab:e5:5e:a3:b6:a1:ba:84:1d:2c: 61:2d:ee:82:47:bd:37:6e:bf:55:4d:0e:a0:9a:ca: 4e:f0:52:d0:20:0e:fb:54:c5:bd:7e:41:bb:e3:a9: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D8:3F:40:6A:78:CB:0B:EA:92:42:E6:49:81:53:08:2F:0E:FC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 104.37.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:df:44:ed:c1:90:79:81:9a:7c:89:92:19:62:3a:23:e3:a1: a0:25:7d:d8:56:a1:68:32:33:d4:2f:c6:2f:4d:43:ae:85:06: 16:20:c8:f2:84:f0:29:58:0f:cd:2b:8b:eb:63:99:0b:1e:05: 36:1c:e5:68:00:b9:be:13:2b:c6:98:a9:b7:41:cb:ae:62:12: 31:87:cb:63:50:d3:0a:46:2b:6c:a7:a5:6f:f5:5c:4e:03:e2: d6:91:e3:ed:5b:5a:67:59:29:50:a8:8b:9b:b3:38:39:df:54: ba:6f:78:6b:a3:ba:d9:4b:a7:b0:ce:19:9e:ff:04:43:0c:c8: fe:78:8a:84:0f:7b:8b:5b:f0:b3:32:eb:ea:54:0f:73:18:15: 09:65:a5:bd:f2:1d:cc:3b:78:d0:4a:36:15:b0:b3:0a:30:cd: f0:b4:f3:1c:1e:46:67:77:69:60:ec:8e:f5:b6:27:a7:9a:75: ae:68:e1:10:77:26:97:b2:e8:cd:6a:8f:df:9c:85:7d:fb:16: 0b:bb:41:e2:83:bf:b7:97:dc:40:ba:d4:ae:e1:d7:29:e0:57: cb:92:10:cc:29:92:90:8a:cd:18:13:4a:79:04:0f:77:62:29: 7a:5b:3d:55:18:9e:06:21:ff:fa:f4:e4:8f:5b:5a:c3:87:f3: c5:5b:ce:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmGwk+aWAZHN62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWQ3ODMyZWUtNGE1My00OGEzLTg4MzQtOWVjYmJhMzVhODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub2wY/vuNSBe8WscSjjQBuYPRe0QWA3Bn3F3 0yNxE80N7PfLirGSdO7l0zWdf9arYviNZ3Cs2RR2LNnoOxWJ6Bn3YKzVR01OlSEp jBItxbS5hhSPy8TKdUbvIr3+ure4KpZCO/hF2temlnw51GCWRkqMYdygLtpB9O0P L27Mpp5ZomzDEQ3qR3PG4tOtV8Qj1uWvtdafqmLCg43rNYwT6k1mjedOzQsfcRPx VF6IhNzxX5X3yuERio6wOz+7XSj16VyMp/D/UKCNaoGnc6c5VuRhY4td36vlXqO2 obqEHSxhLe6CR703br9VTQ6gmspO8FLQIA77VMW9fkG746mzmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzYP0BqeMsL6pJC5kmBUwgvDvy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvYzIxYmI2YzUtOTU5Mi0z OWI0LThiNWYtNWFmOWE5MTMzNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjfRO3BkHmBmnyJkhliOiPjoaAlfdhWoWgyM9Qvxi9NQ66FBhYgyPKE 8ClYD80ri+tjmQseBTYc5WgAub4TK8aYqbdBy65iEjGHy2NQ0wpGK2ynpW/1XE4D 4taR4+1bWmdZKVCoi5uzODnfVLpveGujutlLp7DOGZ7/BEMMyP54ioQPe4tb8LMy 6+pUD3MYFQllpb3yHcw7eNBKNhWwswowzfC08xweRmd3aWDsjvW2J6eada5o4RB3 Jpey6M1qj9+chX37Fgu7QeKDv7eX3EC61K7h1yngV8uSEMwpkpCKzRgTSnkED3di KXpbPVUYngYh//r05I9bWsOH88VbzgA= -----END CERTIFICATE-----Generated at Tue Mar 17 00:47:45 2026 by rpki-client