$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/adb8bdb9-f7ff-3e6e-ba4b-78c73141dd4c.roa File: adb8bdb9-f7ff-3e6e-ba4b-78c73141dd4c.roa (raw, json) Hash identifier: yxIIqvVkNdVzE1CPtr+zmM6TmD8AuXNJPp5b5fUIOdY= Subject key identifier: 1B:8F:52:31:67:09:BF:8C:64:FC:9F:74:ED:BA:C0:52:49:63:EF:5C Certificate issuer: /CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Certificate serial: 010D0C9F4328584F4973995C279DEA985B680F00 Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/adb8bdb9-f7ff-3e6e-ba4b-78c73141dd4c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 199.181.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:99:5c:27:9d:ea:98:5b:68:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38fc219c-a07e-440a-9c3b-69440ba36512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:2e:87:d4:7b:48:90:7f:7d:47:dc:cc:9e: 4c:ea:e8:1a:ff:9d:7f:aa:dc:20:6d:c8:57:2e:e6: 6e:4d:b7:c5:e5:cf:12:86:14:28:e9:3e:c0:0e:00: 7e:5e:28:e5:bc:3b:73:ca:d2:87:c9:fb:c5:c2:86: ac:83:90:a3:e3:30:68:56:6a:47:28:22:b4:09:a9: 80:c7:af:12:bb:0a:be:b0:30:94:50:d2:1f:d9:00: cf:f7:4e:2a:28:37:9e:70:26:0c:65:3d:ea:6a:d9: 97:17:89:48:ce:19:64:42:fe:61:b7:c0:57:9a:d8: 32:bc:cb:ec:d4:56:5b:05:83:db:88:68:26:b7:b8: 7b:0d:15:41:fd:27:2c:a5:38:c4:12:51:6f:92:fe: 8b:bf:e0:76:ff:08:bd:32:18:f1:08:a9:7e:eb:fb: 1b:84:02:c6:70:d4:56:cf:36:dd:a9:c8:17:ef:d8: c6:d5:fa:79:c0:dd:a9:da:c6:0a:28:a4:e7:48:86: 05:21:5a:2a:a9:d8:c9:bf:d1:94:7e:39:26:01:10: a1:5b:8b:b6:21:0f:38:67:b6:f7:84:04:ff:23:18: 51:e2:b1:21:9c:76:b0:11:fe:16:e6:48:31:c1:c4: c2:09:15:cb:8d:9e:e4:68:e5:f6:ff:b7:1a:e5:cd: 7a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8F:52:31:67:09:BF:8C:64:FC:9F:74:ED:BA:C0:52:49:63:EF:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/adb8bdb9-f7ff-3e6e-ba4b-78c73141dd4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl X509v3 Authority Key Identifier: keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer sbgp-ipAddrBlock: critical IPv4: 199.181.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d8:20:2d:74:03:90:5d:7f:0f:8e:43:db:80:e9:29:c8:eb: 3e:1c:83:6c:28:c2:d9:c9:4d:f8:6c:d1:2a:55:30:8a:97:f1: 7e:e7:b0:4e:47:d2:81:32:3f:7b:c8:3a:28:64:96:0c:1d:f3: 76:d9:76:5b:34:9f:d8:c0:32:b6:60:7d:e5:88:63:3b:19:f6: 4e:a7:41:7a:8e:db:d5:42:be:dd:cc:96:28:07:28:68:cd:db: d4:3d:13:ba:5d:ce:95:60:e9:f2:cb:60:e1:cd:06:a4:df:d8: 3a:0d:71:df:53:f3:f6:ec:cb:65:87:99:d9:f4:86:fe:7d:aa: 27:bf:62:26:b4:a0:9f:5c:bf:5a:6c:44:5d:10:47:2d:fe:c7: 7f:18:99:34:b7:bb:bd:bd:e1:a0:8b:31:4e:d6:93:02:be:74: a5:4c:8b:66:db:94:69:d7:b9:f7:a1:6a:04:f8:92:be:fa:48: ef:6d:e0:4a:08:8e:e8:8b:f7:17:65:42:81:ba:20:95:e5:16: b7:8a:70:ae:ae:e6:3d:34:8a:a0:23:f5:71:08:53:3b:28:c1: dd:85:30:a4:0d:81:17:d1:0d:64:2c:44:57:8c:43:5e:04:b6: c8:57:07:92:5a:6f:28:cd:9e:ba:ca:76:0e:81:08:c1:f3:8f: 52:be:32:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5lcJ53qmFtoDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg1MjBmYzEtZTA3Yi00YjFiLWFkNTktNTc1NjE5OGM5 NzU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhmYzIxOWMtYTA3ZS00NDBhLTljM2ItNjk0NDBiYTM2NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBAuh9R7SJB/fUfczJ5M6uga/51/qtwgbchX LuZuTbfF5c8ShhQo6T7ADgB+XijlvDtzytKHyfvFwoasg5Cj4zBoVmpHKCK0CamA x68Suwq+sDCUUNIf2QDP904qKDeecCYMZT3qatmXF4lIzhlkQv5ht8BXmtgyvMvs 1FZbBYPbiGgmt7h7DRVB/ScspTjEElFvkv6Lv+B2/wi9MhjxCKl+6/sbhALGcNRW zzbdqcgX79jG1fp5wN2p2sYKKKTnSIYFIVoqqdjJv9GUfjkmARChW4u2IQ84Z7b3 hAT/IxhR4rEhnHawEf4W5kgxwcTCCRXLjZ7kaOX2/7ca5c16+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuPUjFnCb+MZPyfdO26wFJJY+9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ODUy MGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2MTk4Yzk3NTYvYWRiOGJkYjktZjdmZi0z ZTZlLWJhNGItNzhjNzMxNDFkZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTg1MjBmYzEtZTA3Yi00YjFiLWFk NTktNTc1NjE5OGM5NzU2LzU4NTIwZmMxLWUwN2ItNGIxYi1hZDU5LTU3NTYxOThj OTc1Ni5jcmwwHwYDVR0jBBgwFoAUi2haR5bTltH5oV/nOJXgKYPm1AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ODUyMGZjMS1lMDdiLTRiMWItYWQ1OS01NzU2 MTk4Yzk3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7UgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzYIC10A5Bdfw+OQ9uA6SnI6z4cg2wowtnJTfhs0SpVMIqX8X7nsE5H 0oEyP3vIOihklgwd83bZdls0n9jAMrZgfeWIYzsZ9k6nQXqO29VCvt3MligHKGjN 29Q9E7pdzpVg6fLLYOHNBqTf2DoNcd9T8/bsy2WHmdn0hv59qie/Yia0oJ9cv1ps RF0QRy3+x38YmTS3u7294aCLMU7WkwK+dKVMi2bblGnXufehagT4kr76SO9t4EoI juiL9xdlQoG6IJXlFreKcK6u5j00iqAj9XEIUzsowd2FMKQNgRfRDWQsRFeMQ14E tshXB5JabyjNnrrKdg6BCMHzj1K+MpA= -----END CERTIFICATE-----Generated at Sat Oct 24 21:51:46 2026 by rpki-client