$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/336bb801-0fc7-3ba7-81f0-b44710655fc9.roa File: 336bb801-0fc7-3ba7-81f0-b44710655fc9.roa (raw, json) Hash identifier: 2uCxobSVgMcDbKSUKj+9b6o2aFzYNA0PbWlKrU+ayCY= Subject key identifier: 14:EA:08:DD:F5:3F:CC:F8:98:EC:4D:0F:62:53:1F:EB:51:B3:2C:27 Certificate issuer: /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Certificate serial: 010D0C9F4328584F58CD4DDC9100336B452B1500 Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/336bb801-0fc7-3ba7-81f0-b44710655fc9.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 14312 IP address blocks: 204.16.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:4d:dc:91:00:33:6b:45:2b:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=c709dc38-9513-4565-bf30-248a47aa0ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c2:cb:60:8e:6c:00:39:27:35:36:8f:c9:8e: c9:5c:c6:71:32:ed:7b:04:f0:71:4a:9d:74:78:01: f3:b4:37:20:25:36:55:8b:a1:4b:41:8b:2f:e6:af: f0:bd:6b:cb:ae:8f:95:27:ef:4b:ad:7c:08:0e:19: 15:14:4d:62:1d:63:eb:5b:2d:3a:85:27:e6:f3:34: 0a:9b:74:66:3b:13:53:cf:af:62:a1:82:fa:7c:4b: 95:c8:40:a5:e1:c0:9b:17:0b:83:28:40:bb:ea:67: a2:8b:60:4d:f8:73:cf:04:ae:67:f5:56:92:c9:45: 78:1f:84:5b:46:7d:64:f3:7e:dd:d2:c2:5d:d9:12: 0d:25:67:28:b1:ab:23:70:f5:3a:f2:42:d7:9f:50: cf:d4:d8:e7:a8:c0:51:48:21:3d:05:dd:53:7f:bd: a9:b1:c7:69:8c:fa:4c:e3:ee:c7:40:3a:b8:8e:d2: f3:4f:a8:1d:17:7c:d0:64:dd:3f:eb:5e:df:9b:ce: 94:cd:3f:b5:c8:72:36:10:6f:83:38:c0:a0:5b:3e: f2:e0:6d:a7:a3:75:28:eb:cc:c8:60:37:6d:88:3d: 67:03:93:e0:26:43:6d:63:ba:cb:1f:17:74:60:41: fe:06:df:b7:63:cc:01:57:e5:00:3c:9e:8a:a0:19: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:08:DD:F5:3F:CC:F8:98:EC:4D:0F:62:53:1F:EB:51:B3:2C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/336bb801-0fc7-3ba7-81f0-b44710655fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl X509v3 Authority Key Identifier: keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer sbgp-ipAddrBlock: critical IPv4: 204.16.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:4d:f7:9b:08:4c:83:fd:a2:31:44:82:f2:46:09:36:fe:f3: b3:9f:f8:69:90:f0:2d:42:41:bb:05:d5:9f:da:d0:8e:14:c2: 04:bd:bd:54:54:68:9c:0a:8a:8c:a9:79:68:04:f7:64:98:56: 56:7f:5e:fa:17:6d:06:d5:f2:21:41:fd:8b:11:75:4d:65:c0: 32:70:6d:9f:e4:91:1e:eb:8d:3b:2f:ce:9f:df:39:f0:41:a0: be:ca:ed:03:04:77:38:20:0f:f7:51:1d:b0:81:b5:11:b5:26: 98:28:4e:94:80:76:0a:4c:00:65:23:e2:a2:c7:fa:cb:09:f3: e8:f7:2f:85:34:83:72:4b:15:0a:7f:6b:c8:a4:2e:68:bc:d5: b6:9e:c8:28:43:48:66:d4:27:16:dd:48:04:ac:9e:9b:40:84: ae:e0:95:5f:23:c3:67:eb:72:d3:97:5d:ae:76:99:14:35:f7: 21:8c:e4:98:67:ac:54:1c:c8:38:ef:22:22:60:67:ce:5a:1c: 06:f2:7b:14:12:13:83:b4:49:94:9e:e7:55:6a:49:40:07:76: f1:4d:63:d1:75:9a:63:cd:b8:5e:88:09:76:80:71:d2:f2:67: 55:a0:b9:68:e7:7f:ff:a2:af:21:f6:c0:ba:8d:48:18:0e:a2: d5:e4:8a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzU3ckQAza0UrFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkYTQ0NWQtOGM2Yy00Mjk5LTllMmMtNDVjNzVlOGE2 NDI1MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk YzcwOWRjMzgtOTUxMy00NTY1LWJmMzAtMjQ4YTQ3YWEwYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsLLYI5sADknNTaPyY7JXMZxMu17BPBxSp10 eAHztDcgJTZVi6FLQYsv5q/wvWvLro+VJ+9LrXwIDhkVFE1iHWPrWy06hSfm8zQK m3RmOxNTz69ioYL6fEuVyECl4cCbFwuDKEC76meii2BN+HPPBK5n9VaSyUV4H4Rb Rn1k837d0sJd2RINJWcosasjcPU68kLXn1DP1NjnqMBRSCE9Bd1Tf72pscdpjPpM 4+7HQDq4jtLzT6gdF3zQZN0/617fm86UzT+1yHI2EG+DOMCgWz7y4G2no3Uo68zI YDdtiD1nA5PgJkNtY7rLHxd0YEH+Bt+3Y8wBV+UAPJ6KoBkNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTqCN31P8z4mOxND2JTH+tRsywnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRh NDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4YTY0MjUvMzM2YmI4MDEtMGZjNy0z YmE3LTgxZjAtYjQ0NzEwNjU1ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNThkYTQ0NWQtOGM2Yy00Mjk5LTll MmMtNDVjNzVlOGE2NDI1LzU4ZGE0NDVkLThjNmMtNDI5OS05ZTJjLTQ1Yzc1ZThh NjQyNS5jcmwwHwYDVR0jBBgwFoAUnwfrfL7jlCXzBLm7QrB5MT5j1PowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3 NWU4YTY0MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1N95sITIP9ojFEgvJGCTb+87Of+GmQ8C1CQbsF1Z/a0I4UwgS9vVRU aJwKioypeWgE92SYVlZ/XvoXbQbV8iFB/YsRdU1lwDJwbZ/kkR7rjTsvzp/fOfBB oL7K7QMEdzggD/dRHbCBtRG1JpgoTpSAdgpMAGUj4qLH+ssJ8+j3L4U0g3JLFQp/ a8ikLmi81baeyChDSGbUJxbdSASsnptAhK7glV8jw2frctOXXa52mRQ19yGM5Jhn rFQcyDjvIiJgZ85aHAbyexQSE4O0SZSe51VqSUAHdvFNY9F1mmPNuF6ICXaAcdLy Z1WguWjnf/+iryH2wLqNSBgOotXkilc= -----END CERTIFICATE-----Generated at Mon Oct 19 19:59:15 2026 by rpki-client