$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa File: d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa (raw, json) Hash identifier: iJ2fvD8dzm+4f4FA6wUssFvAVq4r7hCBxhlC9Y+M94Y= Subject key identifier: F0:E9:93:5D:2C:49:FB:4E:84:22:11:DD:02:6D:3D:BE:4C:EC:CC:20 Certificate issuer: /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Certificate serial: 010D0C9F4328584EB6E19DF42D0C2250579E7A80 Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 14312 IP address blocks: 204.16.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:9d:f4:2d:0c:22:50:57:9e:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=498cb149-513f-4ad4-acca-634092b3ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:18:69:c5:47:8a:21:9e:e1:76:c5:60:8b: b7:b7:53:b9:00:04:4b:29:09:ae:3f:06:ef:e9:ec: 5f:5f:29:22:9b:21:e9:c4:90:66:d8:61:ff:7d:c7: 50:86:0d:9c:e8:7d:82:bb:ae:e1:4f:3a:3d:e6:dd: ee:af:62:53:4f:c6:b5:2f:66:0b:e6:b7:97:78:ed: 7a:7d:42:07:a5:a3:32:55:e1:d6:b9:4a:0c:6b:05: 39:0f:69:13:f9:81:49:b1:4b:a9:3e:72:ec:ce:14: ab:b0:57:a5:d7:93:28:ed:88:25:60:8b:4a:cd:99: 50:f9:86:a6:ce:fc:0a:90:7d:af:9a:cf:a2:d8:fd: 2b:f2:ad:be:4b:df:9d:53:2c:4a:c1:36:84:5d:6d: 94:53:df:da:e8:6f:ff:fa:2f:8f:08:e6:8e:cc:01: 29:1d:14:1b:78:ba:a4:a8:25:8b:14:33:38:3d:ff: 7c:9f:df:38:54:cf:7a:b6:db:f9:c0:f9:8b:17:13: 68:45:aa:6e:1b:c8:5b:92:07:6e:76:85:88:eb:bb: 27:b3:11:81:4e:06:87:a1:9c:d4:e7:b5:90:58:35: dd:23:b6:10:c3:66:92:5b:1c:ab:df:be:9b:19:0f: 35:2d:43:96:77:83:79:8f:e9:94:b1:94:14:03:9a: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E9:93:5D:2C:49:FB:4E:84:22:11:DD:02:6D:3D:BE:4C:EC:CC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl X509v3 Authority Key Identifier: keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer sbgp-ipAddrBlock: critical IPv4: 204.16.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:47:ca:3d:a3:68:db:6b:9f:fd:44:8c:7c:bb:b3:dc:76:72: 90:4f:09:a2:80:82:dc:83:f9:2f:82:78:47:3b:0c:45:c7:a4: da:30:04:30:a0:38:f6:9b:e3:aa:e0:b3:52:85:f8:2e:cd:b9: 97:70:6a:04:b3:57:e3:f0:a7:59:8e:8d:6f:e9:b7:23:5c:04: ad:7c:76:20:85:a4:16:0a:1b:a1:80:61:35:33:45:a9:18:b6: b0:7c:c4:ab:54:d8:c9:77:b2:d9:18:ce:49:2a:01:9f:3d:e8: 17:93:b1:18:df:1e:c1:72:d9:95:ad:e5:a5:6a:d6:d7:b0:3f: 4a:8c:e6:c9:c2:08:89:40:4f:78:20:e6:76:ca:a9:fa:cc:d8: 94:3a:9f:31:fe:b6:9b:25:cc:52:11:4a:d4:ca:fe:ff:66:2f: be:c8:9a:ec:7c:2e:40:2c:4d:fb:1f:a5:bb:9a:3c:6c:eb:0a: f1:b8:b8:ab:60:68:c3:b9:34:55:cf:27:85:17:03:41:d3:42: 37:5c:02:de:d2:3d:5c:22:e5:da:fd:a1:f1:d4:18:00:15:ad: 3e:09:24:51:5c:1c:df:dd:91:71:ab:81:bd:8e:86:13:e9:c8: 1b:5a:37:6c:a4:73:ef:89:4b:22:06:79:e4:75:ae:57:20:4b: 5b:da:18:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624Z30LQwiUFeeeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkYTQ0NWQtOGM2Yy00Mjk5LTllMmMtNDVjNzVlOGE2 NDI1MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk NDk4Y2IxNDktNTEzZi00YWQ0LWFjY2EtNjM0MDkyYjNlYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdoYacVHiiGe4XbFYIu3t1O5AARLKQmuPwbv 6exfXykimyHpxJBm2GH/fcdQhg2c6H2Cu67hTzo95t3ur2JTT8a1L2YL5reXeO16 fUIHpaMyVeHWuUoMawU5D2kT+YFJsUupPnLszhSrsFel15Mo7YglYItKzZlQ+Yam zvwKkH2vms+i2P0r8q2+S9+dUyxKwTaEXW2UU9/a6G//+i+PCOaOzAEpHRQbeLqk qCWLFDM4Pf98n984VM96ttv5wPmLFxNoRapuG8hbkgdudoWI67snsxGBTgaHoZzU 57WQWDXdI7YQw2aSWxyr376bGQ81LUOWd4N5j+mUsZQUA5pQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDpk10sSftOhCIR3QJtPb5M7MwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRh NDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4YTY0MjUvZDdhYzA4ODUtYzAxYS0z OTIxLWFlMDItM2FmOTJhNjhhOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNThkYTQ0NWQtOGM2Yy00Mjk5LTll MmMtNDVjNzVlOGE2NDI1LzU4ZGE0NDVkLThjNmMtNDI5OS05ZTJjLTQ1Yzc1ZThh NjQyNS5jcmwwHwYDVR0jBBgwFoAUnwfrfL7jlCXzBLm7QrB5MT5j1PowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3 NWU4YTY0MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxHyj2jaNtrn/1EjHy7s9x2cpBPCaKAgtyD+S+CeEc7DEXHpNowBDCg OPab46rgs1KF+C7NuZdwagSzV+Pwp1mOjW/ptyNcBK18diCFpBYKG6GAYTUzRakY trB8xKtU2Ml3stkYzkkqAZ896BeTsRjfHsFy2ZWt5aVq1tewP0qM5snCCIlAT3gg 5nbKqfrM2JQ6nzH+tpslzFIRStTK/v9mL77Imux8LkAsTfsfpbuaPGzrCvG4uKtg aMO5NFXPJ4UXA0HTQjdcAt7SPVwi5dr9ofHUGAAVrT4JJFFcHN/dkXGrgb2OhhPp yBtaN2ykc++JSyIGeeR1rlcgS1vaGLY= -----END CERTIFICATE-----Generated at Mon Aug 31 10:51:06 2026 by rpki-client