$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa File: d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa (raw, json) Hash identifier: Tji6Jlu6fxiWCzGb3DOErsyaAyGL/HRrJvPbuS8YBzQ= Subject key identifier: B9:21:06:C3:43:29:51:1F:F5:AB:6C:5F:AD:6A:9D:F9:13:A7:8D:83 Certificate issuer: /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Certificate serial: 010D0C9F4328584F58CD4D71C110F7C8B06A8AE0 Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 14312 IP address blocks: 204.16.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:4d:71:c1:10:f7:c8:b0:6a:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=d4a4fd43-5ed0-440f-a5a8-f6ff39c9b2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:b4:a0:36:2d:bb:df:07:2b:be:71:93:8e: e9:71:88:c2:ba:06:73:19:dc:0b:55:31:a3:f1:43: ba:88:a9:5e:78:b1:dc:f4:8f:46:da:89:5b:39:92: f4:63:dd:8a:44:27:40:12:35:11:a1:6d:ac:cb:9f: ac:ab:44:c3:9a:24:d2:6f:c1:b5:df:64:7e:36:a0: 11:f8:8a:69:c4:9d:4f:a1:4f:dc:fa:f7:37:19:d1: f7:91:c5:f6:0c:cc:d3:20:52:a8:55:e7:11:17:af: f4:5f:5b:0b:9e:24:0c:3a:b1:f0:a3:a3:bf:26:dd: 74:03:c9:c4:10:b4:da:29:ce:c3:88:bf:10:b6:72: 73:ca:4e:4a:1e:71:78:8d:30:fc:86:80:3f:52:b5: 7c:d3:f8:97:19:15:16:c9:54:8e:0d:e2:58:01:6e: 3f:5d:60:ec:40:4f:c8:b7:50:58:15:29:e3:6d:3e: b7:4b:0c:e2:37:75:1f:86:45:0e:0f:fd:c0:1e:4a: eb:ae:8f:7e:c4:da:8c:76:e2:5d:20:f3:92:6e:8d: 86:fa:de:a4:95:22:03:b8:42:93:20:89:de:f0:f9: ad:b4:a3:5d:58:c4:84:3d:d7:ea:98:50:11:64:8b: 0b:b1:14:b7:a4:bd:68:f3:c1:56:21:f4:bd:2b:f3: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:21:06:C3:43:29:51:1F:F5:AB:6C:5F:AD:6A:9D:F9:13:A7:8D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/d7ac0885-c01a-3921-ae02-3af92a68a8e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl X509v3 Authority Key Identifier: keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer sbgp-ipAddrBlock: critical IPv4: 204.16.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:31:52:b8:e7:aa:39:d0:6f:5d:59:5f:6f:fb:20:86:0d:81: d1:b5:bc:73:ee:6e:bb:4f:5c:ff:e7:92:f0:45:44:6b:ce:27: a1:49:67:b3:57:64:5d:ab:a4:0d:88:ad:61:3f:fa:87:65:2a: 94:34:2b:e5:7b:be:ab:ef:d7:bd:dd:ff:8d:24:97:bc:0e:c1: f8:41:e9:87:eb:5a:2e:23:df:d1:57:b7:39:37:f5:af:74:ee: e5:35:2f:80:fb:f8:6e:d1:22:c7:07:5f:51:d3:9a:13:d9:ec: be:ab:6d:28:80:1c:8d:d7:b4:be:02:80:c1:ea:b2:8c:cc:97: e3:f0:dd:b5:80:f3:b0:da:39:f7:d3:a7:15:66:7f:87:61:10: 68:44:0a:a7:0f:cc:17:3e:05:94:11:d9:e7:a7:9b:97:e5:e3: 9c:96:d7:53:c0:14:58:86:f6:55:24:58:71:32:31:8a:e2:d6: e9:3a:b6:7c:ca:3a:cc:9d:86:8b:34:25:5f:a9:03:5f:50:3d: d2:81:e1:7a:2a:a9:d3:80:4c:aa:a6:24:a3:0d:cb:fc:7f:f4: 16:3e:4e:65:f8:e5:e7:4d:c1:75:2a:6d:25:e3:b6:17:dd:6d: a9:99:0d:a2:94:b1:e6:6b:5f:9e:2e:c7:8c:09:14:04:39:c8: 32:2e:84:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzU1xwRD3yLBqiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkYTQ0NWQtOGM2Yy00Mjk5LTllMmMtNDVjNzVlOGE2 NDI1MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZDRhNGZkNDMtNWVkMC00NDBmLWE1YTgtZjZmZjM5YzliMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5a0oDYtu98HK75xk47pcYjCugZzGdwLVTGj 8UO6iKleeLHc9I9G2olbOZL0Y92KRCdAEjURoW2sy5+sq0TDmiTSb8G132R+NqAR +IppxJ1PoU/c+vc3GdH3kcX2DMzTIFKoVecRF6/0X1sLniQMOrHwo6O/Jt10A8nE ELTaKc7DiL8QtnJzyk5KHnF4jTD8hoA/UrV80/iXGRUWyVSODeJYAW4/XWDsQE/I t1BYFSnjbT63SwziN3UfhkUOD/3AHkrrro9+xNqMduJdIPOSbo2G+t6klSIDuEKT IIne8PmttKNdWMSEPdfqmFARZIsLsRS3pL1o88FWIfS9K/N0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkhBsNDKVEf9atsX61qnfkTp42DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRh NDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4YTY0MjUvZDdhYzA4ODUtYzAxYS0z OTIxLWFlMDItM2FmOTJhNjhhOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNThkYTQ0NWQtOGM2Yy00Mjk5LTll MmMtNDVjNzVlOGE2NDI1LzU4ZGE0NDVkLThjNmMtNDI5OS05ZTJjLTQ1Yzc1ZThh NjQyNS5jcmwwHwYDVR0jBBgwFoAUnwfrfL7jlCXzBLm7QrB5MT5j1PowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3 NWU4YTY0MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkxUrjnqjnQb11ZX2/7IIYNgdG1vHPubrtPXP/nkvBFRGvOJ6FJZ7NX ZF2rpA2IrWE/+odlKpQ0K+V7vqvv173d/40kl7wOwfhB6YfrWi4j39FXtzk39a90 7uU1L4D7+G7RIscHX1HTmhPZ7L6rbSiAHI3XtL4CgMHqsozMl+Pw3bWA87DaOffT pxVmf4dhEGhECqcPzBc+BZQR2eenm5fl45yW11PAFFiG9lUkWHEyMYri1uk6tnzK Osydhos0JV+pA19QPdKB4XoqqdOATKqmJKMNy/x/9BY+TmX45edNwXUqbSXjthfd bamZDaKUseZrX54ux4wJFAQ5yDIuhAU= -----END CERTIFICATE-----Generated at Mon Oct 19 19:46:51 2026 by rpki-client