$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa File: 58d3ac33-0e55-33d0-824b-807ad470e8d1.roa (raw, json) Hash identifier: 3pl+cgT68UkjCRadx1lAsJ3RZo3stLhl+vKFOnKChp0= Subject key identifier: BF:63:E8:D1:02:D4:2F:50:C7:23:FC:F3:84:D3:9E:07:4C:00:48:22 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584F1467A7A0DB97C843C9B04A80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 22015 IP address blocks: 207.237.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a7:a0:db:97:c8:43:c9:b0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e57aca6f-f480-4af1-9f8d-4bc7d046f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:0d:d1:b4:ed:f9:00:c7:40:ec:df:ef:c4: 2c:c4:f1:3c:0e:69:14:e7:cd:76:fe:fa:e8:63:f9: 7c:f7:f8:56:cc:c1:ca:03:ec:94:65:ed:e3:59:c4: d9:c2:e3:64:ef:ed:80:cb:16:65:26:a5:47:e2:9b: d0:fa:e4:2e:7c:77:d7:6f:f4:4c:56:7d:50:2b:1d: 92:f2:cb:8a:06:09:70:6a:4c:3b:48:2b:c0:25:e1: ef:9a:33:0b:98:51:b2:69:5c:b2:91:25:ca:1d:ee: ce:d1:ed:a0:9d:55:23:1d:2f:14:1e:e3:77:76:0e: c7:ce:e0:43:ee:f5:e4:7f:5d:b4:14:8a:d2:fb:0a: 00:45:ba:0e:15:c3:54:f2:ee:6d:a3:2c:9e:6b:8c: 76:0c:e3:bc:88:4a:25:12:55:48:c9:57:65:9e:07: b8:f6:e7:c2:c2:c8:48:a0:bc:78:1f:41:f3:99:2a: 85:fa:74:87:48:0b:50:bb:6d:b9:6e:2c:47:3c:71: f2:23:b3:2e:69:28:02:32:8c:b1:33:c9:94:df:94: f0:a5:86:93:db:5b:7f:05:9e:9f:f9:58:c1:c6:df: bd:b7:09:c5:93:84:c1:e8:3e:fe:45:86:f1:c4:53: 28:bf:dc:d3:5f:e1:09:9a:29:55:01:0c:72:5d:f9: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:63:E8:D1:02:D4:2F:50:C7:23:FC:F3:84:D3:9E:07:4C:00:48:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.237.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:91:07:aa:78:7e:d9:cf:1c:a7:34:56:38:93:bf:e3:ff:d2: a8:15:ea:62:ef:8f:f7:0d:cc:ba:13:aa:3e:5e:6c:af:70:b4: 0b:ce:1f:6e:69:c9:c9:71:be:9c:2c:dd:d8:5b:2e:7d:4f:35: e3:d0:79:62:06:10:f1:59:b4:f5:6c:3f:61:42:30:c7:e1:aa: bc:3e:85:2e:33:d0:68:0d:cc:90:0d:aa:6f:fc:db:8a:4a:75: f9:fa:b1:95:ec:3e:72:5e:d8:25:bb:3f:e5:12:ad:d9:99:8c: 07:de:d6:94:eb:f8:ad:45:5b:f2:eb:9c:7b:6c:ad:8a:0b:5e: c0:08:52:6c:a8:52:52:c6:e6:41:29:00:b0:38:31:9b:97:06: 68:ef:ea:e5:e9:4c:60:dc:db:8c:a7:7e:6e:ae:bb:72:82:50: bb:dd:17:42:81:1a:12:43:99:80:bd:08:95:32:3f:ec:da:da: 6d:fb:3e:2c:f3:14:71:e7:82:7b:9a:6c:7e:3f:76:c6:c9:9f: 95:51:4c:f7:4c:58:4d:a9:bb:72:42:b1:d5:17:64:31:42:f6: 4c:6d:4e:89:4c:9c:ad:73:cd:26:8b:fd:ce:4f:5b:43:92:d7: 53:f6:a3:6c:d0:12:73:c4:c6:73:4a:47:a6:cc:b2:4a:b3:34: be:7f:40:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6eg25fIQ8mwSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTU3YWNhNmYtZjQ4MC00YWYxLTlmOGQtNGJjN2QwNDZmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gEN0bTt+QDHQOzf78QsxPE8DmkU5812/vro Y/l89/hWzMHKA+yUZe3jWcTZwuNk7+2AyxZlJqVH4pvQ+uQufHfXb/RMVn1QKx2S 8suKBglwakw7SCvAJeHvmjMLmFGyaVyykSXKHe7O0e2gnVUjHS8UHuN3dg7HzuBD 7vXkf120FIrS+woARboOFcNU8u5toyyea4x2DOO8iEolElVIyVdlnge49ufCwshI oLx4H0HzmSqF+nSHSAtQu225bixHPHHyI7MuaSgCMoyxM8mU35TwpYaT21t/BZ6f +VjBxt+9twnFk4TB6D7+RYbxxFMov9zTX+EJmilVAQxyXfleOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9j6NEC1C9QxyP884TTngdMAEgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNThkM2FjMzMtMGU1NS0z M2QwLTgyNGItODA3YWQ0NzBlOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6RB6p4ftnPHKc0VjiTv+P/0qgV6mLvj/cNzLoTqj5ebK9wtAvOH25p yclxvpws3dhbLn1PNePQeWIGEPFZtPVsP2FCMMfhqrw+hS4z0GgNzJANqm/824pK dfn6sZXsPnJe2CW7P+USrdmZjAfe1pTr+K1FW/LrnHtsrYoLXsAIUmyoUlLG5kEp ALA4MZuXBmjv6uXpTGDc24ynfm6uu3KCULvdF0KBGhJDmYC9CJUyP+za2m37Pizz FHHngnuabH4/dsbJn5VRTPdMWE2pu3JCsdUXZDFC9kxtTolMnK1zzSaL/c5PW0OS 11P2o2zQEnPExnNKR6bMskqzNL5/QME= -----END CERTIFICATE-----Generated at Fri Sep 11 02:52:16 2026 by rpki-client