$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json) Hash identifier: 6hwUe8XMYh7WJEKehk9gF0P5t1FsGA5X4H3MGu95b6E= Subject key identifier: DB:D3:7B:2B:75:CF:6B:38:20:F8:03:D0:F1:B7:33:C0:36:BB:A8:78 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584E2AD45BDD3CA9284D8A0F0A80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 40627 IP address blocks: 199.68.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5b:dd:3c:a9:28:4d:8a:0f:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=38667af0-6a2d-4f71-bf58-654c35c2193b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ff:94:62:a3:96:1e:45:ec:5e:c4:b4:b9:2a: 0d:10:40:cc:20:03:2d:8d:c5:a3:6b:b5:6b:6d:0f: a9:0d:af:14:88:86:19:49:00:5c:ed:e8:7b:19:c4: b7:dc:e7:b6:54:8b:2c:da:7b:5e:99:f2:7c:4f:31: a2:25:12:4a:7a:99:56:67:ea:b2:2e:30:1c:c8:c5: 46:e3:35:a1:6a:07:fc:c8:d6:88:e4:3f:ba:59:07: b4:64:c4:06:23:bd:1c:52:31:98:dd:a0:99:08:6e: 4f:52:a6:84:9f:a2:cf:d7:c7:db:99:9d:ef:78:59: 42:fa:fa:b4:21:00:6b:6c:fd:47:54:88:54:7e:e6: 11:9a:71:fc:72:28:f8:57:96:55:51:50:06:8b:5b: 3c:cd:a5:cc:34:16:81:e8:cc:d5:53:64:ec:b6:54: e2:6c:58:21:52:c7:59:55:56:8a:db:8f:79:63:bc: d7:61:42:94:1e:a2:dc:5d:8a:67:24:a2:6a:df:5e: d4:c5:e1:3d:af:ec:87:d8:34:7d:ba:08:ac:2a:10: b9:93:54:b6:56:a6:cd:17:2a:b7:15:e3:48:17:5a: f2:af:18:be:c5:1d:3d:40:69:13:4a:07:e7:38:f5: 0d:62:cd:ba:85:06:80:21:e8:4a:07:78:2c:44:57: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:7B:2B:75:CF:6B:38:20:F8:03:D0:F1:B7:33:C0:36:BB:A8:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.68.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:39:ee:af:9d:e7:3b:6f:f8:a7:d2:4a:88:f3:d6:2d:0d:e7: c5:4d:f9:53:a0:5e:e1:1b:82:3d:e9:ae:6b:87:a1:55:b7:46: 7a:9a:69:29:db:e2:31:f1:98:b8:6f:be:7d:f8:dd:96:bd:38: f9:10:41:2a:0a:13:92:9e:e4:a9:60:df:b5:35:7b:f6:63:06: 45:0a:28:2b:00:10:b0:55:7b:31:65:7a:61:a6:06:12:5a:f6: 09:31:da:97:c4:51:f1:9b:83:89:f5:45:38:c2:2a:d3:0c:2d: c5:72:a4:94:34:42:6c:6f:1a:4b:00:1b:3d:82:e5:8c:eb:d4: b7:58:c7:aa:62:c9:1c:95:26:d2:d2:5e:16:4c:1f:f6:58:42: cc:c1:b1:51:0a:44:44:75:c5:cf:18:9d:e3:b0:38:d8:4c:24: d2:8c:57:92:56:eb:90:ae:fe:a2:b3:cc:d0:1e:d7:e3:86:6d: 64:a4:b2:3d:81:85:71:bd:9f:8b:a0:2e:b8:2a:f5:7e:58:15: 9c:a5:30:7e:65:a4:49:a7:b3:68:5f:0b:86:60:51:32:df:2a: 3d:b1:ef:c8:ad:f3:a8:ce:89:91:64:b7:2d:c6:22:50:6e:04: 61:ca:db:29:25:1e:3b:34:5e:fd:c2:61:b6:4b:b0:fb:eb:26: a4:de:9a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FvdPKkoTYoPCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk Mzg2NjdhZjAtNmEyZC00ZjcxLWJmNTgtNjU0YzM1YzIxOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP+UYqOWHkXsXsS0uSoNEEDMIAMtjcWja7Vr bQ+pDa8UiIYZSQBc7eh7GcS33Oe2VIss2ntemfJ8TzGiJRJKeplWZ+qyLjAcyMVG 4zWhagf8yNaI5D+6WQe0ZMQGI70cUjGY3aCZCG5PUqaEn6LP18fbmZ3veFlC+vq0 IQBrbP1HVIhUfuYRmnH8cij4V5ZVUVAGi1s8zaXMNBaB6MzVU2TstlTibFghUsdZ VVaK2495Y7zXYUKUHqLcXYpnJKJq317UxeE9r+yH2DR9ugisKhC5k1S2VqbNFyq3 FeNIF1ryrxi+xR09QGkTSgfnOPUNYs26hQaAIehKB3gsRFetTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvTeyt1z2s4IPgD0PG3M8A2u6h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNWU4ZDNjNGUtNTYwMC0z MTRmLTkwYjUtNjlkN2NhNDRkNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA57q+d5ztv+KfSSojz1i0N58VN+VOgXuEbgj3prmuHoVW3RnqaaSnb 4jHxmLhvvn343Za9OPkQQSoKE5Ke5Klg37U1e/ZjBkUKKCsAELBVezFlemGmBhJa 9gkx2pfEUfGbg4n1RTjCKtMMLcVypJQ0QmxvGksAGz2C5Yzr1LdYx6piyRyVJtLS XhZMH/ZYQszBsVEKRER1xc8YneOwONhMJNKMV5JW65Cu/qKzzNAe1+OGbWSksj2B hXG9n4ugLrgq9X5YFZylMH5lpEmns2hfC4ZgUTLfKj2x78it86jOiZFkty3GIlBu BGHK2yklHjs0Xv3CYbZLsPvrJqTemhE= -----END CERTIFICATE-----Generated at Thu Jul 2 10:08:26 2026 by rpki-client