$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json) Hash identifier: mueeWTmYl8kLp3qEBJ4/A/NPspOSfN+voBJonSodIqA= Subject key identifier: 9C:4C:D0:EB:F7:46:C3:AE:CC:3D:8A:6C:8E:B4:C8:79:04:AD:EF:67 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584ECD37266439BB1D199F8194C0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40627 IP address blocks: 199.68.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:26:64:39:bb:1d:19:9f:81:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=0ea42ad4-cb08-44d5-818e-c41560fbd3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:8f:43:cc:53:92:1a:fa:4e:cb:50:7b:27: 48:35:fb:bc:e6:5c:0d:aa:fc:34:48:05:c3:b6:9f: ab:e9:31:7c:75:5d:85:9f:6d:3d:1c:6e:34:47:88: 45:40:b1:be:2f:ee:f1:9f:ea:6a:8f:37:f9:2c:af: 63:49:4a:67:4e:4d:5c:bb:ba:90:ba:a7:5a:d1:7a: e4:59:60:93:e8:99:cd:82:4b:9c:95:8a:76:08:ea: 2d:29:7e:89:88:82:ed:de:13:e6:39:f0:f0:22:cb: ba:36:34:14:85:d5:1f:0f:cb:c9:bd:6a:29:96:4e: 74:3c:80:8c:9a:79:e0:45:3b:ae:4a:cd:1d:3a:22: 24:55:07:9d:bf:d7:73:6d:32:a0:f8:f0:bc:bb:2c: b0:09:4e:3d:82:83:37:2a:88:93:2e:31:9c:de:95: f3:ca:73:be:0f:df:77:a6:ee:48:13:66:0f:a8:c2: 9b:e5:d9:d1:4d:1f:3c:b2:61:42:3d:6d:d4:1d:da: ba:11:97:c8:b5:98:21:e6:1f:d5:bb:ee:a6:03:e6: 83:8d:b9:0a:41:a5:58:dd:9c:c5:63:2f:aa:8d:2a: 16:6c:d8:5b:72:30:98:e8:67:1d:90:32:78:30:80: 49:d3:e8:79:10:6b:bb:de:61:4c:c0:cd:7f:42:2d: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:D0:EB:F7:46:C3:AE:CC:3D:8A:6C:8E:B4:C8:79:04:AD:EF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.68.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:87:90:f6:8f:3f:88:b1:03:a6:75:d6:fb:ad:d6:55:38:df: 76:b8:19:ec:ef:cb:06:37:6f:70:1a:46:1f:3c:39:43:2d:14: cf:19:d3:c3:84:a8:0f:a3:73:1b:56:22:72:a6:b8:7a:ad:15: 57:97:b2:d2:a8:de:50:b0:1d:7c:44:54:f6:3d:74:66:f2:c4: 6f:66:f9:31:f0:3e:17:4b:28:24:0b:11:98:95:ad:ce:8c:f4: 47:63:63:1f:f0:18:b9:87:7b:d2:52:5e:b3:92:de:d4:f4:96: ea:5b:67:8d:d1:b8:99:57:9b:63:40:4e:da:9b:2d:d5:c4:d8: 70:aa:15:dd:37:51:f9:cc:9a:88:28:4c:b9:1c:cc:8b:2d:19: e3:23:1a:46:06:6e:c2:cd:68:96:68:8d:b0:36:b1:4c:69:97: 71:49:2c:85:db:43:d0:73:b7:87:f1:8f:83:89:cf:af:78:c2: 1a:40:c3:8b:8e:e0:0a:8b:2a:96:7d:12:48:e7:85:ca:2f:ff: d1:19:78:e2:09:bc:bc:1b:22:bb:d1:db:af:59:9e:5e:37:c5: 97:07:d7:4d:0d:7f:8e:79:d4:36:22:37:ae:f9:25:ea:9d:c2: 72:42:2b:ce:44:a0:a9:26:5f:1a:a3:65:57:85:e7:03:27:09: 63:a1:a6:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyZkObsdGZ+BlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MGVhNDJhZDQtY2IwOC00NGQ1LTgxOGUtYzQxNTYwZmJkM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWPQ8xTkhr6TstQeydINfu85lwNqvw0SAXD tp+r6TF8dV2Fn209HG40R4hFQLG+L+7xn+pqjzf5LK9jSUpnTk1cu7qQuqda0Xrk WWCT6JnNgkuclYp2COotKX6JiILt3hPmOfDwIsu6NjQUhdUfD8vJvWoplk50PICM mnngRTuuSs0dOiIkVQedv9dzbTKg+PC8uyywCU49goM3KoiTLjGc3pXzynO+D993 pu5IE2YPqMKb5dnRTR88smFCPW3UHdq6EZfItZgh5h/Vu+6mA+aDjbkKQaVY3ZzF Yy+qjSoWbNhbcjCY6GcdkDJ4MIBJ0+h5EGu73mFMwM1/Qi3iFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxM0Ov3RsOuzD2KbI60yHkEre9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNWU4ZDNjNGUtNTYwMC0z MTRmLTkwYjUtNjlkN2NhNDRkNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICHkPaPP4ixA6Z11vut1lU433a4GezvywY3b3AaRh88OUMtFM8Z08OE qA+jcxtWInKmuHqtFVeXstKo3lCwHXxEVPY9dGbyxG9m+THwPhdLKCQLEZiVrc6M 9EdjYx/wGLmHe9JSXrOS3tT0lupbZ43RuJlXm2NATtqbLdXE2HCqFd03UfnMmogo TLkczIstGeMjGkYGbsLNaJZojbA2sUxpl3FJLIXbQ9Bzt4fxj4OJz694whpAw4uO 4AqLKpZ9Ekjnhcov/9EZeOIJvLwbIrvR269Znl43xZcH100Nf4551DYiN675Jeqd wnJCK85EoKkmXxqjZVeF5wMnCWOhpmY= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:35 2026 by rpki-client