$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa File: 6f35d33f-3b25-3848-9287-a755ae18fa87.roa (raw, json) Hash identifier: 7Ej5R9sYgrb3BpsQnZz79/4NCxXgb2zDOojQjxYxtYQ= Subject key identifier: EF:33:DA:EE:1A:98:0D:29:77:53:6B:48:F4:90:CB:98:33:88:28:39 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584ECD372670B9DEBBC46BB1FC00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40627 IP address blocks: 199.255.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:26:70:b9:de:bb:c4:6b:b1:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=0cd05f12-b32e-42fe-8e79-612957dc47e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d8:ff:20:20:35:16:12:51:37:d1:18:b7:d6: ce:75:ca:25:61:38:9a:2d:3e:d1:7d:6b:bc:7e:02: e7:89:40:60:b9:86:71:50:aa:f0:e2:19:e2:73:56: 4c:c6:3b:9e:0a:cc:68:05:33:3c:20:cf:2f:bd:0c: fa:75:3c:bb:b9:06:13:38:0c:da:c1:21:8b:e8:ea: 81:0f:d4:6a:33:b6:05:6e:ea:bf:c9:93:bb:c0:b2: 20:52:85:0c:c4:b7:71:51:51:96:6f:df:cc:99:d0: 93:3a:df:ca:4d:6b:d8:98:cc:8b:5e:05:e6:5f:24: f6:40:b9:99:4d:a2:04:b2:39:0a:94:91:21:92:78: e1:0f:02:fe:f4:48:f5:83:ff:6d:44:91:c7:69:fc: 39:68:4e:68:e6:fe:45:71:22:34:b0:86:fd:a1:3c: 9c:d8:cc:48:6d:b8:3a:df:d9:55:0b:cc:db:38:b9: 58:84:5a:e4:3f:e4:86:41:e7:fa:72:16:ef:d2:8d: e3:50:ac:db:01:a4:47:69:9f:28:e2:42:ed:bc:e8: be:09:83:13:ea:2d:86:e8:98:9a:b9:92:5a:aa:03: af:04:80:18:fa:89:e7:7f:10:be:59:d0:7b:b8:a2: c7:a3:02:1c:17:fd:17:21:cb:73:43:e8:94:e7:50: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:33:DA:EE:1A:98:0D:29:77:53:6B:48:F4:90:CB:98:33:88:28:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2b:51:79:e4:95:cd:42:99:fe:b5:9c:8f:76:9c:53:c5:97: 5f:fc:c9:a7:28:fc:aa:2d:6a:f8:eb:4f:00:6d:c2:83:11:7e: 37:c6:74:66:74:59:39:6d:7c:23:8e:a3:ca:21:d5:14:85:27: a6:43:b4:d2:32:82:2e:80:5b:1e:c5:ee:2d:3c:a2:7c:0b:1d: d9:81:0e:d8:2a:2f:1f:03:6c:a1:2e:4e:26:e9:5a:af:b2:cd: 44:6b:82:8f:f9:4b:c2:66:a8:c7:a1:00:d5:8d:2b:7c:96:b9: 0e:bb:5a:f9:56:e4:6c:aa:a3:a0:3e:a9:d2:0f:4e:61:7b:bf: 45:ad:62:db:5f:d0:17:f8:66:1f:72:ee:12:c7:18:88:a3:70: 03:c3:28:44:98:a4:37:c4:ae:49:cc:29:9b:89:ee:a8:83:08: da:cb:c7:80:49:ff:6d:16:f8:24:94:13:6a:13:b1:10:23:fd: 86:20:d6:65:9e:4b:5d:a6:d4:c3:80:9c:05:1e:dc:ca:42:94: 1f:bd:5b:6e:3c:8b:82:6d:9e:11:3d:2e:ad:ff:b3:9a:ea:f2: 12:e8:ae:79:cf:4e:1a:32:95:30:68:ec:8b:7e:35:3d:6a:83: 0a:b2:db:e9:c6:9e:3f:46:12:76:b2:6f:db:d0:47:d1:00:29: e9:af:52:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyZwud67xGux/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MGNkMDVmMTItYjMyZS00MmZlLThlNzktNjEyOTU3ZGM0N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9j/ICA1FhJRN9EYt9bOdcolYTiaLT7RfWu8 fgLniUBguYZxUKrw4hnic1ZMxjueCsxoBTM8IM8vvQz6dTy7uQYTOAzawSGL6OqB D9RqM7YFbuq/yZO7wLIgUoUMxLdxUVGWb9/MmdCTOt/KTWvYmMyLXgXmXyT2QLmZ TaIEsjkKlJEhknjhDwL+9Ej1g/9tRJHHafw5aE5o5v5FcSI0sIb9oTyc2MxIbbg6 39lVC8zbOLlYhFrkP+SGQef6chbv0o3jUKzbAaRHaZ8o4kLtvOi+CYMT6i2G6Jia uZJaqgOvBIAY+onnfxC+WdB7uKLHowIcF/0XIctzQ+iU51B7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8z2u4amA0pd1NrSPSQy5gziCg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNmYzNWQzM2YtM2IyNS0z ODQ4LTkyODctYTc1NWFlMThmYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0rUXnklc1Cmf61nI92nFPFl1/8yaco/KotavjrTwBtwoMRfjfGdGZ0 WTltfCOOo8oh1RSFJ6ZDtNIygi6AWx7F7i08onwLHdmBDtgqLx8DbKEuTibpWq+y zURrgo/5S8JmqMehANWNK3yWuQ67WvlW5Gyqo6A+qdIPTmF7v0WtYttf0Bf4Zh9y 7hLHGIijcAPDKESYpDfErknMKZuJ7qiDCNrLx4BJ/20W+CSUE2oTsRAj/YYg1mWe S12m1MOAnAUe3MpClB+9W248i4JtnhE9Lq3/s5rq8hLornnPThoylTBo7It+NT1q gwqy2+nGnj9GEnayb9vQR9EAKemvUoY= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:57 2026 by rpki-client