$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa File: a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (raw, json) Hash identifier: vsKWD4cXJaXxOQrd0b3QX9Zx7piv3LgJ3R1iUHUdpHs= Subject key identifier: B1:88:99:97:A7:E8:49:69:20:70:A3:1D:B8:9D:62:E7:C9:1A:6B:19 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584ECD372658568C9162E85E3E80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40627 IP address blocks: 104.245.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:26:58:56:8c:91:62:e8:5e:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=5bc97099-fe29-4dc0-8916-fa5a9c03df3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:0c:29:bc:7f:e1:a5:83:11:e9:db:22:4c: a8:3b:95:cb:77:52:ae:79:5d:3a:4f:3e:f2:10:76: 3e:a0:86:5e:8e:59:7f:7c:e3:11:03:6b:a7:06:a2: 42:32:f6:7c:42:d4:bd:b1:71:1d:cf:43:5a:8e:af: 2e:c7:51:81:3b:42:c6:b3:70:d8:14:43:e5:35:3e: e6:35:77:df:76:0b:f0:82:3e:4c:47:f6:ed:6c:b5: c2:f8:de:dd:e1:3c:bb:cb:8d:11:4f:75:ef:c1:27: 03:fc:11:aa:4b:23:33:73:64:50:3a:93:c6:48:97: b2:c5:3b:48:b1:92:99:78:41:c1:55:e0:b8:c0:c0: be:8f:d2:1b:c7:9c:91:fa:6e:34:3e:fb:06:8b:c3: e3:c0:92:20:a7:f8:ef:db:4e:ba:a8:23:46:4a:67: 76:84:78:b9:4c:8a:aa:b0:f7:f7:47:e5:c2:13:85: 6b:09:73:18:a3:4f:29:99:39:6a:e6:0e:cb:10:45: 7f:dd:25:3b:ca:d1:02:07:49:3b:16:a5:5c:e1:2e: 47:d0:23:0b:d3:42:ae:e5:6d:fe:01:e9:2c:fd:63: 96:fc:6d:b0:62:0f:07:d8:da:17:72:85:fb:9e:de: 49:0b:67:bb:3d:3e:9d:76:90:70:ff:c4:32:b7:6c: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:88:99:97:A7:E8:49:69:20:70:A3:1D:B8:9D:62:E7:C9:1A:6B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 104.245.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:4c:e8:2a:14:c1:7f:f6:74:11:9a:4b:66:f0:c8:38:54:a7: ae:c3:cb:9f:3c:80:57:35:95:ac:86:ba:d6:fc:e5:e2:1c:fb: af:db:df:d3:41:7a:6e:86:dd:73:61:db:39:8d:2b:61:a0:9a: ed:4e:f1:1b:d3:c9:fc:e6:38:dd:e8:33:f8:54:b4:67:72:ad: 7f:a2:cb:88:37:56:64:21:28:65:7a:ec:d5:52:ce:47:be:d2: a4:e2:26:05:c0:37:a1:c7:b5:dd:4d:d1:26:66:2a:b3:6b:8c: 39:39:a2:fc:de:73:22:49:20:03:33:ef:6b:20:d8:72:6c:bb: 7b:3f:e8:e7:92:08:d9:ff:7c:ac:af:42:72:7f:db:1f:74:5f: 07:61:84:33:93:e0:e7:f3:b7:4d:c8:6e:c1:69:0c:24:3c:3f: 3c:5e:95:87:8a:3e:4f:42:7a:1c:56:58:53:e1:e9:5a:5d:ab: fb:20:ab:1e:c3:98:97:de:84:98:ca:61:1b:ca:45:13:d1:74: 12:56:af:bf:12:df:9b:ff:e4:88:9a:d1:0c:a7:0e:ef:e4:c7: 1c:21:25:e0:bc:84:bb:be:31:b1:66:b3:54:03:92:76:5d:a9: 2c:5f:69:4d:08:74:52:b9:3b:e3:3c:c7:59:28:e7:55:f0:5d: 8c:f9:0b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyZYVoyRYuhePoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NWJjOTcwOTktZmUyOS00ZGMwLTg5MTYtZmE1YTljMDNkZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaQMKbx/4aWDEenbIkyoO5XLd1KueV06Tz7y EHY+oIZejll/fOMRA2unBqJCMvZ8QtS9sXEdz0Najq8ux1GBO0LGs3DYFEPlNT7m NXffdgvwgj5MR/btbLXC+N7d4Ty7y40RT3XvwScD/BGqSyMzc2RQOpPGSJeyxTtI sZKZeEHBVeC4wMC+j9Ibx5yR+m40PvsGi8PjwJIgp/jv2066qCNGSmd2hHi5TIqq sPf3R+XCE4VrCXMYo08pmTlq5g7LEEV/3SU7ytECB0k7FqVc4S5H0CML00Ku5W3+ Aeks/WOW/G2wYg8H2NoXcoX7nt5JC2e7PT6ddpBw/8Qyt2we8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGImZen6ElpIHCjHbidYufJGmsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYTVlZmY3YjItZjc3Yi0z YTZmLTk1M2EtNDhjNmVjY2I1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRM6CoUwX/2dBGaS2bwyDhUp67Dy588gFc1layGutb85eIc+6/b39NB em6G3XNh2zmNK2Ggmu1O8RvTyfzmON3oM/hUtGdyrX+iy4g3VmQhKGV67NVSzke+ 0qTiJgXAN6HHtd1N0SZmKrNrjDk5ovzecyJJIAMz72sg2HJsu3s/6OeSCNn/fKyv QnJ/2x90XwdhhDOT4Ofzt03IbsFpDCQ8PzxelYeKPk9CehxWWFPh6Vpdq/sgqx7D mJfehJjKYRvKRRPRdBJWr78S35v/5Iia0QynDu/kxxwhJeC8hLu+MbFms1QDknZd qSxfaU0IdFK5O+M8x1ko51XwXYz5C7M= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:57 2026 by rpki-client