$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa File: cfef727c-7d86-3e20-90da-9631286575b4.roa (raw, json) Hash identifier: wqk2iRBCdhH0ejoXWNl+RIAiSVK7wM/ese2rYf3CY9o= Subject key identifier: 06:EF:B1:F9:51:97:C8:E6:AC:FA:D5:F4:59:2D:F6:88:24:97:3B:D0 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584ECD37264C6084953FBCA4C2C0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40627 IP address blocks: 192.209.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:26:4c:60:84:95:3f:bc:a4:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=c0b66808-3d44-4fe6-9474-cbf636cafcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:84:dc:37:9c:95:cb:fb:10:5c:33:bf:b8: 31:e2:ba:47:23:91:5f:e2:13:2d:39:88:9a:fa:bf: fc:92:f1:9c:af:ef:50:72:5f:62:c3:5b:1f:b8:ad: 86:16:fe:f9:2a:61:e5:25:cb:fc:d2:b0:73:df:2d: 49:61:cf:2b:c7:e6:9f:3d:e5:27:5c:5c:a6:f8:5e: 9b:9a:87:b0:9f:01:1d:84:33:66:50:f4:03:bc:79: da:cb:6b:5f:7e:5c:41:a9:06:57:2a:4a:12:56:39: f8:a4:17:d4:94:71:c1:44:42:88:00:4f:c5:da:7d: c7:41:1f:a4:1d:26:72:df:1a:59:d3:a5:1d:f6:a5: 56:23:d9:ae:b3:14:a5:4c:e9:9d:21:f3:2f:58:7a: 88:11:05:32:8c:af:be:57:c2:5a:8b:e5:e8:e3:c3: 96:3f:6a:e5:bc:5f:a9:78:e8:d5:fa:4d:de:41:35: 79:e1:af:8e:7e:aa:9f:7d:11:6f:4d:67:33:9e:b8: cd:80:a8:6e:e5:6d:43:d4:0c:21:20:15:fc:e1:29: dc:32:cb:6c:3d:3c:0e:76:a7:ca:67:1a:e3:05:71: ab:2d:68:87:30:4c:31:f9:dd:bb:19:67:98:19:b5: 48:36:d7:a4:d7:ed:79:08:3e:5c:2c:fd:1a:04:96: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:B1:F9:51:97:C8:E6:AC:FA:D5:F4:59:2D:F6:88:24:97:3B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 192.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:74:84:a6:e7:4d:5b:ef:85:38:60:05:30:c8:2b:f7:58:40: b1:08:07:54:05:87:4d:02:e5:57:a0:5e:53:95:c7:d5:9a:92: 59:b9:51:57:4e:66:be:00:5b:17:6d:9f:67:12:d3:d4:02:f4: 3b:a3:6b:7b:51:b4:45:e3:8e:f4:e8:10:3e:43:21:70:8b:59: 19:13:c2:96:b6:0f:26:6f:45:da:93:9f:9a:bb:eb:3d:9d:c3: 5c:45:3f:20:cb:86:de:51:80:1b:08:c2:89:c7:b0:50:77:be: 3a:04:0c:df:b5:61:e7:c5:a6:5e:58:6d:88:2f:7b:fa:30:75: 89:16:fc:5e:1e:17:ae:11:2e:57:69:45:d6:15:43:2d:f5:46: 6a:a8:97:ec:37:71:21:04:85:8e:75:c4:e6:25:0e:23:df:15: 8b:ed:43:47:61:16:c5:29:c2:2c:23:fb:d3:73:3e:80:e6:b2: b4:da:f3:89:08:44:3d:9e:c1:38:6d:d6:9c:ff:58:f4:df:dc: 99:92:3d:26:72:a3:a3:eb:a7:ab:ce:32:be:e1:00:1c:64:b9: 6f:af:32:ed:e8:af:f6:60:25:e0:59:61:b8:72:2c:e6:f3:ee: c4:fb:25:d1:c5:4c:2c:b9:31:e6:28:f1:c2:ea:31:9a:e1:32: f8:f2:f4:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyZMYISVP7ykwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YzBiNjY4MDgtM2Q0NC00ZmU2LTk0NzQtY2JmNjM2Y2FmY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTOE3Declcv7EFwzv7gx4rpHI5Ff4hMtOYia +r/8kvGcr+9Qcl9iw1sfuK2GFv75KmHlJcv80rBz3y1JYc8rx+afPeUnXFym+F6b moewnwEdhDNmUPQDvHnay2tfflxBqQZXKkoSVjn4pBfUlHHBREKIAE/F2n3HQR+k HSZy3xpZ06Ud9qVWI9musxSlTOmdIfMvWHqIEQUyjK++V8Jai+Xo48OWP2rlvF+p eOjV+k3eQTV54a+OfqqffRFvTWcznrjNgKhu5W1D1AwhIBX84SncMstsPTwOdqfK ZxrjBXGrLWiHMEwx+d27GWeYGbVINtek1+15CD5cLP0aBJYS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbvsflRl8jmrPrV9Fkt9ogklzvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvY2ZlZjcyN2MtN2Q4Ni0z ZTIwLTkwZGEtOTYzMTI4NjU3NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh0hKbnTVvvhThgBTDIK/dYQLEIB1QFh00C5VegXlOVx9Waklm5UVdO Zr4AWxdtn2cS09QC9Duja3tRtEXjjvToED5DIXCLWRkTwpa2DyZvRdqTn5q76z2d w1xFPyDLht5RgBsIwonHsFB3vjoEDN+1YefFpl5YbYgve/owdYkW/F4eF64RLldp RdYVQy31Rmqol+w3cSEEhY51xOYlDiPfFYvtQ0dhFsUpwiwj+9NzPoDmsrTa84kI RD2ewTht1pz/WPTf3JmSPSZyo6Prp6vOMr7hABxkuW+vMu3or/ZgJeBZYbhyLObz 7sT7JdHFTCy5MeYo8cLqMZrhMvjy9OA= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:58 2026 by rpki-client