$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa File: db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa (raw, json) Hash identifier: Rka34VTT5q3d4UuuPXmaGaEsI+EfVHYlVjU77ZDqH/E= Subject key identifier: 50:27:4E:7D:1D:62:B6:16:77:CA:F5:11:C8:42:60:B6:E1:04:AE:A6 Certificate issuer: /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9 Certificate serial: 010D0C9F4328584D3F64E98372AD419372823780 Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 19281 IP address blocks: 9.9.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e9:83:72:ad:41:93:72:82:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=2f54271a-f0b7-4705-8901-dd337e40122b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:5b:bf:e3:0c:c7:3d:07:fd:4e:6d:f1:1e: c5:92:6b:d1:d4:6c:3c:2d:26:77:f0:72:a8:69:a5: f6:3e:15:53:fb:03:b5:00:fe:12:0c:dc:7a:6a:41: bf:b3:06:39:ec:de:d7:21:3c:f9:da:45:e8:d2:dc: db:c6:07:16:dd:b1:e0:1b:fe:25:7d:28:e4:f4:b5: 18:26:99:c5:a5:73:8c:0d:a0:12:f3:77:92:1e:0e: e0:cb:6a:f3:93:aa:52:a9:72:54:d2:34:4a:0c:5c: 2f:b4:4c:27:a0:1c:63:20:b7:93:79:12:9d:31:3e: 5c:23:e6:86:93:f6:4d:67:d0:00:f1:d7:72:f2:97: 48:e0:17:4b:b4:80:8b:ee:20:63:63:36:1f:81:66: 8d:bc:41:45:72:4e:71:7a:12:43:e3:0d:98:28:a6: 9a:74:e2:4b:f0:0e:1e:30:5b:ef:e5:09:00:1d:fd: ac:6b:73:fb:9c:70:21:dc:c1:41:16:9d:08:9c:4b: b1:51:68:75:75:da:02:d8:8c:63:08:1e:4d:cd:a2: af:2d:d6:e6:df:fb:aa:e4:5e:8a:20:ac:6f:2d:1d: 2a:1d:9a:e2:28:be:50:07:ac:7c:af:98:32:f1:c9: 54:6f:a4:d0:b3:6d:4a:f7:b0:a6:df:75:0e:1c:9d: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:27:4E:7D:1D:62:B6:16:77:CA:F5:11:C8:42:60:B6:E1:04:AE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db2c72f7-3286-32e2-a5b4-b8c822069d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl X509v3 Authority Key Identifier: keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer sbgp-ipAddrBlock: critical IPv4: 9.9.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:24:ac:d1:8a:56:be:79:d0:37:f9:ea:a4:de:59:0a:4a:70: 1f:e8:76:47:6e:32:2d:d3:fb:f6:c6:22:c0:6c:aa:bd:d4:5d: 87:17:1f:16:be:fc:41:b2:ca:fe:9e:43:12:4b:c9:f0:31:5c: 6d:dd:61:38:49:a8:80:d9:84:83:b9:68:aa:e7:b1:13:e1:d8: 50:fd:57:11:4f:8d:fa:12:0c:9f:8b:99:11:c0:46:ab:5e:06: c7:ae:5e:cb:06:d3:83:b1:7b:39:45:2f:d1:e2:d3:fc:f3:8c: 9c:6c:fd:f6:5a:70:e7:50:12:9a:d7:6a:82:1b:2a:b5:c7:cd: ab:5d:1e:9c:81:d3:49:07:68:10:83:17:e9:88:7f:50:8e:79: c0:cf:8f:5d:24:c3:d9:22:60:76:a0:f4:20:75:03:d5:d1:26: 31:66:b6:76:cc:ae:95:6e:ee:61:e2:50:50:27:5f:93:be:a5: f9:9a:58:f7:f9:36:90:ad:cc:06:07:e5:b4:dd:52:1f:b8:e1: ff:ad:9b:ab:47:82:69:ae:dd:19:aa:7c:33:df:b6:9c:92:08: 2d:88:07:3d:26:da:ce:25:b5:95:5d:70:c8:a1:6c:3c:2c:e5: 73:df:d9:fd:a4:18:4a:93:0c:06:90:d9:24:f7:a0:69:75:13: 84:62:7f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOmDcq1Bk3KCN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmY2VmMzEtYmM2MS00MjE3LWE2NDgtMmQ1YmIwMGM5 M2E5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MmY1NDI3MWEtZjBiNy00NzA1LTg5MDEtZGQzMzdlNDAxMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSNbv+MMxz0H/U5t8R7FkmvR1Gw8LSZ38HKo aaX2PhVT+wO1AP4SDNx6akG/swY57N7XITz52kXo0tzbxgcW3bHgG/4lfSjk9LUY JpnFpXOMDaAS83eSHg7gy2rzk6pSqXJU0jRKDFwvtEwnoBxjILeTeRKdMT5cI+aG k/ZNZ9AA8ddy8pdI4BdLtICL7iBjYzYfgWaNvEFFck5xehJD4w2YKKaadOJL8A4e MFvv5QkAHf2sa3P7nHAh3MFBFp0InEuxUWh1ddoC2IxjCB5NzaKvLdbm3/uq5F6K IKxvLR0qHZriKL5QB6x8r5gy8clUb6TQs21K97Cm33UOHJ1U7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAnTn0dYrYWd8r1EchCYLbhBK6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZj ZWYzMS1iYzYxLTQyMTctYTY0OC0yZDViYjAwYzkzYTkvZGIyYzcyZjctMzI4Ni0z MmUyLWE1YjQtYjhjODIyMDY5ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNThmY2VmMzEtYmM2MS00MjE3LWE2 NDgtMmQ1YmIwMGM5M2E5LzU4ZmNlZjMxLWJjNjEtNDIxNy1hNjQ4LTJkNWJiMDBj OTNhOS5jcmwwHwYDVR0jBBgwFoAUVLP5RXnTuHPWUn9Y82AjBARQS2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZjZWYzMS1iYzYxLTQyMTctYTY0OC0yZDVi YjAwYzkzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACQkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQkrNGKVr550Df56qTeWQpKcB/odkduMi3T+/bGIsBsqr3UXYcXHxa+ /EGyyv6eQxJLyfAxXG3dYThJqIDZhIO5aKrnsRPh2FD9VxFPjfoSDJ+LmRHARqte BseuXssG04OxezlFL9Hi0/zzjJxs/fZacOdQEprXaoIbKrXHzatdHpyB00kHaBCD F+mIf1COecDPj10kw9kiYHag9CB1A9XRJjFmtnbMrpVu7mHiUFAnX5O+pfmaWPf5 NpCtzAYH5bTdUh+44f+tm6tHgmmu3RmqfDPftpySCC2IBz0m2s4ltZVdcMihbDws 5XPf2f2kGEqTDAaQ2ST3oGl1E4Rif3g= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:59 2026 by rpki-client