$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa File: 6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (raw, json) Hash identifier: mAtwDFtL0OW+HyVmJLUqJb9FUVtoY3bVrhaEWslcapE= Subject key identifier: EE:17:09:50:59:53:58:23:E8:EC:B8:78:1C:AA:D6:84:B9:ED:7B:CA Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Certificate serial: 010D0C9F4328584D39CF818BAF8F7A753F3FBCC0 Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 33359 IP address blocks: 208.89.28.0/24 maxlen: 24 208.89.29.0/24 maxlen: 24 208.89.30.0/24 maxlen: 24 208.89.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:81:8b:af:8f:7a:75:3f:3f:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=36dd03b2-ef35-46e9-9123-2fff25a1d277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:c7:1d:4a:03:35:51:30:d9:c1:ce:17:4a: ed:f5:54:22:50:ff:22:43:a5:18:99:1a:87:7c:49: 39:b8:2a:58:14:b2:4e:c5:40:49:0f:17:36:63:18: f0:6c:26:35:b5:5d:d5:75:61:31:6f:ff:8d:a4:fd: 07:17:34:e0:bf:9e:bb:c8:e2:64:29:80:a8:ec:1c: 84:8d:25:a2:85:8d:f7:69:0d:87:79:63:40:3f:67: 40:43:3f:84:fa:14:ab:b2:84:b7:b1:ba:d8:e5:2d: 06:7a:1a:43:ed:50:d7:8f:90:c1:10:8c:3e:e1:1e: c3:34:01:98:29:2c:06:0b:31:e2:01:92:04:0b:98: 2f:c2:2e:25:03:67:5f:51:f0:8e:8a:fa:87:f6:a4: f9:3b:af:10:fb:26:7f:ed:2d:75:ce:b1:26:a1:55: 19:f7:88:b0:99:40:f4:01:79:80:30:3e:21:40:56: 47:87:60:c4:1f:fa:92:bf:75:43:af:8a:62:9b:55: a6:1c:86:f6:08:44:c4:0e:26:8d:12:d6:cb:42:2c: 5f:32:45:34:92:ce:e0:2f:a8:c6:5d:e9:09:f1:9a: 6f:a0:db:af:30:7a:45:db:f0:09:74:c2:1e:a9:55: 9a:ef:5e:5a:f2:25:1d:4b:e7:8d:73:8a:cb:70:c0: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:09:50:59:53:58:23:E8:EC:B8:78:1C:AA:D6:84:B9:ED:7B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl X509v3 Authority Key Identifier: keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer sbgp-ipAddrBlock: critical IPv4: 208.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:60:ca:08:d9:8f:70:5e:25:8f:ee:5a:98:ce:16:9b:b8:28: 17:35:ad:ae:06:e1:de:c8:f5:4c:92:e5:0a:f8:34:5f:cd:37: fc:24:5d:46:c9:2a:b0:4b:d0:9c:09:8f:73:ff:e2:6a:01:1f: a8:79:90:a7:9b:b8:23:6d:83:5d:ec:c9:60:88:fd:53:cd:a7: 49:e3:f7:b9:76:e3:aa:e8:ff:d7:8d:cc:ab:ea:55:55:f5:a5: 67:7f:8c:7b:8c:e3:0b:ea:54:cb:b0:ed:13:a7:28:6b:66:81: 35:a4:88:fb:e5:fe:15:fe:a7:ca:32:ff:9b:40:d1:82:08:57: 6e:3c:1b:4b:7b:f4:77:3e:d8:5e:57:64:b5:ab:07:02:70:51: b9:da:d0:08:1e:e9:17:d0:02:56:9c:c1:da:8b:8f:e1:42:25: 85:6e:75:79:19:34:26:84:ff:21:f1:82:94:e0:19:05:c2:2d: ec:72:c9:aa:65:5b:ea:c4:91:2b:7d:3c:a5:c2:23:6f:f6:6d: 9f:d3:b4:f0:67:9e:98:b5:e5:86:70:10:d5:4f:9c:21:91:6b: f4:99:7d:cc:a5:1d:ba:1e:6e:78:d3:22:03:28:01:1a:4a:de: 00:de:b0:8c:46:b9:7b:81:db:62:21:93:88:17:ae:c4:7f:45: 6d:b6:e5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4GLr496dT8/vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU4ZjkyZjgtNGQ4ZC00MWRhLWFmOWQtZDhmZGVjMmUz MDI1MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MzZkZDAzYjItZWYzNS00NmU5LTkxMjMtMmZmZjI1YTFkMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOPHHUoDNVEw2cHOF0rt9VQiUP8iQ6UYmRqH fEk5uCpYFLJOxUBJDxc2YxjwbCY1tV3VdWExb/+NpP0HFzTgv567yOJkKYCo7ByE jSWihY33aQ2HeWNAP2dAQz+E+hSrsoS3sbrY5S0GehpD7VDXj5DBEIw+4R7DNAGY KSwGCzHiAZIEC5gvwi4lA2dfUfCOivqH9qT5O68Q+yZ/7S11zrEmoVUZ94iwmUD0 AXmAMD4hQFZHh2DEH/qSv3VDr4pim1WmHIb2CETEDiaNEtbLQixfMkU0ks7gL6jG XekJ8ZpvoNuvMHpF2/AJdMIeqVWa715a8iUdS+eNc4rLcMDOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4XCVBZU1gj6Oy4eByq1oS57XvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThm OTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZkZWMyZTMwMjUvNjA4ODc2OWUtMzQyOS0z MmJkLTg4YjctM2FjOGQ1NGYxNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzU4ZjkyZjgtNGQ4ZC00MWRhLWFm OWQtZDhmZGVjMmUzMDI1L2M1OGY5MmY4LTRkOGQtNDFkYS1hZjlkLWQ4ZmRlYzJl MzAyNS5jcmwwHwYDVR0jBBgwFoAU9Sjz5U6mIGVXx3o+OKrQMZOGC5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThmOTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZk ZWMyZTMwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9gygjZj3BeJY/uWpjOFpu4KBc1ra4G4d7I9UyS5Qr4NF/NN/wkXUbJ KrBL0JwJj3P/4moBH6h5kKebuCNtg13syWCI/VPNp0nj97l246ro/9eNzKvqVVX1 pWd/jHuM4wvqVMuw7ROnKGtmgTWkiPvl/hX+p8oy/5tA0YIIV248G0t79Hc+2F5X ZLWrBwJwUbna0Age6RfQAlacwdqLj+FCJYVudXkZNCaE/yHxgpTgGQXCLexyyapl W+rEkSt9PKXCI2/2bZ/TtPBnnpi15YZwENVPnCGRa/SZfcylHboebnjTIgMoARpK 3gDesIxGuXuB22Ihk4gXrsR/RW225YE= -----END CERTIFICATE-----Generated at Fri Mar 27 03:25:17 2026 by rpki-client