$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/336bb801-0fc7-3ba7-81f0-b44710655fc9.roa File: 336bb801-0fc7-3ba7-81f0-b44710655fc9.roa (raw, json) Hash identifier: F1rV3ne5HqqsRh77XZmPwFEF/ouoQmyElEqigRTYqWA= Subject key identifier: 47:8A:15:1E:5E:12:AE:9E:49:E1:F3:8C:09:53:4B:52:0A:3A:A8:A9 Certificate issuer: /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Certificate serial: 010D0C9F4328584D33F247B1C68597EE210EF0C0 Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/336bb801-0fc7-3ba7-81f0-b44710655fc9.roa Signing time: Tue 17 Mar 2026 22:35:58 +0000 ROA not before: Tue 17 Mar 2026 22:35:58 +0000 ROA not after: Mon 15 Jun 2026 22:35:58 +0000 asID: 14312 IP address blocks: 204.16.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:f2:47:b1:c6:85:97:ee:21:0e:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Validity Not Before: Mar 17 22:35:58 2026 GMT Not After : Jun 15 22:35:58 2026 GMT Subject: CN=bc3db17d-4fe7-4f0f-a86a-25acb43a726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:4a:a3:d6:ed:eb:3b:f3:df:05:53:46:7f: cc:38:ef:5f:72:00:64:29:a2:7d:b2:6c:9f:c3:eb: 8e:8e:8f:a5:3f:e2:a2:b6:ac:82:07:32:43:09:20: c3:cc:21:8e:34:ea:75:ad:bb:df:e7:08:d9:14:05: ad:a3:a2:38:78:96:f9:2a:09:2c:a8:32:53:87:87: 98:ed:2b:f6:ae:3c:f5:d0:3a:48:08:7b:80:89:a6: e2:f7:c6:22:4d:58:88:dd:96:82:31:6b:a6:55:2a: dc:e1:1c:ce:62:d9:cf:6a:c5:45:d0:5f:b7:e8:6c: a6:d3:1e:18:e5:9e:94:1b:48:b1:f9:22:e0:10:32: 36:ee:f6:28:ab:f2:9e:8f:85:29:6b:77:0e:51:dd: 9c:a2:01:3a:00:e1:5a:ef:a6:cc:76:d0:1e:4b:9d: 21:10:5a:2f:c5:69:dd:0d:d6:c7:20:ea:99:a3:f8: 32:37:01:88:1b:78:f3:b6:c5:b1:78:03:48:03:df: ce:e2:c6:8c:55:9e:d6:ad:7f:e9:e5:01:1c:1a:d9: 1d:f3:c4:4a:11:21:0c:f8:43:c7:16:66:2e:42:61: 4e:e4:e2:11:e6:de:71:08:fc:54:64:85:52:1e:ae: 4d:26:98:c2:1b:18:4b:fd:8e:90:40:66:71:c4:3d: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:15:1E:5E:12:AE:9E:49:E1:F3:8C:09:53:4B:52:0A:3A:A8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/336bb801-0fc7-3ba7-81f0-b44710655fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl X509v3 Authority Key Identifier: keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer sbgp-ipAddrBlock: critical IPv4: 204.16.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:36:57:ae:95:1e:f5:ea:21:0c:ea:45:41:8a:75:95:8f:ba: 37:9c:cc:e8:bf:1f:66:d3:e5:36:d9:6d:14:f7:b8:92:3c:41: 7f:da:d6:1d:d3:0f:98:f8:e1:f6:10:2d:e2:51:22:8d:e5:15: eb:d8:5d:7d:a8:fb:de:c0:f3:ae:c2:9f:cf:b0:46:3a:12:ba: 78:c1:79:bd:19:08:97:ef:5c:62:03:8a:8c:e4:43:37:3e:09: d5:7a:69:7a:b3:a1:3c:07:67:ad:c0:d4:6e:ee:15:65:f6:4f: 97:03:3f:70:bd:1d:93:18:bf:bd:34:cb:60:ec:1c:fc:f1:69: fb:42:09:b9:7d:63:24:14:11:ac:3d:d7:f1:6d:c3:92:e7:1f: a9:1b:35:7e:d4:ea:b4:2b:ba:5f:f3:46:be:d8:89:43:68:d6: e3:e3:b9:8a:cf:64:34:63:ce:12:03:14:fd:50:7d:6f:3a:9e: fb:84:51:59:39:f0:98:85:6d:f3:65:33:0f:27:1f:7b:6b:60: 47:ab:17:f3:c1:eb:b4:57:9a:41:79:e7:82:69:df:46:35:61: a0:21:1e:21:33:76:32:86:e0:e0:44:3b:2d:b9:e2:2f:93:0e: aa:c5:f1:56:30:af:df:a0:df:64:2c:27:66:80:dd:39:40:0d: 03:51:52:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0z8kexxoWX7iEO8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkYTQ0NWQtOGM2Yy00Mjk5LTllMmMtNDVjNzVlOGE2 NDI1MB4XDTI2MDMxNzIyMzU1OFoXDTI2MDYxNTIyMzU1OFowLzEtMCsGA1UEAxMk YmMzZGIxN2QtNGZlNy00ZjBmLWE4NmEtMjVhY2I0M2E3MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoFKo9bt6zvz3wVTRn/MOO9fcgBkKaJ9smyf w+uOjo+lP+KitqyCBzJDCSDDzCGONOp1rbvf5wjZFAWto6I4eJb5KgksqDJTh4eY 7Sv2rjz10DpICHuAiabi98YiTViI3ZaCMWumVSrc4RzOYtnPasVF0F+36Gym0x4Y 5Z6UG0ix+SLgEDI27vYoq/Kej4Upa3cOUd2cogE6AOFa76bMdtAeS50hEFovxWnd DdbHIOqZo/gyNwGIG3jztsWxeANIA9/O4saMVZ7WrX/p5QEcGtkd88RKESEM+EPH FmYuQmFO5OIR5t5xCPxUZIVSHq5NJpjCGxhL/Y6QQGZxxD0PzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeKFR5eEq6eSeHzjAlTS1IKOqipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRh NDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4YTY0MjUvMzM2YmI4MDEtMGZjNy0z YmE3LTgxZjAtYjQ0NzEwNjU1ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNThkYTQ0NWQtOGM2Yy00Mjk5LTll MmMtNDVjNzVlOGE2NDI1LzU4ZGE0NDVkLThjNmMtNDI5OS05ZTJjLTQ1Yzc1ZThh NjQyNS5jcmwwHwYDVR0jBBgwFoAUnwfrfL7jlCXzBLm7QrB5MT5j1PowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3 NWU4YTY0MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ2V66VHvXqIQzqRUGKdZWPujeczOi/H2bT5TbZbRT3uJI8QX/a1h3T D5j44fYQLeJRIo3lFevYXX2o+97A867Cn8+wRjoSunjBeb0ZCJfvXGIDiozkQzc+ CdV6aXqzoTwHZ63A1G7uFWX2T5cDP3C9HZMYv700y2DsHPzxaftCCbl9YyQUEaw9 1/Ftw5LnH6kbNX7U6rQrul/zRr7YiUNo1uPjuYrPZDRjzhIDFP1QfW86nvuEUVk5 8JiFbfNlMw8nH3trYEerF/PB67RXmkF554Jp30Y1YaAhHiEzdjKG4OBEOy254i+T DqrF8VYwr9+g32QsJ2aA3TlADQNRUls= -----END CERTIFICATE-----Generated at Thu Mar 26 15:12:42 2026 by rpki-client