$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa File: ce5331b6-f6d2-391c-aba6-2d079e20150c.roa (raw, json) Hash identifier: Kd98wVajAeHi0Q2xw+Lq4qd7SqxWbFHWRlg/0dQvTvE= Subject key identifier: BF:39:6B:F4:28:FA:42:21:55:8C:11:2A:20:8F:02:D7:8C:2C:8E:19 Certificate issuer: /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Certificate serial: 010D0C9F4328584D269EABCB3B6C5B7CDCA51BC0 Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa Signing time: Fri 13 Mar 2026 04:02:00 +0000 ROA not before: Fri 13 Mar 2026 04:02:00 +0000 ROA not after: Thu 11 Jun 2026 04:02:00 +0000 asID: 14312 IP address blocks: 204.16.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:9e:ab:cb:3b:6c:5b:7c:dc:a5:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425 Validity Not Before: Mar 13 04:02:00 2026 GMT Not After : Jun 11 04:02:00 2026 GMT Subject: CN=750d3eb8-f6ac-4914-9b21-3bf2a4cf5eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:b0:6c:8f:3f:4a:13:ab:22:95:39:ef:66: 09:de:4e:40:7f:82:bd:b5:f3:cd:dd:f6:48:5d:30: cd:00:7b:8b:88:95:9a:25:13:9a:39:28:6e:85:40: 2a:36:26:ee:98:86:b7:42:81:5e:9f:e8:87:48:31: 84:79:f7:cd:b4:87:3d:30:c5:77:3c:65:04:a3:79: b7:5e:41:6a:bc:78:9d:a2:6a:d6:4d:d2:bc:36:f5: 1e:f5:b7:cb:62:87:79:0e:77:30:18:df:c9:15:7b: 51:87:5e:28:ef:36:37:e5:89:3e:bf:3e:36:bf:7c: ab:46:71:77:10:0f:14:9a:74:7d:51:b9:18:23:9e: c6:cc:23:f7:67:e8:84:db:72:c3:0e:1a:93:d3:e3: da:00:42:1e:28:31:a6:df:87:04:a5:bc:78:dd:e4: 9d:0e:b6:f4:af:be:20:fa:a4:20:a9:3c:82:f2:0f: 10:2c:86:de:76:48:f5:e4:6b:a3:08:a3:39:be:66: c3:05:66:80:50:5e:54:52:15:8e:48:e4:d9:d5:ea: a7:06:ad:3f:02:29:6b:3a:21:cd:d2:fa:9c:af:23: 95:9f:fa:94:2c:06:e2:a4:80:03:11:2e:db:f7:0c: 03:7d:a5:de:04:4a:e1:c5:60:f8:5c:bf:44:7c:f7: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:39:6B:F4:28:FA:42:21:55:8C:11:2A:20:8F:02:D7:8C:2C:8E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/ce5331b6-f6d2-391c-aba6-2d079e20150c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl X509v3 Authority Key Identifier: keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer sbgp-ipAddrBlock: critical IPv4: 204.16.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6f:1a:d0:29:52:22:24:89:bc:1b:e3:38:09:38:1b:85:8c: 0a:69:93:f8:89:a0:4d:1f:17:72:63:69:85:71:40:51:8e:f3: 09:f5:97:10:4e:8b:ba:ee:32:ad:36:4b:d3:4c:2e:23:3d:b6: 9a:01:6c:7b:28:1f:33:ab:6d:76:94:bb:40:e8:40:76:83:18: 70:d5:b5:f1:13:17:1e:ab:53:8c:51:3e:6c:d0:d2:1e:61:7b: 37:ef:22:22:9d:e0:df:e3:75:11:7f:ca:76:78:9c:ab:32:67: f5:bf:c8:5a:91:6c:b2:85:d4:c0:81:2f:c1:dc:51:24:0a:d1: 6c:d8:df:f6:98:99:7f:e3:fe:0c:99:f9:86:2c:70:3b:51:23: 9e:f4:81:0d:c0:43:55:9d:c8:cd:2f:1c:05:c1:aa:b3:f7:87: 54:94:5e:8e:9e:34:ed:8f:86:94:15:1f:fb:ea:7b:06:0d:ce: a0:7e:c0:cd:0c:b2:e9:36:3e:a9:1a:5a:4d:2c:d5:3e:1c:55: 85:9c:21:5e:c0:33:77:8f:0a:69:76:5a:8e:9a:d6:8b:72:d2: 37:d2:91:d9:18:d6:ab:d2:6f:01:e2:e1:31:81:f2:16:d9:2d: da:6b:f0:18:90:4e:52:ad:89:73:a0:3b:e6:b8:ef:41:95:81: b2:c8:54:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mnqvLO2xbfNylG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkYTQ0NWQtOGM2Yy00Mjk5LTllMmMtNDVjNzVlOGE2 NDI1MB4XDTI2MDMxMzA0MDIwMFoXDTI2MDYxMTA0MDIwMFowLzEtMCsGA1UEAxMk NzUwZDNlYjgtZjZhYy00OTE0LTliMjEtM2JmMmE0Y2Y1ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/GwbI8/ShOrIpU572YJ3k5Af4K9tfPN3fZI XTDNAHuLiJWaJROaOShuhUAqNibumIa3QoFen+iHSDGEeffNtIc9MMV3PGUEo3m3 XkFqvHidomrWTdK8NvUe9bfLYod5DncwGN/JFXtRh14o7zY35Yk+vz42v3yrRnF3 EA8UmnR9UbkYI57GzCP3Z+iE23LDDhqT0+PaAEIeKDGm34cEpbx43eSdDrb0r74g +qQgqTyC8g8QLIbedkj15GujCKM5vmbDBWaAUF5UUhWOSOTZ1eqnBq0/AilrOiHN 0vqcryOVn/qULAbipIADES7b9wwDfaXeBErhxWD4XL9EfPdrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL85a/Qo+kIhVYwRKiCPAteMLI4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRh NDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3NWU4YTY0MjUvY2U1MzMxYjYtZjZkMi0z OTFjLWFiYTYtMmQwNzllMjAxNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNThkYTQ0NWQtOGM2Yy00Mjk5LTll MmMtNDVjNzVlOGE2NDI1LzU4ZGE0NDVkLThjNmMtNDI5OS05ZTJjLTQ1Yzc1ZThh NjQyNS5jcmwwHwYDVR0jBBgwFoAUnwfrfL7jlCXzBLm7QrB5MT5j1PowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81OGRhNDQ1ZC04YzZjLTQyOTktOWUyYy00NWM3 NWU4YTY0MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExvGtApUiIkibwb4zgJOBuFjAppk/iJoE0fF3JjaYVxQFGO8wn1lxBO i7ruMq02S9NMLiM9tpoBbHsoHzOrbXaUu0DoQHaDGHDVtfETFx6rU4xRPmzQ0h5h ezfvIiKd4N/jdRF/ynZ4nKsyZ/W/yFqRbLKF1MCBL8HcUSQK0WzY3/aYmX/j/gyZ +YYscDtRI570gQ3AQ1WdyM0vHAXBqrP3h1SUXo6eNO2PhpQVH/vqewYNzqB+wM0M suk2PqkaWk0s1T4cVYWcIV7AM3ePCml2Wo6a1oty0jfSkdkY1qvSbwHi4TGB8hbZ Ldpr8BiQTlKtiXOgO+a470GVgbLIVKc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:10:16 2026 by rpki-client