$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/58a721bd-3a30-35f2-968b-1112cce1f384.roa File: 58a721bd-3a30-35f2-968b-1112cce1f384.roa (raw, json) Hash identifier: hPBf7n3jkpbTnK1DH2Y9q4LcfOcvYlvUulJrZF2XZvM= Subject key identifier: 47:2C:6C:1E:16:47:C7:9D:DD:C9:5A:A6:F4:23:39:FD:33:46:7B:7C Certificate issuer: /CN=d46b5c04-6ffd-4817-a7a5-68bc91297a0e Certificate serial: 010D0C9F4328584D9B856455522655FDF23ED580 Authority key identifier: B8:12:04:53:57:27:CC:9D:C8:BE:BB:84:0F:41:1E:95:44:AC:B6:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/58a721bd-3a30-35f2-968b-1112cce1f384.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 26481 IP address blocks: 199.33.120.0/24 maxlen: 24 199.33.121.0/24 maxlen: 24 199.33.122.0/24 maxlen: 24 199.33.123.0/24 maxlen: 24 199.33.124.0/24 maxlen: 24 199.33.125.0/24 maxlen: 24 199.33.126.0/24 maxlen: 24 199.33.127.0/24 maxlen: 24 209.74.104.0/24 maxlen: 24 209.74.105.0/24 maxlen: 24 209.74.106.0/24 maxlen: 24 209.74.107.0/24 maxlen: 24 209.74.108.0/24 maxlen: 24 209.74.109.0/24 maxlen: 24 209.74.110.0/24 maxlen: 24 209.74.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:64:55:52:26:55:fd:f2:3e:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46b5c04-6ffd-4817-a7a5-68bc91297a0e Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=6a3cfb81-45f8-4609-8437-f038aebec092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:06:e5:00:2f:7d:55:7b:dd:dd:81:c7:9e:2b: f3:4d:4e:c0:92:9a:47:13:79:aa:cd:75:6d:10:4e: 3f:3e:3b:ae:3b:9d:c5:39:3b:cf:9b:4c:8a:25:7d: 17:69:c8:21:fe:19:34:aa:4b:50:84:52:f2:a2:ad: b9:ce:81:db:9b:b2:ed:2f:c8:9f:5b:40:de:17:15: dd:f7:d9:a9:03:dc:8f:33:b7:f9:ac:51:c6:9e:5c: b2:13:c9:16:ed:1c:09:5e:6b:85:a1:77:d0:36:6e: 5f:83:97:a4:63:49:68:e4:8c:18:da:dd:f3:9d:f1: 1f:4e:6f:25:09:70:d5:27:09:ac:b6:4d:4e:03:ce: 1f:6d:55:9c:03:02:ed:9b:fd:cc:2f:b5:8f:53:3e: 3c:dd:6e:f0:78:f8:a7:a0:64:2a:27:6e:70:da:67: d2:89:2a:bf:dc:9d:f7:05:cf:54:2f:a8:4a:95:fb: 21:e0:56:e8:6f:79:d0:1b:67:f7:e6:fe:90:b2:3d: ff:da:d3:a0:75:f1:14:04:7d:05:1a:17:bb:bf:34: b8:4f:84:b0:69:3c:f4:4b:40:dd:9e:e6:ce:ba:96: b3:50:df:95:99:dc:0f:25:5e:38:db:58:8d:dd:c6: af:8b:7e:e7:1e:48:e7:5d:0b:8d:e4:b1:d4:95:d6: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:6C:1E:16:47:C7:9D:DD:C9:5A:A6:F4:23:39:FD:33:46:7B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/58a721bd-3a30-35f2-968b-1112cce1f384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.crl X509v3 Authority Key Identifier: keyid:B8:12:04:53:57:27:CC:9D:C8:BE:BB:84:0F:41:1E:95:44:AC:B6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer sbgp-ipAddrBlock: critical IPv4: 199.33.120.0/21 209.74.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:52:bb:dd:79:6d:71:1c:88:7e:5f:70:cf:b6:fa:41:36:a2: 9f:82:79:fa:dc:9e:a0:cf:46:f8:e6:9d:aa:c1:08:fc:12:7e: 94:88:82:5f:78:a2:7b:57:e5:9d:3e:ec:fe:2e:c3:48:8c:02: a0:6e:c6:c5:6d:92:dc:dd:4f:ea:df:3a:68:40:7b:53:d8:1d: 20:46:b6:7b:f7:b2:a7:a5:01:26:c4:9e:a7:4b:85:1f:3b:f0: b4:96:d6:88:f2:b9:37:62:b1:be:d2:89:6c:83:21:7d:96:93: 76:99:48:06:c9:9c:04:31:00:3f:68:1d:40:cb:88:f6:3f:fa: 10:2e:aa:46:8f:e2:8f:64:d5:8e:22:9b:b1:1b:5b:0a:8d:16: 1d:e4:35:40:3c:95:15:e1:44:5a:5a:3b:0e:f7:eb:1a:50:74: 28:b6:bd:fb:30:0b:57:84:7b:4b:89:df:8a:e5:3c:7a:5c:89: eb:9f:30:c0:0c:4f:23:c2:93:74:e7:e8:06:a5:fb:e2:da:c5: 08:53:ee:df:23:4c:99:92:22:58:09:65:aa:4e:2d:e2:09:58: 46:c5:eb:da:73:b3:48:4f:0d:19:87:81:5e:ea:5b:eb:bc:8d: a4:9f:04:ce:fe:fb:78:14:9e:a2:0a:b2:1e:60:09:c3:11:b8: e6:bd:52:da -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2bhWRVUiZV/fI+1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ2YjVjMDQtNmZmZC00ODE3LWE3YTUtNjhiYzkxMjk3 YTBlMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk NmEzY2ZiODEtNDVmOC00NjA5LTg0MzctZjAzOGFlYmVjMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAblAC99VXvd3YHHnivzTU7AkppHE3mqzXVt EE4/PjuuO53FOTvPm0yKJX0Xacgh/hk0qktQhFLyoq25zoHbm7LtL8ifW0DeFxXd 99mpA9yPM7f5rFHGnlyyE8kW7RwJXmuFoXfQNm5fg5ekY0lo5IwY2t3znfEfTm8l CXDVJwmstk1OA84fbVWcAwLtm/3ML7WPUz483W7wePinoGQqJ25w2mfSiSq/3J33 Bc9UL6hKlfsh4Fbob3nQG2f35v6Qsj3/2tOgdfEUBH0FGhe7vzS4T4SwaTz0S0Dd nubOupazUN+VmdwPJV4421iN3cavi37nHkjnXQuN5LHUldYtewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEcsbB4WR8ed3clapvQjOf0zRnt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDZi NWMwNC02ZmZkLTQ4MTctYTdhNS02OGJjOTEyOTdhMGUvNThhNzIxYmQtM2EzMC0z NWYyLTk2OGItMTExMmNjZTFmMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDQ2YjVjMDQtNmZmZC00ODE3LWE3 YTUtNjhiYzkxMjk3YTBlL2Q0NmI1YzA0LTZmZmQtNDgxNy1hN2E1LTY4YmM5MTI5 N2EwZS5jcmwwHwYDVR0jBBgwFoAUuBIEU1cnzJ3IvruED0EelUSstuMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNDZiNWMwNC02ZmZkLTQ4MTctYTdhNS02OGJj OTEyOTdhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDxyF4AwQD 0UpoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHNSu915bXEciH5fcM+2+kE2op+CefrcnqDPRvjmnarBCPwS fpSIgl94ontX5Z0+7P4uw0iMAqBuxsVtktzdT+rfOmhAe1PYHSBGtnv3sqelASbE nqdLhR878LSW1ojyuTdisb7SiWyDIX2Wk3aZSAbJnAQxAD9oHUDLiPY/+hAuqkaP 4o9k1Y4im7EbWwqNFh3kNUA8lRXhRFpaOw736xpQdCi2vfswC1eEe0uJ34rlPHpc ieufMMAMTyPCk3Tn6Aal++LaxQhT7t8jTJmSIlgJZapOLeIJWEbF69pzs0hPDRmH gV7qW+u8jaSfBM7++3gUnqIKsh5gCcMRuOa9Uto= -----END CERTIFICATE-----Generated at Wed May 13 06:43:20 2026 by rpki-client