$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json) Hash identifier: XS2YUKxGGkw+4ByJDpQkbiDwDhLZhThCG83zIJuH3gE= Subject key identifier: 1C:EA:A7:FC:F7:D0:74:CF:0B:96:17:B0:A0:86:C9:CD:16:CF:D2:51 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584D4A8FA0B2DDB196CB45419F00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40627 IP address blocks: 199.68.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a0:b2:dd:b1:96:cb:45:41:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=94b5e257-f316-47f9-931f-e6e4a0586ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:07:7c:5b:72:75:11:8d:90:8c:30:9d:76: 15:08:8d:b5:8e:4d:d2:cf:58:e9:d3:8a:b8:f1:ae: 0f:8b:83:8a:f6:a8:0c:48:f6:6a:c4:4a:cc:40:52: ab:17:86:57:9c:42:dd:da:6b:48:29:ad:fa:e5:22: 2c:2a:2f:c6:db:61:3b:d5:3e:12:a4:f8:9c:48:39: 6b:af:c7:42:5f:63:06:03:5a:cc:07:ca:99:fc:6f: 0a:74:67:78:c9:a2:6d:30:ba:47:6b:84:b4:89:42: 3b:7d:86:6e:57:57:9e:b5:3e:bf:ca:03:58:d7:31: c8:35:e8:86:20:e6:94:3e:89:19:d4:84:f9:71:62: 5e:d5:04:3f:4a:ed:58:f1:1d:45:ea:90:f6:6c:00: 77:01:ad:97:02:2b:a0:01:8c:c6:8f:86:6c:84:f3: 24:13:a6:c0:34:46:5e:26:29:6d:94:a4:f3:60:41: d4:45:73:8b:be:66:ae:e6:e9:f6:71:7d:ac:25:e6: c8:a2:6e:bc:f3:3e:21:53:0c:b2:b4:3c:82:a1:7f: f4:4d:83:cf:a4:58:bc:c3:98:b5:e3:a9:dc:dd:32: 98:8b:69:e1:3e:99:fe:9f:bd:a3:8e:c8:e9:41:65: ac:10:8f:ab:c8:7a:5d:f3:c9:90:f0:4f:5e:27:83: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:A7:FC:F7:D0:74:CF:0B:96:17:B0:A0:86:C9:CD:16:CF:D2:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.68.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ca:3f:4c:ff:7b:dc:65:71:e4:09:a5:e9:01:b3:35:d5:3a: 62:39:d0:50:90:27:9a:44:a6:16:e2:c3:1d:b9:c7:40:0e:83: 77:58:07:d4:2c:50:1b:9a:61:0d:f0:b3:cc:63:b5:ff:3e:1c: 3a:b1:2d:f0:77:5d:89:68:42:63:13:6e:a5:a4:81:58:0d:c0: 06:3d:45:1f:1f:12:9c:c8:30:9e:18:39:e0:8a:4c:c1:26:4f: 48:38:5f:cf:00:60:ea:c2:34:a4:d8:c0:2b:64:e6:98:cc:49: 6c:6c:57:e0:25:65:a4:68:6f:af:9b:8f:d1:a3:24:15:44:c8: a0:ec:f4:8e:cd:94:60:15:d7:9e:0c:24:27:de:5c:5b:22:5c: b6:32:9e:53:91:06:81:29:1c:be:53:af:fd:ab:55:76:22:1f: 05:a4:a7:34:f7:27:59:ed:3e:60:d8:cf:9b:b6:7d:10:bf:d7: 10:46:ac:31:ec:f2:ae:ea:73:b7:49:03:4e:a8:e7:7d:dc:5e: 26:92:99:a9:79:f6:79:a3:36:15:0c:8a:d9:b3:a6:ad:a6:8d: a9:ef:58:ea:26:de:f5:5c:51:44:5d:fa:66:ed:2c:0a:25:f4: 53:7d:36:8c:5e:4e:62:e7:03:65:2d:75:d4:f0:3a:a7:ce:3f: 43:0f:7f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6Cy3bGWy0VBnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OTRiNWUyNTctZjMxNi00N2Y5LTkzMWYtZTZlNGEwNTg2ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6wHfFtydRGNkIwwnXYVCI21jk3Sz1jp04q4 8a4Pi4OK9qgMSPZqxErMQFKrF4ZXnELd2mtIKa365SIsKi/G22E71T4SpPicSDlr r8dCX2MGA1rMB8qZ/G8KdGd4yaJtMLpHa4S0iUI7fYZuV1eetT6/ygNY1zHINeiG IOaUPokZ1IT5cWJe1QQ/Su1Y8R1F6pD2bAB3Aa2XAiugAYzGj4ZshPMkE6bANEZe JiltlKTzYEHURXOLvmau5un2cX2sJebIom688z4hUwyytDyCoX/0TYPPpFi8w5i1 46nc3TKYi2nhPpn+n72jjsjpQWWsEI+ryHpd88mQ8E9eJ4N8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzqp/z30HTPC5YXsKCGyc0Wz9JRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNWU4ZDNjNGUtNTYwMC0z MTRmLTkwYjUtNjlkN2NhNDRkNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLKP0z/e9xlceQJpekBszXVOmI50FCQJ5pEphbiwx25x0AOg3dYB9Qs UBuaYQ3ws8xjtf8+HDqxLfB3XYloQmMTbqWkgVgNwAY9RR8fEpzIMJ4YOeCKTMEm T0g4X88AYOrCNKTYwCtk5pjMSWxsV+AlZaRob6+bj9GjJBVEyKDs9I7NlGAV154M JCfeXFsiXLYynlORBoEpHL5Tr/2rVXYiHwWkpzT3J1ntPmDYz5u2fRC/1xBGrDHs 8q7qc7dJA06o533cXiaSmal59nmjNhUMitmzpq2mjanvWOom3vVcUURd+mbtLAol 9FN9NoxeTmLnA2UtddTwOqfOP0MPf2E= -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:16 2026 by rpki-client