$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa File: 6f35d33f-3b25-3848-9287-a755ae18fa87.roa (raw, json) Hash identifier: hL05pIcfF2Y9uKgSVS0oThXlL96D1yvfqjfMFnmAHvo= Subject key identifier: 84:34:99:7A:33:A5:46:F3:62:A5:CE:8A:11:C3:D7:23:8A:2B:F7:61 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584D4A8FA0CA26FB064732FDAAC0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40627 IP address blocks: 199.255.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a0:ca:26:fb:06:47:32:fd:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=86bfe5d6-803a-47e1-8e36-513818533509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2c:57:e4:30:29:71:89:18:a2:7c:e8:ad:58: a2:ef:21:7f:62:bf:09:ef:2a:d7:fe:12:ac:81:f5: 7d:22:7f:53:e9:49:f7:4f:71:8b:25:97:64:3b:b0: 23:71:e2:fe:f9:d3:e9:df:ed:9c:8d:6e:f8:17:d2: 7c:c1:12:fb:c1:ae:56:91:d6:f5:20:36:7e:47:26: 8d:de:84:7d:e8:26:c1:0c:7b:87:d4:1c:47:f3:f4: 9e:9b:5e:4b:63:3c:15:d8:e5:0e:08:38:41:6c:22: 51:61:d4:ec:b5:38:26:f9:bf:93:95:2e:6e:3b:06: 70:77:c0:48:89:99:3f:df:1b:b8:09:77:9b:3c:99: 4b:b3:e3:2c:42:5d:20:57:13:1d:3c:02:18:2d:37: 62:9e:0e:fa:21:81:9c:65:92:3c:78:b9:d6:df:2e: 6f:96:e2:31:ca:ed:0b:ee:1c:34:b6:62:b5:9c:43: 49:cf:7f:c0:45:0f:cb:a0:48:ff:1f:5b:13:49:e8: da:02:ff:dd:db:e5:5b:11:b4:ae:f4:ef:10:67:39: 0f:9c:65:75:48:31:5f:a1:88:7d:76:7c:09:cb:12: 8b:66:51:61:7a:3e:8c:e7:1f:cc:1b:8a:31:a4:34: b4:59:07:c4:46:2b:fb:b9:84:24:ff:33:92:7b:b5: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:34:99:7A:33:A5:46:F3:62:A5:CE:8A:11:C3:D7:23:8A:2B:F7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:25:c8:2d:1a:1e:b7:6a:d3:38:39:e8:5b:01:ca:6c:4e:c0: dd:6e:ab:31:e9:41:52:5b:8e:3b:f8:dd:5a:34:65:a8:1b:0b: f7:c0:d6:6f:ba:e1:65:02:24:e6:66:9f:21:0a:28:a3:21:42: 5e:63:96:d5:4f:e0:30:f0:4c:a2:42:86:2b:2c:7d:42:63:ad: 45:5d:a1:19:86:d5:37:7b:c4:6a:54:d5:d4:ac:f5:d8:c0:43: 00:59:a3:6c:0d:08:e5:83:65:59:9b:96:3d:d0:08:df:d0:11: f8:dd:9c:87:9f:24:0b:1a:1e:51:bb:f5:0a:90:9e:d4:3c:32: a2:4e:bf:dc:8a:c6:b0:52:1f:9c:ec:4a:3b:35:7a:7b:2d:37: 78:df:38:0a:bf:ba:9c:c0:fa:2b:0b:d3:86:36:de:0f:21:54: 44:ca:67:83:c8:a1:31:ec:d5:5e:cd:be:80:31:0c:39:a7:ed: 23:94:7c:e3:e7:62:5c:0b:9f:24:fa:92:0f:2a:a1:87:f0:af: 3c:a4:3b:d5:f2:e7:b8:43:9c:2e:e2:ed:d5:12:8b:84:49:cd: 31:09:a4:43:d9:56:4e:71:12:67:14:43:eb:62:ce:79:3f:55: 34:c9:ff:f0:78:45:fc:26:c3:a8:e5:14:81:16:d8:64:58:55: a8:4c:ad:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6DKJvsGRzL9qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ODZiZmU1ZDYtODAzYS00N2UxLThlMzYtNTEzODE4NTMzNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgixX5DApcYkYonzorVii7yF/Yr8J7yrX/hKs gfV9In9T6Un3T3GLJZdkO7AjceL++dPp3+2cjW74F9J8wRL7wa5Wkdb1IDZ+RyaN 3oR96CbBDHuH1BxH8/Sem15LYzwV2OUOCDhBbCJRYdTstTgm+b+TlS5uOwZwd8BI iZk/3xu4CXebPJlLs+MsQl0gVxMdPAIYLTding76IYGcZZI8eLnW3y5vluIxyu0L 7hw0tmK1nENJz3/ARQ/LoEj/H1sTSejaAv/d2+VbEbSu9O8QZzkPnGV1SDFfoYh9 dnwJyxKLZlFhej6M5x/MG4oxpDS0WQfERiv7uYQk/zOSe7UpjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ0mXozpUbzYqXOihHD1yOKK/dhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNmYzNWQzM2YtM2IyNS0z ODQ4LTkyODctYTc1NWFlMThmYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIlyC0aHrdq0zg56FsBymxOwN1uqzHpQVJbjjv43Vo0ZagbC/fA1m+6 4WUCJOZmnyEKKKMhQl5jltVP4DDwTKJChissfUJjrUVdoRmG1Td7xGpU1dSs9djA QwBZo2wNCOWDZVmblj3QCN/QEfjdnIefJAsaHlG79QqQntQ8MqJOv9yKxrBSH5zs Sjs1enstN3jfOAq/upzA+isL04Y23g8hVETKZ4PIoTHs1V7NvoAxDDmn7SOUfOPn YlwLnyT6kg8qoYfwrzykO9Xy57hDnC7i7dUSi4RJzTEJpEPZVk5xEmcUQ+tiznk/ VTTJ//B4Rfwmw6jlFIEW2GRYVahMraU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:52 2026 by rpki-client