$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa File: a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (raw, json) Hash identifier: DAf+M31AXkPtYcBHK+fQ6YbXPm8SdLYUHhDwZJ6f64o= Subject key identifier: C6:87:65:97:50:FE:E0:77:7C:99:DB:FF:46:07:2E:90:BC:EA:76:D5 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584D4A8FA09C19C5B88A81105E00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40627 IP address blocks: 104.245.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a0:9c:19:c5:b8:8a:81:10:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=774bd833-74fd-4e63-91e5-982502fbf791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:0c:28:fb:2e:e1:93:7c:49:46:89:a1:63: 30:95:d3:b5:14:46:32:31:2f:82:3c:6c:2e:91:ee: af:f2:67:05:43:8f:51:e4:61:22:c1:78:a9:b8:ae: 8d:3b:4d:73:d8:02:cd:01:d6:14:e3:21:66:70:7d: 59:a4:0e:8b:46:ec:c9:6c:2d:dd:ff:84:25:62:6f: ba:7e:8e:e8:e2:1d:c1:8f:ee:bc:cf:0c:6f:9d:42: 5d:12:3e:a0:71:0c:37:a7:f5:1d:ec:26:a7:ab:f2: 68:ba:58:e8:4b:6e:eb:12:88:62:ea:0c:b9:ba:19: 7a:fd:b8:43:ff:74:68:ff:7a:75:e4:92:2f:66:f4: 26:86:c6:28:1a:53:ce:76:27:87:6d:ec:a9:62:b4: c4:c0:de:3b:c1:11:8f:00:eb:9c:c5:29:19:08:ae: 78:ff:6f:7e:42:83:33:c7:e8:df:ab:97:29:63:9b: 0c:eb:19:98:d0:9c:ed:96:82:8e:0e:1e:85:70:4a: 1d:91:0e:77:04:2b:d9:f0:d5:51:35:3b:48:b7:10: f9:56:93:5e:47:18:04:8d:ff:40:3b:1f:71:fa:dc: 8a:47:5b:82:06:b7:4c:9b:e9:e3:3f:b5:b4:31:26: a1:c0:64:4d:2b:a6:34:02:5d:ca:3d:65:70:8f:07: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:87:65:97:50:FE:E0:77:7C:99:DB:FF:46:07:2E:90:BC:EA:76:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 104.245.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a7:b8:eb:a0:3e:a2:27:30:84:8b:27:ff:0f:40:f6:d1:c3: 5d:a3:92:8a:59:14:87:52:61:d4:13:e7:32:95:46:9f:3e:28: 98:c4:67:63:ac:15:c6:f3:08:61:e5:5b:16:9f:78:1a:ac:09: 40:ac:1e:1b:0b:46:f0:84:99:3f:c5:8b:f8:21:c8:c5:50:25: 71:ee:10:e6:29:c6:1c:9c:14:ef:23:f6:8b:1c:08:9b:25:03: b3:9d:c1:f6:96:51:07:29:77:6d:6c:e7:42:4c:6c:a3:28:b8: b3:bd:f9:82:af:24:78:3b:11:67:0a:ca:cb:8e:9a:d1:fb:83: 35:29:d4:90:b6:86:5d:2d:a6:68:93:d2:f9:52:3a:c0:0a:cb: 82:57:35:95:5a:5a:e5:17:55:fd:50:02:13:bf:bd:4c:ca:a0: 29:e7:2a:2d:f9:aa:8d:d5:d6:55:88:3f:6f:46:17:9a:c6:db: ba:19:d5:e2:82:c3:ee:bc:e3:12:4c:9c:a9:b4:90:13:be:bc: 71:ed:c8:46:00:b2:41:72:8e:16:f4:b6:1a:dd:da:33:82:a6: 9d:f2:f3:96:3b:f6:7d:8b:87:a7:d9:8e:ac:9a:e4:be:f4:b4: f3:57:1d:e9:e6:85:e3:fc:c8:fd:3a:8c:c5:24:e7:93:54:53: e9:be:8a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6CcGcW4ioEQXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk Nzc0YmQ4MzMtNzRmZC00ZTYzLTkxZTUtOTgyNTAyZmJmNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcoMKPsu4ZN8SUaJoWMwldO1FEYyMS+CPGwu ke6v8mcFQ49R5GEiwXipuK6NO01z2ALNAdYU4yFmcH1ZpA6LRuzJbC3d/4QlYm+6 fo7o4h3Bj+68zwxvnUJdEj6gcQw3p/Ud7Canq/JouljoS27rEohi6gy5uhl6/bhD /3Ro/3p15JIvZvQmhsYoGlPOdieHbeypYrTEwN47wRGPAOucxSkZCK54/29+QoMz x+jfq5cpY5sM6xmY0JztloKODh6FcEodkQ53BCvZ8NVRNTtItxD5VpNeRxgEjf9A Ox9x+tyKR1uCBrdMm+njP7W0MSahwGRNK6Y0Al3KPWVwjwedPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaHZZdQ/uB3fJnb/0YHLpC86nbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYTVlZmY3YjItZjc3Yi0z YTZmLTk1M2EtNDhjNmVjY2I1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFenuOugPqInMISLJ/8PQPbRw12jkopZFIdSYdQT5zKVRp8+KJjEZ2Os FcbzCGHlWxafeBqsCUCsHhsLRvCEmT/Fi/ghyMVQJXHuEOYpxhycFO8j9oscCJsl A7OdwfaWUQcpd21s50JMbKMouLO9+YKvJHg7EWcKysuOmtH7gzUp1JC2hl0tpmiT 0vlSOsAKy4JXNZVaWuUXVf1QAhO/vUzKoCnnKi35qo3V1lWIP29GF5rG27oZ1eKC w+684xJMnKm0kBO+vHHtyEYAskFyjhb0thrd2jOCpp3y85Y79n2Lh6fZjqya5L70 tPNXHenmheP8yP06jMUk55NUU+m+iq8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:28:38 2026 by rpki-client