$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa File: cfef727c-7d86-3e20-90da-9631286575b4.roa (raw, json) Hash identifier: kHpTlMTK6G/bYeCEblybG6hDx9m+Oj1RCOTPo55q9Fk= Subject key identifier: 46:68:B0:F4:67:08:D2:31:58:73:59:22:88:B8:9E:35:D1:D6:60:BF Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584D4A8FA086691025C3E22DAC80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 40627 IP address blocks: 192.209.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a0:86:69:10:25:c3:e2:2d:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=ca43e559-6f1f-4ef0-a595-70eac9247124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dd:e4:e0:bf:32:de:be:bb:4c:58:71:5a:3b: c4:ce:6b:a0:2d:da:3d:fb:43:ea:f2:fe:dd:78:a8: 7c:82:fa:46:4d:ea:68:1b:5e:06:60:c5:f3:08:b9: 7d:26:0b:28:75:5e:78:23:60:6c:6e:03:50:1c:4c: 36:6a:f1:8b:27:be:a2:b9:e1:47:81:f4:04:a0:6f: 9f:a4:19:54:3c:39:47:a3:bb:af:c2:e8:b7:89:f9: d6:93:4c:e1:ca:87:63:83:48:44:28:97:be:9d:cd: 0a:b2:37:a0:26:06:d1:3f:f9:93:bc:a3:84:0d:ae: 0c:19:7a:28:ee:b8:8e:7e:47:a9:d6:d1:f4:18:e3: 18:a0:c3:37:01:78:b8:2e:b2:fa:d0:ac:23:a6:bf: 89:75:9d:62:bb:e7:b0:4c:4c:6c:fb:78:40:17:10: ae:9b:80:28:07:b9:33:4d:10:54:43:96:93:9a:51: 0f:58:cb:d4:7b:19:c9:c7:67:63:ee:88:24:47:b3: da:ec:95:e5:86:d0:ae:a9:f0:15:8f:54:a7:6a:53: dd:15:50:dd:1b:0b:ec:5f:34:7d:9d:12:23:b4:f6: 92:0d:09:9e:45:a3:75:a1:66:7e:25:1d:04:5c:d7: de:86:f4:69:32:79:39:c4:8d:1a:c4:e2:1d:9d:33: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:B0:F4:67:08:D2:31:58:73:59:22:88:B8:9E:35:D1:D6:60:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 192.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:d5:cc:df:b3:54:75:4e:68:b7:d0:f3:2f:68:ea:99:99: b2:51:c2:6a:01:3b:e2:86:61:0e:98:5f:9d:eb:7c:f6:9d:96: ad:c7:15:4c:52:b2:65:68:13:65:67:5a:99:42:33:2e:cd:2d: b6:06:0d:99:f1:03:53:9d:59:c6:9a:69:86:8a:98:9e:b5:e2: 92:b3:14:2c:52:33:6f:cd:c1:66:1f:94:68:9f:17:44:09:93: 58:19:83:64:f2:55:a0:40:eb:53:74:ac:8b:60:f2:45:40:c6: f3:75:41:6b:de:e6:32:d0:86:aa:da:ad:7a:7f:55:47:de:7a: 9e:ec:20:0d:fb:4f:d8:d5:8b:16:7f:8d:77:4d:9f:20:d5:20: 73:66:53:cd:04:ea:f2:03:60:2b:44:a4:2f:20:cc:a7:7a:fb: 7d:bb:4b:25:0b:8a:f8:f9:b3:64:6c:95:45:0f:a6:c4:ce:b1: 8c:e0:2a:4e:52:a1:cc:3e:39:13:78:c8:92:db:46:6d:56:2e: b5:2c:4e:ff:a0:6e:56:b5:4a:83:a3:04:55:01:4c:7f:73:b4: 8c:33:a7:7b:32:67:a5:6b:1a:63:50:08:ed:6e:0a:a7:cb:69: 9c:4c:43:c2:8b:2c:f5:b9:3e:43:8e:ad:53:ac:e7:f0:8c:94: 2e:9e:3a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6CGaRAlw+ItrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk Y2E0M2U1NTktNmYxZi00ZWYwLWE1OTUtNzBlYWM5MjQ3MTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN3k4L8y3r67TFhxWjvEzmugLdo9+0Pq8v7d eKh8gvpGTepoG14GYMXzCLl9JgsodV54I2BsbgNQHEw2avGLJ76iueFHgfQEoG+f pBlUPDlHo7uvwui3ifnWk0zhyodjg0hEKJe+nc0KsjegJgbRP/mTvKOEDa4MGXoo 7riOfkep1tH0GOMYoMM3AXi4LrL60Kwjpr+JdZ1iu+ewTExs+3hAFxCum4AoB7kz TRBUQ5aTmlEPWMvUexnJx2dj7ogkR7Pa7JXlhtCuqfAVj1SnalPdFVDdGwvsXzR9 nRIjtPaSDQmeRaN1oWZ+JR0EXNfehvRpMnk5xI0axOIdnTMa4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZosPRnCNIxWHNZIoi4njXR1mC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvY2ZlZjcyN2MtN2Q4Ni0z ZTIwLTkwZGEtOTYzMTI4NjU3NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0x1czfs1R1Tmi30PMvaOqZmbJRwmoBO+KGYQ6YX53rfPadlq3HFUxS smVoE2VnWplCMy7NLbYGDZnxA1OdWcaaaYaKmJ614pKzFCxSM2/NwWYflGifF0QJ k1gZg2TyVaBA61N0rItg8kVAxvN1QWve5jLQhqrarXp/VUfeep7sIA37T9jVixZ/ jXdNnyDVIHNmU80E6vIDYCtEpC8gzKd6+327SyULivj5s2RslUUPpsTOsYzgKk5S ocw+ORN4yJLbRm1WLrUsTv+gbla1SoOjBFUBTH9ztIwzp3syZ6VrGmNQCO1uCqfL aZxMQ8KLLPW5PkOOrVOs5/CMlC6eOnM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:24:04 2026 by rpki-client