$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58e96d59-794f-3449-8df4-3e14e55cd5b4.roa File: 58e96d59-794f-3449-8df4-3e14e55cd5b4.roa (raw, json) Hash identifier: MA2y0Ez/ZgLNgOkvyHDFy5KAOynQ20BZNjnoj++oMXA= Subject key identifier: 80:05:55:2D:0D:3F:30:02:C5:30:D1:D6:46:3E:FD:F3:3C:F6:FC:32 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1467A02143F6061BB17FA100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58e96d59-794f-3449-8df4-3e14e55cd5b4.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 212238 IP address blocks: 104.250.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a0:21:43:f6:06:1b:b1:7f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=19b2fb0f-14f7-498b-af2a-ea39afea478e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:9f:a1:43:78:a9:b8:96:78:ab:c6:ce:ea: 8f:6a:8d:13:70:a3:2e:bc:ae:52:1b:1f:43:6f:1d: da:89:ae:d1:57:26:a7:65:93:ce:85:02:00:d1:a1: cb:0f:2b:32:d2:ac:0b:da:89:fc:d1:d9:eb:21:06: 87:de:c0:3c:54:2f:56:5a:25:a9:8f:48:ec:b4:ea: 7f:90:3e:59:8e:cd:14:e7:e6:f9:10:7b:2a:57:52: 09:bf:9f:3d:98:b5:12:04:c1:08:94:11:1c:11:09: 5e:3e:a9:d3:0d:6d:43:f7:fd:09:1d:c6:8a:c9:13: 35:06:64:24:66:e4:71:c4:3f:eb:c9:36:15:aa:25: a2:18:1f:b0:14:2c:33:ab:0d:78:bf:bb:4b:31:74: f7:d6:3c:3e:4e:b7:01:01:44:4a:99:4f:00:26:a9: b1:9c:f8:8b:03:06:56:87:52:e2:c6:f1:1d:e5:4a: 2a:8a:8b:90:c6:01:14:b8:69:1d:6e:2a:60:44:da: c9:fb:65:f7:bf:f7:31:20:a3:b8:f0:d1:3f:40:4e: 0a:4c:05:33:2d:2b:d9:00:71:1d:88:64:39:fd:9e: aa:12:29:c8:20:de:44:d6:2d:6a:e6:7f:fd:cf:f9: 5d:20:8e:f4:2d:cb:c9:37:de:3c:ab:03:b7:01:fa: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:05:55:2D:0D:3F:30:02:C5:30:D1:D6:46:3E:FD:F3:3C:F6:FC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58e96d59-794f-3449-8df4-3e14e55cd5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5d:9e:4c:39:06:45:7f:68:14:dd:f4:65:15:98:42:81:43: c2:8f:66:17:08:36:fb:d3:52:84:01:f1:d6:8c:13:f3:1c:57: 83:07:ae:0d:61:29:a5:23:a7:32:3a:15:4c:72:ea:79:ae:03: c8:41:47:ac:13:9c:22:17:77:5a:41:41:a5:5f:02:8b:71:70: d3:cd:e8:ee:0a:b4:1d:b4:a9:10:52:e9:98:79:70:b4:b2:08: 94:33:54:e2:ee:f8:b9:90:c4:72:7f:d7:5f:cc:a3:e1:df:c1: 3d:3a:1c:df:a8:ab:8c:dc:7f:68:25:5c:3a:d7:aa:8a:f0:3f: 04:e5:fd:2f:7e:62:3e:33:56:c8:1c:5e:87:0b:6c:62:53:ac: 55:e4:d1:bd:f2:96:ee:d2:9d:00:e3:ac:ff:83:2d:c8:2f:99: 8a:4e:84:72:c4:72:b3:52:c7:ba:64:6f:2c:80:52:87:85:48: c4:dc:fa:0f:bc:73:04:c1:11:2f:34:04:0a:96:23:6c:10:51: 4f:02:c5:18:15:c4:50:7f:d2:c4:aa:d9:0b:c0:67:19:b0:d9: 51:b4:19:f9:5c:84:e3:35:e8:f0:ab:06:dc:c8:f0:9d:f2:f6: 7f:59:cb:eb:28:10:a5:b2:84:35:a3:68:72:2d:2f:0d:f5:6c: 22:35:ee:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6AhQ/YGG7F/oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTliMmZiMGYtMTRmNy00OThiLWFmMmEtZWEzOWFmZWE0NzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoKfoUN4qbiWeKvGzuqPao0TcKMuvK5SGx9D bx3aia7RVyanZZPOhQIA0aHLDysy0qwL2on80dnrIQaH3sA8VC9WWiWpj0jstOp/ kD5Zjs0U5+b5EHsqV1IJv589mLUSBMEIlBEcEQlePqnTDW1D9/0JHcaKyRM1BmQk ZuRxxD/ryTYVqiWiGB+wFCwzqw14v7tLMXT31jw+TrcBAURKmU8AJqmxnPiLAwZW h1LixvEd5UoqiouQxgEUuGkdbipgRNrJ+2X3v/cxIKO48NE/QE4KTAUzLSvZAHEd iGQ5/Z6qEinIIN5E1i1q5n/9z/ldII70LcvJN948qwO3AfqgKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAFVS0NPzACxTDR1kY+/fM89vwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNThlOTZkNTktNzk0Zi0z NDQ5LThkZjQtM2UxNGU1NWNkNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtdnkw5BkV/aBTd9GUVmEKBQ8KPZhcINvvTUoQB8daME/McV4MHrg1h KaUjpzI6FUxy6nmuA8hBR6wTnCIXd1pBQaVfAotxcNPN6O4KtB20qRBS6Zh5cLSy CJQzVOLu+LmQxHJ/11/Mo+HfwT06HN+oq4zcf2glXDrXqorwPwTl/S9+Yj4zVsgc XocLbGJTrFXk0b3ylu7SnQDjrP+DLcgvmYpOhHLEcrNSx7pkbyyAUoeFSMTc+g+8 cwTBES80BAqWI2wQUU8CxRgVxFB/0sSq2QvAZxmw2VG0GflchOM16PCrBtzI8J3y 9n9Zy+soEKWyhDWjaHItLw31bCI17mQ= -----END CERTIFICATE-----Generated at Mon Sep 21 16:45:14 2026 by rpki-client