$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa File: 3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa (raw, json) Hash identifier: aQPyvh6KG2r66gaX3Wig0jhr04/NpKcjBkMHk7h2wV8= Subject key identifier: 5D:0B:1B:5B:56:DA:20:14:EB:47:2A:F8:96:24:DA:46:D2:B1:81:D8 Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552 Certificate serial: 010D0C9F4328584F7E7DD26F7FF0CD9471D62A80 Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 26806 IP address blocks: 198.169.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d2:6f:7f:f0:cd:94:71:d6:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=328477b5-8490-4fd1-a75e-9576d1becfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:0e:f6:df:02:7a:14:42:da:1c:bc:3d:6c: 90:49:19:ce:bb:0a:d0:ac:4f:f0:eb:fc:96:56:17: ba:3e:54:e1:02:7f:79:68:a3:5d:9f:cf:1f:45:b6: 7c:06:7b:3a:dd:94:4b:00:f5:13:ad:8f:6c:33:29: 6f:89:6f:5a:fa:22:17:ef:88:16:d5:28:33:55:28: 93:cc:b1:b2:48:b0:37:9f:e0:17:6c:d2:e5:a3:d9: b1:a6:04:66:6a:76:ec:59:3d:82:1c:40:62:36:a5: c0:93:aa:c8:cd:0f:59:a6:66:6f:54:70:db:6b:58: 1b:06:7a:8d:5a:44:9b:ee:35:07:0e:21:12:de:ac: dc:a8:24:d1:66:4f:b3:26:48:5d:85:81:a7:e9:96: 18:7a:e6:c0:1b:02:6b:66:c1:c7:a1:1d:71:e2:e6: 0a:97:89:99:f8:a4:6c:3a:ec:d9:68:7f:0e:e8:51: 89:bc:63:ef:d0:3e:ad:0e:a6:95:32:cb:44:23:a8: 8d:dc:07:ea:2c:5c:54:a3:61:09:7c:ef:0f:37:8e: 92:79:e0:3a:6c:99:f6:92:a8:2b:b4:36:6a:f0:5f: ec:01:38:96:15:eb:c9:4a:2c:e0:6d:4f:68:1a:29: bf:fa:68:22:22:1e:3f:1f:10:90:15:f4:73:f5:13: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:1B:5B:56:DA:20:14:EB:47:2A:F8:96:24:DA:46:D2:B1:81:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/3dbcbaee-a2a6-3ca0-b9f7-d25846356dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl X509v3 Authority Key Identifier: keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer sbgp-ipAddrBlock: critical IPv4: 198.169.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f0:d5:b3:c8:8b:14:35:f4:75:e3:d2:3a:ee:e8:4b:8e:fd: 14:47:e0:2d:ff:58:3a:b7:61:b5:d6:a7:e3:93:f6:f7:43:29: 83:88:82:2a:be:51:04:e2:ec:6c:27:4e:f6:14:b7:fb:4f:0d: 08:07:d7:c4:56:70:10:8a:61:d1:33:98:03:f4:a9:e4:35:b8: 34:2e:bd:4d:aa:c3:8e:e8:8c:90:71:59:b2:03:25:a1:61:08: cc:13:e7:cf:20:a5:e6:d7:98:c7:2f:9e:7d:75:79:95:ee:06: c0:09:8f:93:52:34:0c:d9:cd:20:c7:8a:1d:ed:74:3b:0e:2d: e0:00:dc:1f:7e:f4:e6:eb:fb:07:62:94:6c:14:13:08:7d:fc: 00:48:78:b2:a4:43:82:4f:56:86:30:19:ea:8e:2b:0c:92:38: e7:1c:a2:5d:5d:85:9d:9d:ad:29:db:44:9d:5a:75:1f:45:8f: 3d:30:53:cb:b2:33:98:af:17:be:54:01:4f:d6:fd:c7:81:39: fc:f8:32:be:4f:ab:31:61:53:83:f6:32:16:cc:3f:60:e1:82: b9:4f:b5:00:57:dc:7e:8b:f5:5a:30:7d:b4:9b:3d:89:bb:f5: 5b:96:1c:e4:2f:62:70:37:67:b8:cd:64:cb:1b:6d:11:31:87: 10:2a:36:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdJvf/DNlHHWKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl NTUyMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MzI4NDc3YjUtODQ5MC00ZmQxLWE3NWUtOTU3NmQxYmVjZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd0O9t8CehRC2hy8PWyQSRnOuwrQrE/w6/yW Vhe6PlThAn95aKNdn88fRbZ8Bns63ZRLAPUTrY9sMylviW9a+iIX74gW1SgzVSiT zLGySLA3n+AXbNLlo9mxpgRmanbsWT2CHEBiNqXAk6rIzQ9ZpmZvVHDba1gbBnqN WkSb7jUHDiES3qzcqCTRZk+zJkhdhYGn6ZYYeubAGwJrZsHHoR1x4uYKl4mZ+KRs OuzZaH8O6FGJvGPv0D6tDqaVMstEI6iN3AfqLFxUo2EJfO8PN46SeeA6bJn2kqgr tDZq8F/sATiWFevJSizgbU9oGim/+mgiIh4/HxCQFfRz9ROnvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0LG1tW2iAU60cq+JYk2kbSsYHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0 NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvM2RiY2JhZWUtYTJhNi0z Y2EwLWI5ZjctZDI1ODQ2MzU2ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0 MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPw1bPIixQ19HXj0jru6EuO/RRH4C3/WDq3YbXWp+OT9vdDKYOIgiq+ UQTi7GwnTvYUt/tPDQgH18RWcBCKYdEzmAP0qeQ1uDQuvU2qw47ojJBxWbIDJaFh CMwT588gpebXmMcvnn11eZXuBsAJj5NSNAzZzSDHih3tdDsOLeAA3B9+9Obr+wdi lGwUEwh9/ABIeLKkQ4JPVoYwGeqOKwySOOccol1dhZ2drSnbRJ1adR9Fjz0wU8uy M5ivF75UAU/W/ceBOfz4Mr5PqzFhU4P2MhbMP2DhgrlPtQBX3H6L9VowfbSbPYm7 9VuWHOQvYnA3Z7jNZMsbbRExhxAqNk8= -----END CERTIFICATE-----Generated at Thu Oct 15 00:25:09 2026 by rpki-client