$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa File: c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json) Hash identifier: XKJLTGxotTPg6CRD6rQFqOV63pvIY5xgSsqmMuBIyHU= Subject key identifier: 8D:EB:AC:DC:8A:BA:8A:51:BB:59:6A:85:84:62:5E:6C:77:88:F4:D0 Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F4328584E104EEFC48FA7D1C4CE982600 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 23393 IP address blocks: 104.37.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ef:c4:8f:a7:d1:c4:ce:98:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=22e43b11-83ca-4511-9505-478e7696e601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dd:6b:14:fa:1e:9e:c4:00:5a:d4:f8:b1:a8: be:44:bd:f5:26:10:69:01:c3:f1:4c:be:c6:17:25: 34:44:c1:64:3b:a1:8d:31:43:7d:59:c4:dd:0f:36: 84:22:6f:68:04:e8:51:81:b0:60:81:09:b6:e3:33: 45:20:ae:7d:14:5f:52:f7:b7:e7:12:c9:49:96:01: 51:6f:1c:6d:84:a9:3b:47:10:7b:35:e0:0b:f3:38: db:2f:ff:cb:a8:b7:72:3f:3e:d8:bc:22:df:91:d7: 76:df:16:91:be:8a:8a:e2:c0:7f:11:a9:53:24:b4: 51:71:dc:1d:64:7e:4e:25:66:85:da:f4:94:6a:d9: 15:aa:ba:5c:2b:8b:c0:a7:0d:f6:b6:17:32:40:dd: 23:46:2c:96:93:ba:0d:84:86:19:75:34:3a:db:06: f7:b9:1f:fb:92:bc:74:73:b5:94:81:38:25:17:a1: 20:c7:b4:e9:6e:53:c7:1e:f9:7d:52:b5:05:cb:f5: 46:1c:5f:89:3c:74:df:62:90:e6:68:a7:80:29:d6: 88:8a:b2:d7:ee:3e:03:e4:7c:b3:60:0a:05:69:c7: 20:49:dd:48:be:14:c8:e5:9b:89:8b:cd:62:f9:a0: a4:8e:4b:76:59:22:b2:8e:20:21:15:42:86:25:ce: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EB:AC:DC:8A:BA:8A:51:BB:59:6A:85:84:62:5E:6C:77:88:F4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 104.37.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c5:b0:c4:50:31:61:b5:4e:0b:f9:41:95:d1:e4:85:d6:72: 5a:da:8d:70:26:56:68:4a:88:94:92:62:de:ff:d8:23:f7:d6: 01:59:07:4d:6a:b4:24:a0:b3:59:d9:24:a7:94:57:f2:80:f3: c6:99:34:03:31:a4:b4:e5:06:c0:89:4f:a3:ef:94:8b:43:5d: 3d:50:98:38:fe:7d:20:1d:da:fb:02:9c:e9:0a:94:04:80:0f: 64:ca:b2:78:6a:f9:24:ff:b0:c9:16:58:eb:78:99:9d:35:5d: 83:ca:dc:38:9b:01:4d:ff:82:1e:f0:ad:9d:4a:a4:34:59:f7: a6:8a:4f:b1:86:0f:04:59:53:e4:7f:dd:32:f0:d8:88:d8:89: 84:ae:0c:6f:8b:08:a4:5c:d7:40:06:76:50:e1:29:8f:d8:b4: 2c:f4:48:9c:11:1b:a1:c3:90:51:fa:e8:d5:34:66:82:26:0b: 88:cc:3e:24:74:a9:98:86:e3:0d:2f:f4:e8:61:b4:d9:4f:97: 84:15:1e:bc:bd:41:5e:92:2d:0d:58:fd:d5:74:49:d7:da:9e: 5c:08:ae:e9:d1:4b:0e:46:bb:32:3b:76:b0:34:00:a4:9d:77: cd:ac:c4:cd:26:1d:a1:60:86:88:3f:13:c5:1c:d1:62:fe:b7: 5c:1f:fd:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTu/Ej6fRxM6YJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MjJlNDNiMTEtODNjYS00NTExLTk1MDUtNDc4ZTc2OTZlNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1rFPoensQAWtT4sai+RL31JhBpAcPxTL7G FyU0RMFkO6GNMUN9WcTdDzaEIm9oBOhRgbBggQm24zNFIK59FF9S97fnEslJlgFR bxxthKk7RxB7NeAL8zjbL//LqLdyPz7YvCLfkdd23xaRvoqK4sB/EalTJLRRcdwd ZH5OJWaF2vSUatkVqrpcK4vApw32thcyQN0jRiyWk7oNhIYZdTQ62wb3uR/7krx0 c7WUgTglF6Egx7TpblPHHvl9UrUFy/VGHF+JPHTfYpDmaKeAKdaIirLX7j4D5Hyz YAoFaccgSd1IvhTI5ZuJi81i+aCkjkt2WSKyjiAhFUKGJc4ECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3rrNyKuopRu1lqhYRiXmx3iPTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvYzIxYmI2YzUtOTU5Mi0z OWI0LThiNWYtNWFmOWE5MTMzNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7FsMRQMWG1Tgv5QZXR5IXWclrajXAmVmhKiJSSYt7/2CP31gFZB01q tCSgs1nZJKeUV/KA88aZNAMxpLTlBsCJT6PvlItDXT1QmDj+fSAd2vsCnOkKlASA D2TKsnhq+ST/sMkWWOt4mZ01XYPK3DibAU3/gh7wrZ1KpDRZ96aKT7GGDwRZU+R/ 3TLw2IjYiYSuDG+LCKRc10AGdlDhKY/YtCz0SJwRG6HDkFH66NU0ZoImC4jMPiR0 qZiG4w0v9OhhtNlPl4QVHry9QV6SLQ1Y/dV0SdfanlwIrunRSw5GuzI7drA0AKSd d82sxM0mHaFghog/E8Uc0WL+t1wf/WU= -----END CERTIFICATE-----Generated at Sun Jun 14 06:36:07 2026 by rpki-client