$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa File: 8de3435f-e6ea-387d-ae03-f28b14654e4a.roa (raw, json) Hash identifier: l6Y2Ibd2kujwz2K51/VuAgiHkTLOTzohUsIVWPsjNOw= Subject key identifier: 0F:30:D1:6F:6B:83:9A:CB:46:25:02:D4:EF:13:6E:48:15:31:7C:CF Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Certificate serial: 010D0C9F4328584F3FAD3064CB669762AC355D80 Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 401307 IP address blocks: 69.58.58.0/23 maxlen: 24 69.58.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:30:64:cb:66:97:62:ac:35:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=2df896f4-d47b-426d-aa6c-814d8e2f53b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:fc:75:ab:a7:6f:54:9e:8b:a4:cc:3d:a4: ab:7e:4a:34:9c:a2:63:2c:a6:70:02:86:ae:ab:45: 40:a6:db:a0:9e:89:70:ba:5c:db:6e:31:94:75:34: d1:67:03:bf:ff:2c:b6:bf:66:f4:45:3f:2f:26:dc: 0c:f0:57:72:73:3e:43:5f:8d:5c:85:fc:80:af:96: ab:d5:1a:8d:62:fa:fb:b5:be:9f:5a:34:6c:95:3a: 27:4b:9f:a3:95:e6:e0:3e:15:ee:60:8c:05:eb:fe: a6:dc:7f:2d:fc:94:af:bc:58:de:b8:ab:be:1a:9f: 33:63:76:ce:ed:d3:9b:2c:48:60:a9:cc:35:cf:fa: 80:60:04:92:87:06:53:82:ee:a1:46:74:b3:7e:6c: 58:d6:ae:e7:ce:97:f2:c6:ac:1d:2a:63:b8:37:a0: 5d:4d:44:fc:6b:98:fe:a9:be:1d:bc:8f:44:ee:48: a1:98:ab:72:8c:9e:74:66:65:0a:3a:8c:05:60:a6: 15:5a:a3:f9:ce:cc:e3:14:81:f2:d3:cd:5e:7f:3e: 3d:e1:82:9d:92:09:4e:a4:cf:a1:69:aa:c9:dc:eb: 8a:5a:d5:db:f9:ca:e9:95:9e:75:72:cf:38:a4:cb: 0d:17:0c:ef:eb:3c:d9:ad:0a:ef:8d:67:e4:76:7e: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:30:D1:6F:6B:83:9A:CB:46:25:02:D4:EF:13:6E:48:15:31:7C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl X509v3 Authority Key Identifier: keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer sbgp-ipAddrBlock: critical IPv4: 69.58.58.0-69.58.60.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bd:56:f3:01:6c:34:a3:d2:50:4d:90:75:66:4d:ca:f5:73: b6:5a:3e:66:83:9b:0b:7b:48:d2:1b:3d:c2:cf:3a:ae:7a:a8: 7d:cf:9a:2b:d6:40:b5:f9:37:e8:6e:26:ec:7f:91:84:3b:43: ce:41:c8:5f:90:8b:8a:5c:02:e5:a2:e5:d6:d4:cc:19:ec:e6: 06:38:e2:5d:d4:8a:9d:1a:00:32:3a:93:bb:e6:74:1a:4a:c7: 00:b8:a9:e1:12:69:d1:f5:a4:73:f5:70:bc:12:d0:53:fa:3a: 56:2e:7c:81:a1:c8:b1:bd:3b:10:78:b0:54:f1:db:5c:c4:a0: dd:39:ba:63:41:de:1c:54:e0:75:06:13:27:a7:dd:ac:80:8e: 55:b0:f5:f3:8f:0a:8d:19:5d:27:3f:0a:09:12:c7:fd:62:0a: 07:38:b0:36:12:55:4b:07:48:76:d8:12:f3:b3:d2:d7:cd:5e: 75:e6:4a:9a:f8:a8:62:1a:8c:75:b9:aa:94:22:12:29:5e:08: 37:69:d0:b9:1f:2b:b8:d4:66:de:b6:e5:e4:bf:25:d6:a0:e0: 79:52:66:36:f0:f4:20:e2:55:77:31:dc:8c:aa:0e:7a:14:c1: e7:d0:95:92:1e:c9:a7:ad:4b:56:f0:5d:57:fe:33:da:98:10: aa:e7:ba:9c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8/rTBky2aXYqw1XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0 NmZmMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MmRmODk2ZjQtZDQ3Yi00MjZkLWFhNmMtODE0ZDhlMmY1M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiin8daunb1Sei6TMPaSrfko0nKJjLKZwAoau q0VAptugnolwulzbbjGUdTTRZwO//yy2v2b0RT8vJtwM8Fdycz5DX41chfyAr5ar 1RqNYvr7tb6fWjRslTonS5+jlebgPhXuYIwF6/6m3H8t/JSvvFjeuKu+Gp8zY3bO 7dObLEhgqcw1z/qAYASShwZTgu6hRnSzfmxY1q7nzpfyxqwdKmO4N6BdTUT8a5j+ qb4dvI9E7kihmKtyjJ50ZmUKOowFYKYVWqP5zszjFIHy081efz494YKdkglOpM+h aarJ3OuKWtXb+crplZ51cs84pMsNFwzv6zzZrQrvjWfkdn43gwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFA8w0W9rg5rLRiUC1O8TbkgVMXzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5 NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvOGRlMzQzNWYtZTZlYS0z ODdkLWFlMDMtZjI4YjE0NjU0ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0 NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2 N2ZmNDQ2ZmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFFOjoD BABFOjwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAP71W8wFsNKPSUE2QdWZNyvVztlo+ZoObC3tI0hs9ws86 rnqofc+aK9ZAtfk36G4m7H+RhDtDzkHIX5CLilwC5aLl1tTMGezmBjjiXdSKnRoA MjqTu+Z0GkrHALip4RJp0fWkc/VwvBLQU/o6Vi58gaHIsb07EHiwVPHbXMSg3Tm6 Y0HeHFTgdQYTJ6fdrICOVbD1848KjRldJz8KCRLH/WIKBziwNhJVSwdIdtgS87PS 181edeZKmvioYhqMdbmqlCISKV4IN2nQuR8ruNRm3rbl5L8l1qDgeVJmNvD0IOJV dzHcjKoOehTB59CVkh7Jp61LVvBdV/4z2pgQque6nA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:26 2026 by rpki-client