$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa File: 8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa (raw, json) Hash identifier: loo8kuR7zEdsoZ3Fe+hxxT3wf0A5I4Liiy4X1gwJiKM= Subject key identifier: 4A:D5:66:A1:8B:0B:0C:E0:81:3D:F5:EE:84:AC:61:26:B2:D5:BD:01 Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F4328584B715CB98BFCA23C6FF063B500 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 23393 IP address blocks: 199.167.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b9:8b:fc:a2:3c:6f:f0:63:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e2b7966b-6d6d-48a2-918d-9b9116cd84b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:b2:26:1f:9b:18:73:97:19:bf:47:62:da: 4d:06:ab:ee:f1:99:88:82:53:06:2a:78:51:a1:bc: 74:f6:8c:e6:8a:6d:90:66:00:f5:8e:b7:82:cb:a7: 96:01:19:4e:67:76:9a:79:40:0a:5e:fe:b8:8b:22: 39:3f:74:9a:d2:81:f0:90:26:6e:2a:63:c7:4e:17: 9c:eb:f6:a1:36:c6:27:b0:a4:a9:d2:63:ac:98:37: 70:c2:95:91:e7:21:ed:7a:50:25:35:c6:7b:80:75: f7:9b:d1:13:63:ad:12:a4:22:fa:38:c1:2a:69:93: 9f:97:4f:ae:4a:bf:f7:29:ee:4b:f4:4d:e5:f9:96: d4:13:cf:29:1b:45:bc:1e:b7:87:c2:4e:3d:6a:11: 84:65:c0:f2:1b:94:6c:0e:c0:fe:8a:fe:d5:e7:b8: 9f:20:76:07:80:62:ad:26:42:34:e0:0d:d3:ac:fe: f9:e9:d1:9e:86:c1:e9:82:33:60:be:0e:a0:6a:8c: a1:b2:8d:0e:ef:b7:ba:fa:45:02:61:af:31:40:2e: 07:f8:e7:23:69:99:42:d4:dd:28:86:bd:f4:ad:c5: 04:7f:72:bb:10:e5:cd:0e:7f:45:60:4c:53:0c:c6: c4:f6:8e:6a:39:bb:06:94:c6:49:f0:56:26:f2:f2: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D5:66:A1:8B:0B:0C:E0:81:3D:F5:EE:84:AC:61:26:B2:D5:BD:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/8b6c8c2d-c6d0-3f08-9db2-696bb1447af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 199.167.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5e:54:a7:d4:c0:34:af:d6:6e:30:39:67:f6:97:10:5d:d6: 76:82:b3:17:f7:13:bd:85:a3:a3:2c:51:92:ff:5b:0d:7c:d2: 78:c1:bf:0b:e0:c6:6e:1d:64:8a:4a:c7:7f:ca:8f:38:cd:d6: c1:41:fd:a1:5a:60:84:07:b4:4f:ab:d3:3d:71:11:29:b5:9a: 07:fb:4b:c3:1d:c8:0e:fb:55:62:a5:f4:fd:d8:a3:53:91:51: 4a:e0:77:fd:b3:5c:f0:ba:19:bb:99:18:50:76:e5:35:b4:c8: 12:4c:48:54:20:f8:73:56:b8:e9:a8:a4:96:2c:09:39:80:95: 7f:87:26:77:10:ab:d0:fb:30:b6:86:e5:4e:19:28:89:30:2d: 3d:ad:ea:a8:2d:9c:e6:1f:47:dd:05:ba:e3:d8:fe:6e:6d:f2: d8:89:da:06:bd:fe:10:aa:84:3a:c0:ee:aa:4f:e6:13:7e:39: 7f:ee:49:c6:a4:13:4d:57:72:2c:90:d6:ed:ed:5e:0f:c7:57: 3b:c8:f1:39:76:d9:14:8b:f3:d9:1a:6f:49:e6:5f:b1:d6:eb: e4:ed:e4:8d:16:f8:59:42:9d:c2:50:8b:22:cc:c5:7f:d1:2b: 3b:4d:41:9c:f8:44:44:57:8c:42:0e:9d:d0:5e:08:0c:22:b4: 4e:8c:f0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLmL/KI8b/BjtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTJiNzk2NmItNmQ2ZC00OGEyLTkxOGQtOWI5MTE2Y2Q4NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5feyJh+bGHOXGb9HYtpNBqvu8ZmIglMGKnhR obx09ozmim2QZgD1jreCy6eWARlOZ3aaeUAKXv64iyI5P3Sa0oHwkCZuKmPHThec 6/ahNsYnsKSp0mOsmDdwwpWR5yHtelAlNcZ7gHX3m9ETY60SpCL6OMEqaZOfl0+u Sr/3Ke5L9E3l+ZbUE88pG0W8HreHwk49ahGEZcDyG5RsDsD+iv7V57ifIHYHgGKt JkI04A3TrP756dGehsHpgjNgvg6gaoyhso0O77e6+kUCYa8xQC4H+OcjaZlC1N0o hr30rcUEf3K7EOXNDn9FYExTDMbE9o5qObsGlMZJ8FYm8vLimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErVZqGLCwzggT317oSsYSay1b0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvOGI2YzhjMmQtYzZkMC0z ZjA4LTlkYjItNjk2YmIxNDQ3YWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9eVKfUwDSv1m4wOWf2lxBd1naCsxf3E72Fo6MsUZL/Ww180njBvwvg xm4dZIpKx3/KjzjN1sFB/aFaYIQHtE+r0z1xESm1mgf7S8MdyA77VWKl9P3Yo1OR UUrgd/2zXPC6GbuZGFB25TW0yBJMSFQg+HNWuOmopJYsCTmAlX+HJncQq9D7MLaG 5U4ZKIkwLT2t6qgtnOYfR90FuuPY/m5t8tiJ2ga9/hCqhDrA7qpP5hN+OX/uScak E01XciyQ1u3tXg/HVzvI8Tl22RSL89kab0nmX7HW6+Tt5I0W+FlCncJQiyLMxX/R KztNQZz4RERXjEIOndBeCAwitE6M8PI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:57 2025 by rpki-client