$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa File: 1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa (raw, json) Hash identifier: BdnGN88cjm2bxfjYrga4nAD7yTGvtBHXTDCM+A12I0k= Subject key identifier: A8:2A:D8:2A:C1:2F:74:AB:9B:37:42:58:F9:4C:08:B4:87:19:30:20 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584B13D6AA7637F11AE8463F9E20 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 209242 IP address blocks: 66.81.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:aa:76:37:f1:1a:e8:46:3f:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=aa7aee55-6555-4d96-a268-18942eab532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:16:89:1c:97:67:98:7a:59:9f:3e:fa:48: 55:9e:40:d6:27:11:41:f2:12:3f:5b:12:d3:cf:d9: ae:d1:d8:a7:f2:e9:20:32:ca:d4:07:37:0c:0f:dd: 9c:87:ee:2c:77:bc:20:95:7a:32:85:5d:8e:48:f7: 92:92:5a:ab:ff:ca:d2:fe:08:bd:8b:ae:2b:dc:72: 84:0c:b4:e7:56:f2:78:3c:aa:9c:4b:b8:68:48:8b: 3c:1c:25:c2:4e:35:0d:05:6d:b0:4a:65:4a:04:4e: d4:68:2b:dc:1d:b4:ad:9a:47:a1:b2:88:43:0a:8d: fa:fe:72:cc:68:3c:33:d0:ae:e7:89:88:5e:10:fb: 11:8c:86:c9:11:7b:84:f7:b0:29:af:ea:26:67:fd: 12:1d:69:3f:e1:d9:17:fa:78:71:5a:26:6c:8f:42: 54:6c:e0:4f:9f:33:c0:5b:44:0b:56:6b:f4:e8:67: ca:22:d1:5a:81:c0:d1:5d:da:13:d0:60:13:b5:8f: 92:93:d5:33:04:6f:e2:aa:49:32:f7:c9:42:b2:35: 28:1b:14:fb:22:3b:e8:9a:ec:41:9f:69:0c:89:20: 41:8c:5c:d0:42:83:d9:32:a0:ea:90:9b:f6:5d:fd: 94:78:88:50:22:e7:e0:aa:85:a7:91:d0:9d:41:9a: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:D8:2A:C1:2F:74:AB:9B:37:42:58:F9:4C:08:B4:87:19:30:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ae:52:dc:78:f4:70:df:6c:e2:41:37:bb:15:7e:2d:d9:fd: 1b:65:02:cd:4f:c3:dc:60:32:62:5d:1b:57:5b:3f:2c:7b:da: a3:06:8b:b1:68:a4:f5:35:ae:e0:13:b6:19:f3:67:e9:51:8b: 07:a0:39:0a:06:d8:11:6d:fc:93:bb:2e:39:ea:44:7a:f1:54: cd:ee:8e:66:ad:b8:42:3c:cd:17:17:1b:dc:14:1e:2f:18:2d: 80:af:ee:36:4f:5f:95:93:f4:d0:83:e7:70:91:69:e3:dd:e7: a7:3f:47:2f:03:3f:2e:84:75:fe:9d:be:ff:d5:50:9a:64:4c: b3:d0:20:cb:13:2c:89:f8:59:5e:9f:5d:0d:c4:af:d6:ac:20: e6:c9:1e:a1:ca:b6:82:40:e7:3f:25:36:03:cf:ba:cf:c8:60: 95:1e:6f:56:3a:b6:9e:c4:f2:95:4d:a5:7a:1e:63:3b:cd:eb: c0:e1:72:27:ee:e8:3e:7c:ba:22:a0:64:76:fe:38:cd:47:73: bd:d4:84:30:ad:fc:e4:ef:fe:84:a9:77:92:63:6c:14:92:73: b2:af:78:a8:9b:df:4a:3a:65:1b:10:30:0a:f5:3e:58:64:e9: 53:2f:07:57:19:3b:63:a5:85:7d:5a:80:c5:f0:4d:e2:e4:92: 8b:ee:e8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qp2N/Ea6EY/niAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWE3YWVlNTUtNjU1NS00ZDk2LWEyNjgtMTg5NDJlYWI1MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvcWiRyXZ5h6WZ8++khVnkDWJxFB8hI/WxLT z9mu0din8ukgMsrUBzcMD92ch+4sd7wglXoyhV2OSPeSklqr/8rS/gi9i64r3HKE DLTnVvJ4PKqcS7hoSIs8HCXCTjUNBW2wSmVKBE7UaCvcHbStmkehsohDCo36/nLM aDwz0K7niYheEPsRjIbJEXuE97Apr+omZ/0SHWk/4dkX+nhxWiZsj0JUbOBPnzPA W0QLVmv06GfKItFagcDRXdoT0GATtY+Sk9UzBG/iqkky98lCsjUoGxT7IjvomuxB n2kMiSBBjFzQQoPZMqDqkJv2Xf2UeIhQIufgqoWnkdCdQZpKfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgq2CrBL3SrmzdCWPlMCLSHGTAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMWJmZDkyN2EtN2JkZS0z NjViLWExZTMtNTJkZDA3ZGFhN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6uUtx49HDfbOJBN7sVfi3Z/RtlAs1Pw9xgMmJdG1dbPyx72qMGi7Fo pPU1ruATthnzZ+lRiwegOQoG2BFt/JO7LjnqRHrxVM3ujmatuEI8zRcXG9wUHi8Y LYCv7jZPX5WT9NCD53CRaePd56c/Ry8DPy6Edf6dvv/VUJpkTLPQIMsTLIn4WV6f XQ3Er9asIObJHqHKtoJA5z8lNgPPus/IYJUeb1Y6tp7E8pVNpXoeYzvN68Dhcifu 6D58uiKgZHb+OM1Hc73UhDCt/OTv/oSpd5JjbBSSc7KveKib30o6ZRsQMAr1Plhk 6VMvB1cZO2OlhX1agMXwTeLkkovu6Fg= -----END CERTIFICATE-----Generated at Tue Sep 16 03:20:33 2025 by rpki-client