$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json) Hash identifier: mPaWq4N598DENWdYcBIm0M5/BUlLSUk9t9DYolR8Z2M= Subject key identifier: 87:4B:C6:3C:C0:38:69:D1:22:A2:25:9E:B6:F9:F2:8E:36:48:6B:54 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584ED001E8170B72430FD005E380 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 40627 IP address blocks: 66.81.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e8:17:0b:72:43:0f:d0:05:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=bbb23f48-1d2e-4610-ab1d-e3afc5c48cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:ec:9e:41:b2:42:d8:d0:3b:08:80:70:52: 4c:33:08:7d:54:53:4a:39:7e:03:57:36:8a:c5:06: 3c:53:2a:30:2b:eb:17:87:0c:a9:df:a6:85:1b:44: 0a:c0:63:7d:70:52:5d:03:96:be:be:c3:5f:b3:4d: 5e:27:6f:14:02:97:f2:f0:7f:6d:14:2b:98:77:68: 24:34:cd:6c:f8:80:95:92:15:74:72:4d:f5:9f:5e: 9c:c8:7b:c3:ee:f9:3a:bb:b1:0c:2e:e1:5d:38:51: 90:65:30:3e:d7:01:80:02:ee:fa:e9:70:cf:50:be: d4:42:ad:b5:f1:39:74:d8:43:90:01:84:99:8e:94: 7b:66:3d:d9:c2:3d:b8:75:e6:ea:c6:1f:39:91:73: cc:09:73:f4:4b:c9:79:d4:f2:6f:68:b2:c4:16:b3: a3:14:4b:e3:00:dc:50:05:89:66:8b:08:64:0e:3c: 49:e7:ab:aa:8a:49:1b:bd:62:70:5f:69:2b:02:7e: 87:af:0a:8e:d7:04:6e:10:64:3f:c4:e3:8c:b3:33: 32:56:14:e1:0c:cb:c2:93:bf:65:5f:06:67:80:26: cc:25:14:ae:35:2c:38:db:28:2b:9c:e1:ab:3c:d5: c9:ff:9f:6b:a5:af:cc:fe:88:ab:76:04:86:78:ce: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:C6:3C:C0:38:69:D1:22:A2:25:9E:B6:F9:F2:8E:36:48:6B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:06:da:29:a6:f5:8c:82:b3:9b:cd:5b:d5:6f:90:19:85:86: 9d:88:73:c2:ad:aa:0a:b5:34:11:d9:06:f1:86:7c:76:8a:82: 28:39:e3:25:0d:dc:62:3e:ee:e2:8d:90:8c:17:1b:68:45:c3: 3f:08:60:46:88:78:bf:8b:62:61:d1:f3:5b:bf:83:ea:31:fb: 68:1b:5a:05:17:93:40:d5:c9:de:aa:49:99:6b:50:b7:16:8d: 77:07:8a:04:81:d2:01:34:4f:2f:38:c7:ba:b4:a3:50:fd:30: 4f:3a:72:9b:73:3d:c8:ac:a2:e3:2b:79:37:9b:cd:47:1b:85: 01:81:dc:00:ba:62:8e:06:bb:3f:58:fd:e3:98:59:bb:1c:c0: 59:39:3a:e1:f0:83:93:52:93:17:b2:f8:3d:b8:f2:d3:f2:45: b0:71:ec:be:0f:02:50:c1:6d:1a:97:6f:10:29:1a:43:9d:8a: 05:ac:02:24:ac:ab:3e:ff:a5:5c:91:66:6c:a5:79:db:ca:57: 00:bf:77:dd:1b:df:42:be:e2:56:e1:85:33:37:fa:a2:ac:50: 16:12:a8:9a:10:a0:ee:f5:43:05:35:54:1b:78:a2:86:3c:fa: 4d:d9:84:c2:5e:80:98:3a:fb:f6:6a:82:2d:e6:e7:bb:84:cb: 87:9a:b1:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAegXC3JDD9AF44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmJiMjNmNDgtMWQyZS00NjEwLWFiMWQtZTNhZmM1YzQ4Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuXsnkGyQtjQOwiAcFJMMwh9VFNKOX4DVzaK xQY8UyowK+sXhwyp36aFG0QKwGN9cFJdA5a+vsNfs01eJ28UApfy8H9tFCuYd2gk NM1s+ICVkhV0ck31n16cyHvD7vk6u7EMLuFdOFGQZTA+1wGAAu766XDPUL7UQq21 8Tl02EOQAYSZjpR7Zj3Zwj24debqxh85kXPMCXP0S8l51PJvaLLEFrOjFEvjANxQ BYlmiwhkDjxJ56uqikkbvWJwX2krAn6HrwqO1wRuEGQ/xOOMszMyVhThDMvCk79l XwZngCbMJRSuNSw42ygrnOGrPNXJ/59rpa/M/oirdgSGeM5X7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdLxjzAOGnRIqIlnrb58o42SGtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMjU5MDY1N2EtZDc5OS0z MTY5LWI3YTgtZDQwYjE1NDI5ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsG2imm9YyCs5vNW9VvkBmFhp2Ic8Ktqgq1NBHZBvGGfHaKgig54yUN 3GI+7uKNkIwXG2hFwz8IYEaIeL+LYmHR81u/g+ox+2gbWgUXk0DVyd6qSZlrULcW jXcHigSB0gE0Ty84x7q0o1D9ME86cptzPcisouMreTebzUcbhQGB3AC6Yo4Guz9Y /eOYWbscwFk5OuHwg5NSkxey+D248tPyRbBx7L4PAlDBbRqXbxApGkOdigWsAiSs qz7/pVyRZmyledvKVwC/d90b30K+4lbhhTM3+qKsUBYSqJoQoO71QwU1VBt4ooY8 +k3ZhMJegJg6+/Zqgi3m57uEy4easYs= -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:58 2026 by rpki-client