$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json) Hash identifier: HepUf8gAGw0xyoGaaKlZ+gLBcrb2sww3WP+RkMVveXU= Subject key identifier: 5B:DF:12:90:D2:C9:9D:EB:68:02:24:64:D2:C4:C6:4F:2C:A7:36:42 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584B0B769C3903BA01A472176080 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 209242 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9c:39:03:ba:01:a4:72:17:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=20f75e89-9a44-4ca6-bf83-64d4d6ed5b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:3f:93:aa:22:8d:7c:75:b3:20:28:a1:40: 6a:f9:08:19:e7:7f:6f:ee:6d:58:8f:09:05:8a:05: 8b:88:43:ee:63:26:89:dd:1c:8c:3a:c1:4c:93:ee: 21:c2:d6:d0:6a:0a:77:5f:46:a8:39:55:2e:9e:6f: f5:7e:f3:52:3a:33:d0:5b:ed:21:82:36:52:b6:07: b0:58:0d:67:68:37:17:6d:c3:04:94:3b:92:51:a9: 8e:ad:54:cd:85:68:fe:b8:3a:0b:f4:81:0f:63:6e: d3:75:8a:10:00:da:4a:5d:8e:44:8b:d9:03:bd:bf: d1:02:a0:c1:f9:16:bb:e0:f0:9b:35:4b:ac:c6:31: 4b:57:94:83:5b:8a:19:e9:d9:d9:a8:3a:6b:17:5e: 8e:ed:97:c4:67:ef:17:c0:a8:22:08:0c:3b:9f:af: 7c:4e:e8:b4:a4:06:54:93:d2:84:49:f8:f7:3c:94: c8:16:c0:c0:eb:a2:49:20:13:d6:1a:3e:3e:32:f0: 1e:dc:85:c3:a7:6c:f3:50:2b:3d:b5:c7:60:c8:8a: 73:c3:29:c4:56:b6:40:b6:54:83:d5:e8:06:9a:eb: 60:0f:74:de:6f:8a:9a:bd:12:66:43:a4:70:89:0f: e5:27:a2:d5:a5:7c:6f:ce:81:f6:f7:65:a8:82:4b: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:12:90:D2:C9:9D:EB:68:02:24:64:D2:C4:C6:4F:2C:A7:36:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b5:29:6c:23:a6:b0:da:b0:ce:74:e3:37:f1:65:5f:79:6b: 0e:af:19:d0:e8:45:aa:00:1c:8c:ea:f0:8d:ea:84:31:5f:de: 20:af:ce:03:b1:9f:62:6d:6d:93:90:dc:97:67:43:92:cf:49: 54:59:cc:89:17:95:27:c4:41:38:5d:e0:3f:dc:dd:ce:ec:11: 01:1f:d3:72:fe:fc:57:28:53:63:80:ca:c7:e1:03:dc:cf:3d: c5:c7:8a:e9:26:33:96:e8:67:45:90:98:50:00:f1:da:f2:2b: 2d:7c:1a:ea:9a:a7:9c:b9:26:53:45:5c:4e:8a:3b:7f:5f:e8: f5:73:6d:c0:c8:77:ce:5d:11:42:eb:82:6d:76:b0:7d:38:76: 12:12:02:cd:8a:38:26:71:9c:4e:f1:2d:bf:c5:9d:1c:55:3b: 29:5a:0c:a4:e4:18:e5:73:77:ca:e7:42:71:36:ba:9a:4a:bb: 8c:c0:78:15:d6:3d:ee:df:a8:8b:9c:3a:cb:3a:a2:6a:e4:6c: bb:d5:08:41:97:11:a8:2d:70:c5:ac:e9:60:10:9e:86:ad:5e: b5:05:4b:68:92:8a:c5:ad:5e:93:ff:af:c4:c8:25:d5:88:8a: 69:a0:72:2e:92:14:af:10:0e:46:d6:e8:ee:74:3c:29:3c:15: 5d:1a:4e:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdpw5A7oBpHIXYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MjBmNzVlODktOWE0NC00Y2E2LWJmODMtNjRkNGQ2ZWQ1YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrA/k6oijXx1syAooUBq+QgZ539v7m1YjwkF igWLiEPuYyaJ3RyMOsFMk+4hwtbQagp3X0aoOVUunm/1fvNSOjPQW+0hgjZStgew WA1naDcXbcMElDuSUamOrVTNhWj+uDoL9IEPY27TdYoQANpKXY5Ei9kDvb/RAqDB +Ra74PCbNUusxjFLV5SDW4oZ6dnZqDprF16O7ZfEZ+8XwKgiCAw7n698Tui0pAZU k9KESfj3PJTIFsDA66JJIBPWGj4+MvAe3IXDp2zzUCs9tcdgyIpzwynEVrZAtlSD 1egGmutgD3Teb4qavRJmQ6RwiQ/lJ6LVpXxvzoH292Wogksu8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvfEpDSyZ3raAIkZNLExk8spzZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvODk0YTk1ZDUtOGQ3ZS0z MjRmLTg2ZGMtOTk2Nzc5YWJjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe1KWwjprDasM504zfxZV95aw6vGdDoRaoAHIzq8I3qhDFf3iCvzgOx n2JtbZOQ3JdnQ5LPSVRZzIkXlSfEQThd4D/c3c7sEQEf03L+/FcoU2OAysfhA9zP PcXHiukmM5boZ0WQmFAA8dryKy18Guqap5y5JlNFXE6KO39f6PVzbcDId85dEULr gm12sH04dhISAs2KOCZxnE7xLb/FnRxVOylaDKTkGOVzd8rnQnE2uppKu4zAeBXW Pe7fqIucOss6omrkbLvVCEGXEagtcMWs6WAQnoatXrUFS2iSisWtXpP/r8TIJdWI immgci6SFK8QDkbW6O50PCk8FV0aTvY= -----END CERTIFICATE-----Generated at Tue Sep 16 03:20:29 2025 by rpki-client