$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa File: a0f53c24-196c-3044-ab68-255cff40ec0c.roa (raw, json) Hash identifier: mxPaf1T+UmQ6DoxkkwbgmC4zH8eL4PIMGr4kGIegots= Subject key identifier: A5:20:C8:0A:4A:62:2C:26:40:6F:F3:15:B8:C1:B6:A3:E4:F1:43:E8 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584B0A1159C27C42BB7068BD9680 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 40627 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:59:c2:7c:42:bb:70:68:bd:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=1867f1c6-e763-44aa-9611-59c02520c170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:4a:47:d5:35:61:1d:6e:c6:a2:9f:fb:fc: 5c:47:ec:c6:2f:13:2c:0f:39:23:77:49:b8:cf:62: e2:a7:9a:68:29:12:b1:d7:f2:99:5f:c4:ca:c0:f1: cd:9b:bd:16:5a:63:20:d1:17:2f:c2:87:3d:21:ea: 2d:0d:ff:3d:a0:04:bb:2d:6e:fe:63:85:11:18:d6: c6:22:28:90:f1:61:ad:5e:0d:90:0e:75:d7:1c:a3: 4b:8d:15:e8:ed:5c:40:93:5e:b3:98:a4:52:a3:d5: 7e:ca:96:36:c1:3b:3d:e8:8c:05:8b:39:1c:25:da: c8:ca:c5:30:ca:36:a9:13:f7:44:88:40:98:b2:5a: bd:11:47:52:61:dd:74:4d:4f:84:9c:2e:33:f0:27: 2c:4a:72:00:27:66:6a:6e:10:fa:3e:d7:27:88:c6: da:7a:7f:9f:00:34:41:3b:c5:66:64:fe:f3:fc:5c: 0c:13:d3:9a:e2:0b:54:74:32:40:a4:26:27:7f:0b: 48:2e:8d:bd:43:cf:34:d3:e2:8c:db:2a:2c:08:32: 34:ad:6d:4b:a4:98:74:a2:09:7b:14:8c:c8:ee:63: 82:6a:24:a1:d2:f6:3a:24:f8:b7:93:a4:3c:da:47: 58:d1:da:2f:ce:51:2e:39:85:75:96:ea:e9:8c:5a: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:C8:0A:4A:62:2C:26:40:6F:F3:15:B8:C1:B6:A3:E4:F1:43:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c5:d8:9b:2a:bb:cc:8a:dc:70:5f:f3:77:12:1e:82:e2:64: 1f:d6:4b:3a:bc:3f:11:2a:10:66:66:01:ff:28:11:b7:4d:a5: 26:fb:13:bb:9f:5d:f1:27:ad:ad:5e:59:52:cb:d3:61:e5:19: 53:87:bb:29:b1:20:e2:d6:82:6a:d5:47:76:aa:d1:a8:c1:33: 21:dd:74:9c:00:02:d3:6b:f9:ac:ed:06:4a:e7:c6:2b:3f:58: 7e:f6:9a:24:7a:69:8a:2d:12:9e:1f:61:ae:0f:c1:8a:24:d7: b4:d1:fd:19:47:8a:0e:63:e2:a4:67:2a:00:90:67:42:05:ed: 7a:1a:41:7a:c2:d0:81:cc:bc:ab:e5:3b:bb:92:c1:12:ed:52: 45:23:cf:a6:16:be:e7:08:e6:9b:6b:a2:dc:60:7a:88:7c:e9: c8:02:56:d2:d8:f1:0f:a8:b9:a2:84:36:f3:25:86:2f:df:d3: 9f:48:cc:66:3f:f2:59:11:a7:fc:f2:b5:00:fe:d6:db:8b:9c: 27:21:69:1d:07:45:c1:9f:d4:0d:eb:c3:64:ee:ab:94:81:1c: 04:bf:fc:ca:3a:06:fd:55:c4:ed:dc:32:87:0e:af:bc:53:1f: c6:29:3b:45:ff:58:8d:34:e4:f1:34:9e:60:95:22:d7:cc:52: 66:5d:26:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVnCfEK7cGi9loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MTg2N2YxYzYtZTc2My00NGFhLTk2MTEtNTljMDI1MjBjMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj5KR9U1YR1uxqKf+/xcR+zGLxMsDzkjd0m4 z2Lip5poKRKx1/KZX8TKwPHNm70WWmMg0Rcvwoc9IeotDf89oAS7LW7+Y4URGNbG IiiQ8WGtXg2QDnXXHKNLjRXo7VxAk16zmKRSo9V+ypY2wTs96IwFizkcJdrIysUw yjapE/dEiECYslq9EUdSYd10TU+EnC4z8CcsSnIAJ2ZqbhD6PtcniMbaen+fADRB O8VmZP7z/FwME9Oa4gtUdDJApCYnfwtILo29Q8800+KM2yosCDI0rW1LpJh0ogl7 FIzI7mOCaiSh0vY6JPi3k6Q82kdY0dovzlEuOYV1lurpjFr06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUgyApKYiwmQG/zFbjBtqPk8UPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYTBmNTNjMjQtMTk2Yy0z MDQ0LWFiNjgtMjU1Y2ZmNDBlYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPF2Jsqu8yK3HBf83cSHoLiZB/WSzq8PxEqEGZmAf8oEbdNpSb7E7uf XfEnra1eWVLL02HlGVOHuymxIOLWgmrVR3aq0ajBMyHddJwAAtNr+aztBkrnxis/ WH72miR6aYotEp4fYa4PwYok17TR/RlHig5j4qRnKgCQZ0IF7XoaQXrC0IHMvKvl O7uSwRLtUkUjz6YWvucI5ptrotxgeoh86cgCVtLY8Q+ouaKENvMlhi/f059IzGY/ 8lkRp/zytQD+1tuLnCchaR0HRcGf1A3rw2Tuq5SBHAS//Mo6Bv1VxO3cMocOr7xT H8YpO0X/WI005PE0nmCVItfMUmZdJok= -----END CERTIFICATE-----Generated at Tue Sep 16 03:21:18 2025 by rpki-client