$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa File: cfef727c-7d86-3e20-90da-9631286575b4.roa (raw, json) Hash identifier: xlSugjvduRHJkdWxAgWT78z27gpkbz8G8bjVL2p2chY= Subject key identifier: 76:59:E8:69:B0:16:7C:2C:9C:C3:73:09:77:E6:D7:5F:65:9C:CA:C5 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584B8BE2218B22D35823A118F540 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40627 IP address blocks: 192.209.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:21:8b:22:d3:58:23:a1:18:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=3cc5d0d2-47b5-44e2-968c-5196f0c0668b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:de:16:63:fc:84:3f:bc:53:b2:72:7b:25: 4d:8c:44:07:d2:fc:38:eb:2b:7c:83:38:2c:f4:6d: 51:5b:73:cb:cc:21:ba:d0:cf:62:1f:fa:56:11:1e: 10:b1:86:b2:88:c5:e6:66:4d:c5:e5:a4:df:a0:59: 80:bc:80:0d:a4:93:f6:e3:7b:b7:5d:b9:ff:af:c7: 24:16:2e:8f:64:38:a0:04:09:6a:0c:b9:7b:a8:5d: 6a:18:97:f4:03:95:ea:4c:a9:d2:03:49:1c:63:34: 90:7a:b1:ee:ef:86:9c:95:2e:ce:6a:99:7d:ac:83: 60:ab:46:0e:69:e8:14:ea:62:0c:55:ed:52:6f:43: ff:9e:24:38:7b:42:35:bf:e8:cb:96:e9:6e:a7:2d: b6:61:8e:d2:20:19:b5:0a:06:33:a9:f3:03:92:40: b4:8f:6e:f1:43:24:92:1e:77:2a:17:a0:93:a1:27: c2:96:80:1f:ef:65:06:84:d5:18:46:5e:3d:e8:78: 54:ef:8a:27:f6:6a:40:af:14:03:76:90:6f:89:d3: e4:b8:78:45:c9:46:c1:6b:4c:d8:eb:05:a6:8f:04: cb:38:28:4a:3e:93:2a:51:33:7e:43:57:7e:72:31: 86:aa:35:a4:b2:59:cb:13:d4:0e:82:25:ed:4a:9a: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:59:E8:69:B0:16:7C:2C:9C:C3:73:09:77:E6:D7:5F:65:9C:CA:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 192.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:20:5a:82:ae:53:73:1d:a5:43:af:9f:02:7d:25:a9:d7:52: 1e:c0:25:21:b9:cb:53:c7:a8:1a:7d:d6:3b:ff:b5:31:1b:8f: b8:ef:5b:88:1d:fe:d1:25:9a:9b:41:b6:ea:9d:d4:61:88:d0: e6:10:06:28:2b:a9:b9:a1:e1:59:f3:3e:05:94:d6:7c:a6:44: 76:e3:06:64:1c:a7:25:e8:7c:0d:97:27:2b:dc:22:8b:6a:c4: a8:c9:6c:e8:40:61:e1:c9:46:a2:55:a9:3e:9c:e4:03:bf:70: c1:bb:c9:08:7f:83:fd:ee:61:46:fb:6e:6e:a4:85:45:5c:e2: 7c:72:fb:74:d4:be:c4:88:d1:6d:ed:68:a0:17:85:0b:fa:ce: b7:7e:d2:dd:31:bc:93:e4:67:f5:e3:46:7a:5b:91:54:8c:96: ab:32:66:2d:5f:3c:ca:40:4c:e6:97:0b:65:e9:85:10:e9:1b: 74:c4:98:6f:3f:c2:0e:94:a4:6e:89:a2:24:6b:c3:43:f3:03: d5:13:26:e4:26:38:7e:62:72:e5:9e:af:b3:a0:34:8f:0d:f4: 82:4b:01:2b:a3:2b:d1:9a:03:14:54:70:b9:14:e2:2e:9e:b9: 5d:f6:75:ed:8b:0a:e4:83:de:76:d8:75:c1:30:32:01:a1:a3: 56:e0:aa:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iGLItNYI6EY9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk M2NjNWQwZDItNDdiNS00NGUyLTk2OGMtNTE5NmYwYzA2NjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApafeFmP8hD+8U7JyeyVNjEQH0vw46yt8gzgs 9G1RW3PLzCG60M9iH/pWER4QsYayiMXmZk3F5aTfoFmAvIANpJP243u3Xbn/r8ck Fi6PZDigBAlqDLl7qF1qGJf0A5XqTKnSA0kcYzSQerHu74aclS7Oapl9rINgq0YO aegU6mIMVe1Sb0P/niQ4e0I1v+jLlulupy22YY7SIBm1CgYzqfMDkkC0j27xQySS HncqF6CToSfCloAf72UGhNUYRl496HhU74on9mpArxQDdpBvidPkuHhFyUbBa0zY 6wWmjwTLOChKPpMqUTN+Q1d+cjGGqjWkslnLE9QOgiXtSprk7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZZ6GmwFnwsnMNzCXfm119lnMrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvY2ZlZjcyN2MtN2Q4Ni0z ZTIwLTkwZGEtOTYzMTI4NjU3NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0gWoKuU3MdpUOvnwJ9JanXUh7AJSG5y1PHqBp91jv/tTEbj7jvW4gd /tElmptBtuqd1GGI0OYQBigrqbmh4VnzPgWU1nymRHbjBmQcpyXofA2XJyvcIotq xKjJbOhAYeHJRqJVqT6c5AO/cMG7yQh/g/3uYUb7bm6khUVc4nxy+3TUvsSI0W3t aKAXhQv6zrd+0t0xvJPkZ/XjRnpbkVSMlqsyZi1fPMpATOaXC2XphRDpG3TEmG8/ wg6UpG6JoiRrw0PzA9UTJuQmOH5icuWer7OgNI8N9IJLASujK9GaAxRUcLkU4i6e uV32de2LCuSD3nbYdcEwMgGho1bgqtI= -----END CERTIFICATE-----Generated at Mon Nov 3 06:37:18 2025 by rpki-client