$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa File: e10be919-601f-3120-a397-03955d29b5b8.roa (raw, json) Hash identifier: vtccS9O40jH1Jy8Yk2khX8UPa7lN8g3i1TMweaX8Kf4= Subject key identifier: 1E:0E:06:FD:1A:84:E0:DD:B7:F3:C2:A9:EA:45:A8:C0:B0:1A:86:84 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584AD9364F59D6D19125323D6680 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4f:59:d6:d1:91:25:32:3d:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=c954ea19-8ee7-4ee0-ae57-21a0c8f26532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:36:02:2e:e0:78:6e:49:4a:e8:be:65:50: 85:9a:de:da:7d:38:a5:08:1a:93:ca:7c:36:d6:28: 3b:b5:fc:31:30:6f:d6:59:d3:7a:7b:be:95:ea:cd: 1e:0b:95:f3:9c:37:f9:e1:d5:fb:3b:e9:ab:6e:65: c7:cf:90:15:32:b9:e5:d7:ee:7b:0e:6a:3a:8f:fd: 44:86:90:0d:f9:31:0f:a3:87:8d:b1:76:5a:02:c4: d9:22:c4:73:0b:b5:6a:41:b0:a9:ee:5d:28:d1:e3: 23:18:24:16:67:ee:27:8d:26:08:40:d3:09:30:b6: 44:a3:50:5e:5e:99:0e:a2:9e:c1:77:ab:2e:bf:5e: 16:27:d0:97:09:56:49:0f:2f:95:99:a1:6c:64:44: e7:be:5a:37:87:6c:4c:56:e3:43:0c:e8:65:4b:5e: 45:9c:e0:44:78:41:23:78:c3:dd:a1:81:b9:10:62: 48:3d:77:e6:cb:27:25:3c:f6:88:17:60:06:86:b1: 44:fd:a4:63:1c:f5:eb:b4:08:a2:90:3d:a4:b6:ab: 76:8c:5f:55:3d:bb:82:35:b1:f7:77:ff:25:bf:66: 21:0d:36:de:b4:f9:7a:81:e3:1d:41:7b:19:75:3c: 3c:01:44:be:0e:08:f7:37:82:4c:4a:52:4d:8a:27: 4e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0E:06:FD:1A:84:E0:DD:B7:F3:C2:A9:EA:45:A8:C0:B0:1A:86:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:76:f5:b6:4a:8d:fb:89:3a:f5:4b:03:1c:d1:8b:31:c1:91: c3:91:b6:b4:58:79:82:72:9c:9b:16:6d:e7:89:9b:1e:c8:7e: f0:aa:f0:02:b0:c4:12:32:03:10:d6:13:35:28:8a:41:57:bd: bf:15:7a:57:5c:68:94:ec:82:3e:1b:e7:e3:ad:59:fa:c3:3c: f9:f5:83:8f:a0:c4:c1:55:7c:4e:44:4f:86:bd:e4:c6:7d:92: 77:1f:e4:7b:12:02:c9:c0:06:26:d0:7e:6f:56:3a:32:05:ee: 27:b8:1f:4d:67:2f:37:0c:12:77:7d:5c:36:e7:66:b3:4c:97: 23:a2:98:b5:46:04:00:32:ba:83:b0:75:0c:ad:e9:69:0d:4d: 58:b8:f3:c7:32:6f:f6:67:ed:32:50:83:51:3c:ae:c9:4c:45: c9:a5:d4:44:df:62:82:20:46:15:1c:32:e0:e7:1c:b4:12:2b: ab:66:2d:59:14:f0:2e:9d:95:23:d5:d8:a5:6d:a1:15:84:fb: e3:ce:bc:4a:79:de:2b:68:1e:a6:80:a5:a5:ea:56:07:28:b6: 5e:0b:c0:d3:bb:d1:76:76:92:14:9a:42:8d:86:54:0a:83:07: 15:32:d4:58:9f:ab:db:c2:04:e2:53:fd:77:13:49:68:e8:4f: c4:0e:21:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNk9Z1tGRJTI9ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk1NGVhMTktOGVlNy00ZWUwLWFlNTctMjFhMGM4ZjI2NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndI2Ai7geG5JSui+ZVCFmt7afTilCBqTynw2 1ig7tfwxMG/WWdN6e76V6s0eC5XznDf54dX7O+mrbmXHz5AVMrnl1+57Dmo6j/1E hpAN+TEPo4eNsXZaAsTZIsRzC7VqQbCp7l0o0eMjGCQWZ+4njSYIQNMJMLZEo1Be XpkOop7Bd6suv14WJ9CXCVZJDy+VmaFsZETnvlo3h2xMVuNDDOhlS15FnOBEeEEj eMPdoYG5EGJIPXfmyyclPPaIF2AGhrFE/aRjHPXrtAiikD2ktqt2jF9VPbuCNbH3 d/8lv2YhDTbetPl6geMdQXsZdTw8AUS+Dgj3N4JMSlJNiidOewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4OBv0ahODdt/PCqepFqMCwGoaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTEwYmU5MTktNjAxZi0z MTIwLWEzOTctMDM5NTVkMjliNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd29bZKjfuJOvVLAxzRizHBkcORtrRYeYJynJsWbeeJmx7IfvCq8AKw xBIyAxDWEzUoikFXvb8VeldcaJTsgj4b5+OtWfrDPPn1g4+gxMFVfE5ET4a95MZ9 kncf5HsSAsnABibQfm9WOjIF7ie4H01nLzcMEnd9XDbnZrNMlyOimLVGBAAyuoOw dQyt6WkNTVi488cyb/Zn7TJQg1E8rslMRcml1ETfYoIgRhUcMuDnHLQSK6tmLVkU 8C6dlSPV2KVtoRWE++POvEp53itoHqaApaXqVgcotl4LwNO70XZ2khSaQo2GVAqD BxUy1Fifq9vCBOJT/XcTSWjoT8QOIWA= -----END CERTIFICATE-----Generated at Thu Aug 21 18:52:20 2025 by rpki-client