$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa File: e242c2b3-77a9-3afd-b359-a2a88e22709d.roa (raw, json) Hash identifier: 50TExn+u5V1yVlnTPeV7z15Jh/GMYQ5qSrOhBzFWd5Y= Subject key identifier: 8B:BD:22:3A:EA:78:C9:EF:D7:48:8C:82:83:50:1F:D2:67:E8:FA:4A Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584BBA103669056EDCB35F6E77E0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 40627 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:36:69:05:6e:dc:b3:5f:6e:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=659f8bff-3581-4199-a51b-4e75b57d9ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:f8:8f:d6:7d:04:76:92:03:7f:d7:65:1e: b5:6a:e6:99:f0:c4:c6:42:fe:2d:f2:6f:a5:d8:6f: 64:dc:2d:dc:74:08:3f:d6:19:06:fe:74:1c:f6:73: 6d:12:19:d1:b6:43:91:4b:82:8d:fd:10:47:9e:49: f8:0f:22:9c:d7:71:fe:40:e8:a4:db:cd:28:36:23: dd:0b:23:38:60:b1:6f:5a:00:e2:9b:be:0c:26:47: aa:1c:1d:66:a1:64:ba:9d:58:2d:d8:6d:5e:51:06: 83:4e:68:7c:4a:c0:ac:be:33:2f:b2:49:8a:32:ba: 27:34:80:bc:b8:bd:29:a7:4a:9b:32:6f:aa:ca:7f: 60:2e:a1:0a:34:36:33:c2:8a:7b:0c:96:39:3b:eb: 9b:4d:1f:21:9f:4b:50:23:3f:a4:8e:c6:0b:86:a7: 28:f2:59:fb:46:3a:25:87:35:52:c3:ec:2c:91:03: 2c:cc:7b:5e:00:33:a5:b2:67:87:e7:4f:43:3a:78: a1:3c:1c:19:f7:6e:81:d7:10:35:81:7f:33:f1:c7: 45:c5:36:4f:89:2d:19:09:27:53:57:e6:0a:7f:f3: c7:32:e2:d3:33:04:cd:c0:49:c8:41:78:c3:e5:fc: 17:a7:62:2f:9f:1d:1b:58:5d:18:85:73:bf:28:29: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BD:22:3A:EA:78:C9:EF:D7:48:8C:82:83:50:1F:D2:67:E8:FA:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e2:ee:47:9c:72:53:78:b9:bb:b5:25:a0:4a:10:b2:75:99: cf:74:cb:df:ab:e7:e7:ae:ff:96:ec:ff:74:07:53:40:c0:da: 59:e1:da:6b:f6:88:11:fd:94:c1:b9:26:24:85:d9:cb:50:28: 80:b3:1f:ad:81:7e:48:ed:cf:f9:4d:c7:50:73:b4:81:76:fe: cb:c5:49:80:a8:f4:14:a5:80:88:7a:27:b1:d8:bd:01:09:6e: 8e:d4:0a:35:7e:c1:6a:a5:42:94:d6:ea:09:ca:4c:4f:07:fe: 46:e8:a6:59:7a:a4:d2:93:1e:b1:84:cf:d9:b7:c1:09:0c:55: c8:b1:07:4c:25:cf:ba:e9:16:2b:30:d5:30:88:81:6e:cb:24: 16:14:10:69:11:57:24:a1:fb:19:37:b5:a3:df:f0:c6:ec:c7: 29:b7:b0:52:58:9e:d4:1b:d9:c1:88:2a:fd:be:7a:40:79:2e: 8e:62:bc:2c:09:ef:be:5f:28:0f:4e:0e:85:b1:a0:e0:66:9b: c2:fd:02:e9:fe:ce:fc:91:56:20:50:5f:3c:7f:94:50:29:37: 10:81:d4:a9:ed:8c:e6:75:f4:35:1f:f2:41:74:0f:38:34:3c: 07:b5:c1:f6:72:8c:8a:39:36:7b:f8:57:af:61:c1:8f:f8:47: 79:e2:fc:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDZpBW7cs19ud+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NjU5ZjhiZmYtMzU4MS00MTk5LWE1MWItNGU3NWI1N2Q5ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEr4j9Z9BHaSA3/XZR61auaZ8MTGQv4t8m+l 2G9k3C3cdAg/1hkG/nQc9nNtEhnRtkORS4KN/RBHnkn4DyKc13H+QOik280oNiPd CyM4YLFvWgDim74MJkeqHB1moWS6nVgt2G1eUQaDTmh8SsCsvjMvskmKMronNIC8 uL0pp0qbMm+qyn9gLqEKNDYzwop7DJY5O+ubTR8hn0tQIz+kjsYLhqco8ln7Rjol hzVSw+wskQMszHteADOlsmeH509DOnihPBwZ926B1xA1gX8z8cdFxTZPiS0ZCSdT V+YKf/PHMuLTMwTNwEnIQXjD5fwXp2Ivnx0bWF0YhXO/KCkCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu9IjrqeMnv10iMgoNQH9Jn6PpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTI0MmMyYjMtNzdhOS0z YWZkLWIzNTktYTJhODhlMjI3MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHi7kecclN4ubu1JaBKELJ1mc90y9+r5+eu/5bs/3QHU0DA2lnh2mv2 iBH9lMG5JiSF2ctQKICzH62Bfkjtz/lNx1BztIF2/svFSYCo9BSlgIh6J7HYvQEJ bo7UCjV+wWqlQpTW6gnKTE8H/kbopll6pNKTHrGEz9m3wQkMVcixB0wlz7rpFisw 1TCIgW7LJBYUEGkRVySh+xk3taPf8Mbsxym3sFJYntQb2cGIKv2+ekB5Lo5ivCwJ 775fKA9ODoWxoOBmm8L9Aun+zvyRViBQXzx/lFApNxCB1KntjOZ19DUf8kF0Dzg0 PAe1wfZyjIo5Nnv4V69hwY/4R3ni/AM= -----END CERTIFICATE-----Generated at Mon Nov 3 06:36:21 2025 by rpki-client