$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json) Hash identifier: Hk3UMsVSdz4W1emQqUaWSYQHhdSEZBg0gFAKUnAN7OU= Subject key identifier: D2:78:C7:69:20:A6:1C:85:1E:ED:42:A5:C1:C5:8A:B2:CB:EB:15:18 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584B8EACDA6C12567B42C5FBF100 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 40627 IP address blocks: 66.81.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:da:6c:12:56:7b:42:c5:fb:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=2245910a-2f80-4a3f-ae4f-2774a2834819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:8e:07:83:8a:7b:8b:08:62:f3:4f:1d:03: db:83:d7:bb:20:98:bc:c2:3e:69:05:c6:b3:97:e1: 11:b2:87:09:52:07:6c:73:bb:a3:b9:46:8c:43:bd: ff:ec:39:5e:5a:e9:1a:f2:72:df:e7:68:f4:81:e0: a9:be:52:2a:b8:ac:b3:07:12:3d:6e:d8:11:36:01: e3:ba:34:7d:8d:32:fe:b7:71:9e:96:f2:36:50:3b: 7f:82:5a:3f:38:d8:02:1b:3f:36:75:bc:31:73:78: 67:1b:b6:c8:ca:f4:85:5f:61:5f:1c:f8:6e:c3:4b: 56:57:d5:76:02:e5:57:b5:2a:01:f8:e0:d4:e5:b3: fe:e2:4d:2f:c2:5d:81:cd:1e:e4:b6:0a:bd:13:7d: cb:a3:5f:ed:cd:b3:35:95:9a:42:de:4d:7e:43:5c: fe:82:44:0c:9a:34:a8:84:de:7a:8d:34:36:8b:2a: 08:44:7e:e3:98:08:4b:7c:57:14:67:05:71:33:6e: 79:11:dd:ed:80:14:54:46:f6:5c:fb:76:a2:a1:44: 48:21:1e:04:24:e5:3d:a7:35:a6:af:df:d9:a3:db: 35:ef:3c:41:dd:35:87:3d:70:63:a2:74:81:f4:83: a0:99:90:0e:18:f1:63:4e:21:2e:57:c9:e2:bb:44: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:78:C7:69:20:A6:1C:85:1E:ED:42:A5:C1:C5:8A:B2:CB:EB:15:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0d:90:81:d2:bb:9e:55:7f:a0:13:df:ff:81:a6:a8:ef:11: b1:57:51:7e:b8:eb:aa:01:43:ae:96:bc:a5:a0:cd:fd:b6:0c: 10:a3:79:83:74:e6:7d:5e:fc:22:f8:39:94:40:f6:a1:77:81: 25:51:49:39:b4:a7:1d:c0:95:e3:bc:82:b0:fc:6d:b2:34:eb: 19:7a:ae:c3:ef:2c:0d:b0:40:ed:1a:b3:41:9a:ec:6e:49:84: 22:d0:d2:e1:ed:99:09:9d:f0:dc:8a:bb:b8:7b:48:0c:f6:e4: a3:d4:a1:c7:3e:90:86:d9:fd:c8:35:ed:35:b5:51:9b:69:1a: 41:2a:b0:5b:0b:0b:79:dd:18:43:97:1b:6b:63:dc:3e:9e:74: d6:54:0f:04:ff:4a:f0:c0:86:fc:d9:27:a9:c1:2d:64:40:50: 4d:03:17:14:b5:cf:44:b2:a7:2f:6d:66:26:35:40:36:07:52: 23:33:1d:54:93:aa:15:19:31:cf:57:92:2b:b3:f5:70:73:1e: f1:8d:1a:3b:c3:b8:0e:24:43:aa:e1:23:96:a3:62:91:de:07: ac:29:d0:00:33:1e:10:6f:77:5e:66:63:a3:11:62:d9:8e:f2: 75:12:9b:bb:d3:2b:fd:b0:48:97:c7:7f:91:78:54:e3:65:0a: 11:c4:c5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNpsElZ7QsX78QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjI0NTkxMGEtMmY4MC00YTNmLWFlNGYtMjc3NGEyODM0ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdWOB4OKe4sIYvNPHQPbg9e7IJi8wj5pBcaz l+ERsocJUgdsc7ujuUaMQ73/7DleWuka8nLf52j0geCpvlIquKyzBxI9btgRNgHj ujR9jTL+t3GelvI2UDt/glo/ONgCGz82dbwxc3hnG7bIyvSFX2FfHPhuw0tWV9V2 AuVXtSoB+ODU5bP+4k0vwl2BzR7ktgq9E33Lo1/tzbM1lZpC3k1+Q1z+gkQMmjSo hN56jTQ2iyoIRH7jmAhLfFcUZwVxM255Ed3tgBRURvZc+3aioURIIR4EJOU9pzWm r9/Zo9s17zxB3TWHPXBjonSB9IOgmZAOGPFjTiEuV8niu0S8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ4x2kgphyFHu1CpcHFirLL6xUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMjU5MDY1N2EtZDc5OS0z MTY5LWI3YTgtZDQwYjE1NDI5ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0NkIHSu55Vf6AT3/+BpqjvEbFXUX6466oBQ66WvKWgzf22DBCjeYN0 5n1e/CL4OZRA9qF3gSVRSTm0px3AleO8grD8bbI06xl6rsPvLA2wQO0as0Ga7G5J hCLQ0uHtmQmd8NyKu7h7SAz25KPUocc+kIbZ/cg17TW1UZtpGkEqsFsLC3ndGEOX G2tj3D6edNZUDwT/SvDAhvzZJ6nBLWRAUE0DFxS1z0Sypy9tZiY1QDYHUiMzHVST qhUZMc9Xkiuz9XBzHvGNGjvDuA4kQ6rhI5ajYpHeB6wp0AAzHhBvd15mY6MRYtmO 8nUSm7vTK/2wSJfHf5F4VONlChHExY4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:02 2025 by rpki-client