$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json) Hash identifier: 7Ju7UbCzokjEgrEGxbi+NJdmOBtXKVjoILDHN8Onios= Subject key identifier: C1:9D:92:D7:F8:69:D6:E6:34:47:16:85:BC:46:73:92:92:5E:F4:FE Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584B8BE221B090276F6E05574380 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40627 IP address blocks: 199.68.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:21:b0:90:27:6f:6e:05:57:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=373068bf-84eb-4254-a374-a1d7caa20d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:ec:b1:1d:9a:1a:5b:5c:33:42:09:b5:1a: 9f:e7:22:e1:be:6c:35:3d:03:1a:48:e6:af:76:3e: 01:02:1f:d2:67:d0:8d:62:f1:81:ad:25:83:8b:f4: 16:27:6b:dd:25:9f:5f:90:e4:12:b7:01:51:e5:30: 1a:e4:90:08:ce:bd:2d:17:f3:1c:9e:f0:51:e3:13: 5c:0c:c5:4d:89:a5:10:ac:60:17:71:ba:9d:f1:d3: 58:c9:d1:9e:0d:63:b0:98:26:14:29:f1:fb:f3:00: c0:8d:fc:9d:67:ba:14:05:af:ea:05:88:d7:be:bf: be:be:f3:0f:3e:18:ea:d0:d7:41:70:63:e9:32:ac: db:23:e5:26:f4:c3:69:46:6a:09:41:9b:8e:17:e5: 39:1d:27:b4:f5:da:95:d0:00:ab:e1:6a:da:7b:83: ea:9f:e6:80:02:7f:c1:53:96:a9:fe:52:b6:6e:4e: 0d:2c:12:2d:1c:0a:7f:b2:e5:ad:48:df:18:ec:d2: 4d:da:64:a0:a4:87:88:74:61:96:03:b1:4d:06:23: 38:78:d0:6f:6e:9f:f4:0b:97:f6:69:3e:69:a4:54: 27:e1:36:5f:0d:eb:27:9c:17:3b:ac:e8:87:9d:5f: 8b:4b:59:dd:34:43:de:ac:71:e1:58:66:0b:08:36: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9D:92:D7:F8:69:D6:E6:34:47:16:85:BC:46:73:92:92:5E:F4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.68.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:46:46:fd:9e:d5:8c:f1:2c:23:50:fb:1f:75:4a:de:71:01: a7:df:1f:72:90:89:b9:15:53:82:d2:7f:0c:a2:cd:a8:0c:72: 81:17:8f:1a:ee:c1:a8:da:c3:80:de:9d:3b:d0:fb:e0:4d:2f: b6:ae:7d:14:f3:b8:b4:3b:3f:bf:13:3e:dc:83:86:f3:b2:13: 10:32:1e:c3:5b:11:26:d4:22:88:1a:6c:0f:00:04:99:72:a7: e5:16:40:69:82:18:8e:0a:87:cc:45:2c:98:f3:ed:77:30:be: 8e:d9:32:32:a6:d8:d1:5b:14:32:3a:a1:f5:94:c7:80:42:d3: d3:f5:a2:01:9f:cf:5d:91:bd:1b:7f:01:71:d3:71:ba:39:e6: 67:e9:57:c8:35:7e:13:3b:1a:64:39:6c:ac:b0:59:d7:4a:68: c7:d5:0a:7e:76:bb:3c:5d:b6:75:8a:4b:e4:f2:85:a7:e6:31: 80:3e:3d:f5:06:7d:64:44:69:0b:e8:1c:cd:10:39:54:2c:33: 4b:ea:ab:87:8c:49:30:e1:69:61:3a:4a:1c:75:83:74:f2:37: f2:79:e9:73:89:a5:67:df:22:56:cb:2c:d0:b8:b0:45:e5:50: d4:5a:fa:a0:6e:9c:49:96:49:33:9a:8b:37:0a:f9:4f:be:2c: f7:68:4f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iGwkCdvbgVXQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MzczMDY4YmYtODRlYi00MjU0LWEzNzQtYTFkN2NhYTIwZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQvssR2aGltcM0IJtRqf5yLhvmw1PQMaSOav dj4BAh/SZ9CNYvGBrSWDi/QWJ2vdJZ9fkOQStwFR5TAa5JAIzr0tF/McnvBR4xNc DMVNiaUQrGAXcbqd8dNYydGeDWOwmCYUKfH78wDAjfydZ7oUBa/qBYjXvr++vvMP Phjq0NdBcGPpMqzbI+Um9MNpRmoJQZuOF+U5HSe09dqV0ACr4Wrae4Pqn+aAAn/B U5ap/lK2bk4NLBItHAp/suWtSN8Y7NJN2mSgpIeIdGGWA7FNBiM4eNBvbp/0C5f2 aT5ppFQn4TZfDesnnBc7rOiHnV+LS1ndNEPerHHhWGYLCDbRDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGdktf4adbmNEcWhbxGc5KSXvT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNWU4ZDNjNGUtNTYwMC0z MTRmLTkwYjUtNjlkN2NhNDRkNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpGRv2e1YzxLCNQ+x91St5xAaffH3KQibkVU4LSfwyizagMcoEXjxru wajaw4DenTvQ++BNL7aufRTzuLQ7P78TPtyDhvOyExAyHsNbESbUIogabA8ABJly p+UWQGmCGI4Kh8xFLJjz7Xcwvo7ZMjKm2NFbFDI6ofWUx4BC09P1ogGfz12RvRt/ AXHTcbo55mfpV8g1fhM7GmQ5bKywWddKaMfVCn52uzxdtnWKS+TyhafmMYA+PfUG fWREaQvoHM0QOVQsM0vqq4eMSTDhaWE6Shx1g3TyN/J56XOJpWffIlbLLNC4sEXl UNRa+qBunEmWSTOaizcK+U++LPdoTzY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:56 2025 by rpki-client