$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json) Hash identifier: i2U8h3tq58Qsq/USzRLdOSEuG/dMe0bo56vuGqwmM/c= Subject key identifier: 12:2C:82:B8:E7:36:3C:75:11:B2:71:9D:CC:45:85:EA:57:EE:5C:F5 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584F2EED0AF5C0FC704069168C80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 209242 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0a:f5:c0:fc:70:40:69:16:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=79944a77-c525-4b27-b3c7-81f8e3a35c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:b3:72:34:e3:b1:95:03:81:8a:26:f7:f2: a8:54:9f:38:4e:9b:0e:4d:a2:94:47:f5:0a:77:b9: 7e:39:b6:2a:60:6d:e8:52:4f:44:c3:dd:77:db:3a: a0:b5:9e:c9:d6:d8:46:39:9f:ae:75:ec:24:82:b4: fd:e8:06:c0:28:b3:60:3a:ac:58:1d:27:d8:37:d3: 02:f0:42:35:a5:65:fa:f9:4a:06:4c:b8:dc:fd:d1: 18:15:0d:82:5f:38:e5:fc:c5:3e:64:5b:25:46:1f: 5c:1f:f0:3a:e1:0c:b1:c8:a7:28:cd:fb:48:b2:45: 8e:d3:48:56:5f:ba:e3:80:d0:c7:2a:3c:a3:d9:f9: ae:43:32:49:84:c6:06:c8:fd:f7:10:fd:c3:97:af: 33:dc:d6:1a:4d:15:dc:19:12:16:fa:03:ff:78:35: b6:a4:90:f5:a1:2c:b9:64:3c:92:87:29:f3:cb:81: a9:7d:7d:8e:52:bc:fa:f8:38:1d:d3:2c:20:7b:39: 12:a3:ad:2f:fa:b6:c1:aa:ed:9a:c0:75:ff:b2:15: c5:a1:2a:3b:78:a8:8b:16:a3:c1:4a:2b:fe:bd:6d: dc:f3:66:31:69:dd:57:57:ea:39:7c:e7:f8:17:10: 29:a9:11:0d:c6:60:c3:b2:4a:8a:f5:16:7a:a8:76: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:82:B8:E7:36:3C:75:11:B2:71:9D:CC:45:85:EA:57:EE:5C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6a:f0:48:80:7c:ec:4c:39:64:8f:aa:8d:4b:b1:9a:7c:c7: 05:b4:13:58:47:f1:07:77:6c:44:41:21:5c:5e:40:0a:cc:cf: 22:8d:cf:5a:67:1b:f5:22:fd:1b:63:df:28:5b:24:aa:66:bd: 27:cb:03:4b:c0:ea:c3:a8:b5:76:88:bb:6a:65:f1:0f:54:92: 9a:1f:68:de:b0:b7:d8:de:24:3b:ef:82:7d:0c:60:bc:4b:ec: 86:25:1e:29:4f:67:8b:e6:c0:54:89:b6:7d:aa:70:ef:56:36: ce:8d:26:18:23:18:f5:d6:9c:dc:13:99:2e:c6:8e:8d:ad:2e: df:31:37:cd:60:5e:b7:e8:b4:4b:98:aa:1a:a9:85:30:e4:cb: 8b:a8:b6:31:92:0d:18:b5:60:a9:9f:42:11:53:e7:d3:a0:d8: 72:6a:12:c7:dd:88:81:8c:02:c8:d8:e0:a7:65:1b:be:33:79: 3b:b6:1f:d0:53:d9:3b:ab:00:3e:5c:88:88:4d:46:71:84:a8: 49:2b:f2:df:ca:6a:e5:3a:9f:30:d1:6a:25:24:47:5b:d6:e0: 59:2b:7d:6c:4e:d7:3a:5e:41:68:bd:35:03:ac:a3:65:ba:03: cf:92:f1:5a:7b:a3:f8:9e:b6:d5:50:7b:da:bd:20:02:d8:e7: 2d:b7:3a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Qr1wPxwQGkWjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk Nzk5NDRhNzctYzUyNS00YjI3LWIzYzctODFmOGUzYTM1YzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0GzcjTjsZUDgYom9/KoVJ84TpsOTaKUR/UK d7l+ObYqYG3oUk9Ew9132zqgtZ7J1thGOZ+udewkgrT96AbAKLNgOqxYHSfYN9MC 8EI1pWX6+UoGTLjc/dEYFQ2CXzjl/MU+ZFslRh9cH/A64QyxyKcozftIskWO00hW X7rjgNDHKjyj2fmuQzJJhMYGyP33EP3Dl68z3NYaTRXcGRIW+gP/eDW2pJD1oSy5 ZDyShynzy4GpfX2OUrz6+Dgd0ywgezkSo60v+rbBqu2awHX/shXFoSo7eKiLFqPB Siv+vW3c82Yxad1XV+o5fOf4FxApqRENxmDDskqK9RZ6qHYNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIsgrjnNjx1EbJxncxFhepX7lz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvODk0YTk1ZDUtOGQ3ZS0z MjRmLTg2ZGMtOTk2Nzc5YWJjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5q8EiAfOxMOWSPqo1LsZp8xwW0E1hH8Qd3bERBIVxeQArMzyKNz1pn G/Ui/Rtj3yhbJKpmvSfLA0vA6sOotXaIu2pl8Q9UkpofaN6wt9jeJDvvgn0MYLxL 7IYlHilPZ4vmwFSJtn2qcO9WNs6NJhgjGPXWnNwTmS7Gjo2tLt8xN81gXrfotEuY qhqphTDky4uotjGSDRi1YKmfQhFT59Og2HJqEsfdiIGMAsjY4KdlG74zeTu2H9BT 2TurAD5ciIhNRnGEqEkr8t/KauU6nzDRaiUkR1vW4FkrfWxO1zpeQWi9NQOso2W6 A8+S8Vp7o/iettVQe9q9IALY5y23Oog= -----END CERTIFICATE-----Generated at Thu Sep 24 09:18:35 2026 by rpki-client