$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json) Hash identifier: pJOM+RgQwyD26YlzmVTJcmNEMPEG7k5pJXl25RP1fVk= Subject key identifier: 5E:16:2B:70:B0:80:B4:B7:34:38:B8:85:18:4D:AB:8C:9A:19:BD:F1 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584DAC456BA23F9B97C1CBAE8580 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 209242 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6b:a2:3f:9b:97:c1:cb:ae:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=9510e1cd-d720-4dd6-a412-429c32d01d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1f:1c:ce:04:ee:22:b2:ed:d0:3f:e8:80:25: 5c:2a:ea:10:c2:f0:ae:3b:df:76:d0:af:ed:30:04: 9b:89:49:ef:24:97:16:b6:f0:29:b5:e7:dd:7e:f5: 24:a1:14:d2:4f:71:14:c2:00:eb:82:9a:02:16:25: a6:f6:73:b2:7c:05:09:f8:fe:9c:fe:7a:a0:99:b7: 14:40:67:33:19:58:a4:aa:5e:11:48:c5:13:3a:b6: 28:cc:84:31:5f:a1:c6:77:78:e7:7a:cf:56:f4:ab: ab:2a:5a:44:96:81:27:d4:b4:78:49:5d:ec:5d:54: e2:c3:2c:24:a2:08:d9:b5:0b:05:e9:4a:c8:a1:06: 7c:89:94:a4:74:97:95:5a:d7:81:48:ef:c1:7b:a0: 48:98:f1:9a:52:84:5f:83:9e:cb:8b:b8:50:41:b2: 9b:77:2f:bf:93:ad:66:da:41:68:b9:2b:9f:66:c4: 1b:5b:fa:d7:81:b9:e3:68:50:01:06:ed:1d:86:2e: b8:3e:9f:c6:51:ef:5d:b3:ea:df:f4:39:07:48:da: ab:e6:f2:d7:46:f5:cf:a1:2c:0e:32:77:c5:ba:f6: 2b:20:64:3f:63:16:97:89:a9:55:5d:d4:08:f3:ed: df:6b:67:e8:14:23:f4:1b:bc:21:ed:33:58:bc:11: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:16:2B:70:B0:80:B4:B7:34:38:B8:85:18:4D:AB:8C:9A:19:BD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:96:25:c6:de:4d:d2:32:ee:7a:67:10:32:4b:ef:ef:1a:0b: 56:35:52:87:11:98:55:c2:41:d9:76:a5:56:f1:76:4a:40:f6: 45:46:91:71:0e:c1:2f:7f:6a:a9:6c:d9:1c:e0:b9:86:c7:24: b3:b6:e4:22:7b:75:df:a2:f0:cb:f4:83:af:ef:5b:ea:73:19: 83:63:be:81:e2:b5:51:00:32:dc:c6:68:9d:6c:d9:6d:9c:62: df:2d:62:5d:10:82:aa:66:6b:6d:29:e8:56:7f:48:fd:e7:5c: ff:31:22:fb:80:5e:78:37:74:32:b9:35:c9:65:73:f3:3b:42: b0:f2:84:6f:d3:43:8d:19:8d:ae:26:2a:be:bb:cd:48:75:0d: 52:42:2d:ba:05:bf:80:24:98:60:50:42:1b:8d:8b:6f:83:77: 3e:1a:ca:96:e3:11:b0:07:dc:c5:33:11:85:b9:37:45:c5:49: b3:7a:48:64:3e:c1:87:55:dc:1f:5f:a6:ff:46:6a:d5:14:d0: f5:f6:00:24:55:e5:8a:da:0b:79:0d:b7:16:6a:1a:8a:b0:44: ab:65:0b:11:11:11:d1:fd:ca:19:79:fc:87:b5:b4:ff:74:04: f6:44:6e:5d:72:5b:d1:d1:a8:1f:82:a7:c3:b7:99:80:46:e1: 1c:93:f1:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWuiP5uXwcuuhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OTUxMGUxY2QtZDcyMC00ZGQ2LWE0MTItNDI5YzMyZDAxZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx8czgTuIrLt0D/ogCVcKuoQwvCuO9920K/t MASbiUnvJJcWtvAptefdfvUkoRTST3EUwgDrgpoCFiWm9nOyfAUJ+P6c/nqgmbcU QGczGVikql4RSMUTOrYozIQxX6HGd3jnes9W9KurKlpEloEn1LR4SV3sXVTiwywk ogjZtQsF6UrIoQZ8iZSkdJeVWteBSO/Be6BImPGaUoRfg57Li7hQQbKbdy+/k61m 2kFouSufZsQbW/rXgbnjaFABBu0dhi64Pp/GUe9ds+rf9DkHSNqr5vLXRvXPoSwO MnfFuvYrIGQ/YxaXialVXdQI8+3fa2foFCP0G7wh7TNYvBFhBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4WK3CwgLS3NDi4hRhNq4yaGb3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvODk0YTk1ZDUtOGQ3ZS0z MjRmLTg2ZGMtOTk2Nzc5YWJjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaWJcbeTdIy7npnEDJL7+8aC1Y1UocRmFXCQdl2pVbxdkpA9kVGkXEO wS9/aqls2RzguYbHJLO25CJ7dd+i8Mv0g6/vW+pzGYNjvoHitVEAMtzGaJ1s2W2c Yt8tYl0Qgqpma20p6FZ/SP3nXP8xIvuAXng3dDK5Ncllc/M7QrDyhG/TQ40Zja4m Kr67zUh1DVJCLboFv4AkmGBQQhuNi2+Ddz4aypbjEbAH3MUzEYW5N0XFSbN6SGQ+ wYdV3B9fpv9GatUU0PX2ACRV5YraC3kNtxZqGoqwRKtlCxEREdH9yhl5/Ie1tP90 BPZEbl1yW9HRqB+Cp8O3mYBG4RyT8bw= -----END CERTIFICATE-----Generated at Wed May 13 07:48:01 2026 by rpki-client