$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa File: a0f53c24-196c-3044-ab68-255cff40ec0c.roa (raw, json) Hash identifier: lmKGCF+2KmIZ9ykmZcrC/XAl73rXrvFRic33+Agb3/k= Subject key identifier: 83:0A:C4:46:2D:81:3A:45:79:FC:F6:D2:6F:25:98:FB:5B:B7:2A:A2 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584F2D87B8145D3BD06E9C139C00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 40627 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b8:14:5d:3b:d0:6e:9c:13:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=92731a78-cf33-48a2-bc77-afb1d5ce59ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:2e:58:f8:ae:44:c0:81:18:14:ae:90:0c: 77:ff:be:51:4a:81:8c:5d:c6:e2:cb:e4:66:78:5a: 2d:e5:04:c1:83:73:3b:78:6b:b8:54:34:03:05:8a: e8:4d:a9:56:fd:a8:01:32:b1:48:a6:6f:ed:9d:92: 64:00:76:c7:90:e9:46:58:68:03:39:aa:d6:16:12: 2a:9b:5c:63:d9:d3:41:fa:70:3f:18:51:be:7b:31: 04:21:ba:51:72:95:5f:08:98:7e:6b:a1:75:6f:90: 7a:d3:1c:a0:a2:12:ae:33:28:7d:41:bb:8b:cd:53: e0:f9:04:c5:19:57:0c:4b:74:a5:13:24:0f:e6:7a: 9b:0b:93:50:26:8f:22:63:57:aa:8f:d7:dc:53:5b: f4:11:a5:d6:77:fa:a4:2c:fa:86:da:7b:8c:4f:35: 36:57:e1:db:ec:0f:c7:a9:1d:08:5c:61:b9:c7:65: aa:a1:97:a3:bc:d3:1c:6c:b6:5e:4e:08:77:c3:3a: b9:68:81:ba:99:39:9a:2b:d4:bf:4c:79:1e:fd:85: 16:7a:55:61:80:c4:36:6a:73:8a:49:35:ab:cf:99: fb:91:fc:5e:2c:50:ab:c6:f2:8a:ca:ab:a5:35:c9: 7b:23:1c:f0:eb:f8:f0:43:86:80:84:fb:07:10:14: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:C4:46:2D:81:3A:45:79:FC:F6:D2:6F:25:98:FB:5B:B7:2A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a0f53c24-196c-3044-ab68-255cff40ec0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ba:1e:7f:e2:53:34:ad:fd:9f:de:85:e2:b7:e9:88:e6:c2: 01:86:b3:fa:c9:10:bf:17:96:83:38:ad:8d:87:b5:77:cc:fd: 80:57:4f:7f:d1:9b:67:3c:d5:00:7c:d1:72:86:9a:e7:ae:38: e9:6a:ae:48:34:ea:bd:13:c8:67:6c:55:b1:a2:37:d3:88:1e: 7a:c4:1e:5d:5f:27:0b:c6:3a:ed:f8:0e:bb:e2:28:b9:f4:22: 87:41:9d:0a:4f:96:60:f0:bc:19:82:86:c7:ea:71:bd:82:59: f6:34:34:8e:9a:61:bd:1b:db:dc:4b:6a:40:c0:f0:90:7e:78: d5:40:06:93:3e:70:05:f7:d2:6b:61:da:27:c3:b5:24:ee:53: cf:ca:76:51:49:36:68:41:81:31:a7:1b:54:4a:e4:15:6f:4a: 83:99:79:c6:57:3d:90:1f:c1:4c:13:2c:b1:2d:73:80:6b:b4: 11:1a:89:88:3b:29:64:c7:7a:53:b3:79:8c:ef:c4:80:2f:a1: 30:23:50:cd:bb:31:f4:23:df:67:c2:59:e9:f5:07:ab:ac:86: 30:0a:2b:67:e1:2f:22:c1:de:5d:44:3f:9c:a3:90:de:37:91: 5b:46:09:26:70:f1:b7:de:c3:16:99:78:0c:23:7a:fa:f1:b1: 2c:2b:d1:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7gUXTvQbpwTnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk OTI3MzFhNzgtY2YzMy00OGEyLWJjNzctYWZiMWQ1Y2U1OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZsuWPiuRMCBGBSukAx3/75RSoGMXcbiy+Rm eFot5QTBg3M7eGu4VDQDBYroTalW/agBMrFIpm/tnZJkAHbHkOlGWGgDOarWFhIq m1xj2dNB+nA/GFG+ezEEIbpRcpVfCJh+a6F1b5B60xygohKuMyh9QbuLzVPg+QTF GVcMS3SlEyQP5nqbC5NQJo8iY1eqj9fcU1v0EaXWd/qkLPqG2nuMTzU2V+Hb7A/H qR0IXGG5x2WqoZejvNMcbLZeTgh3wzq5aIG6mTmaK9S/THke/YUWelVhgMQ2anOK STWrz5n7kfxeLFCrxvKKyqulNcl7Ixzw6/jwQ4aAhPsHEBTOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMKxEYtgTpFefz20m8lmPtbtyqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYTBmNTNjMjQtMTk2Yy0z MDQ0LWFiNjgtMjU1Y2ZmNDBlYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK26Hn/iUzSt/Z/eheK36YjmwgGGs/rJEL8XloM4rY2HtXfM/YBXT3/R m2c81QB80XKGmueuOOlqrkg06r0TyGdsVbGiN9OIHnrEHl1fJwvGOu34DrviKLn0 IodBnQpPlmDwvBmChsfqcb2CWfY0NI6aYb0b29xLakDA8JB+eNVABpM+cAX30mth 2ifDtSTuU8/KdlFJNmhBgTGnG1RK5BVvSoOZecZXPZAfwUwTLLEtc4BrtBEaiYg7 KWTHelOzeYzvxIAvoTAjUM27MfQj32fCWen1B6ushjAKK2fhLyLB3l1EP5yjkN43 kVtGCSZw8bfewxaZeAwjevrxsSwr0ec= -----END CERTIFICATE-----Generated at Sun Sep 27 17:24:08 2026 by rpki-client