$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa File: e242c2b3-77a9-3afd-b359-a2a88e22709d.roa (raw, json) Hash identifier: yK+8mLiLyDJ1vcnoKvb4WVYcbUFvfupl0kfwouN3o4s= Subject key identifier: DF:E0:51:2C:1F:8F:15:78:CA:C6:93:3F:D3:B6:CB:0D:AE:D1:0B:2A Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584EFE12198DB64E16167118EB00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 40627 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:19:8d:b6:4e:16:16:71:18:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=ce303885-241b-4616-bd94-aed2c594f726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:a8:d6:f0:59:7f:80:6b:0e:4b:22:c8:7f: 98:9d:20:93:30:5b:75:81:18:64:ab:a9:b6:51:3b: 23:35:23:14:e9:21:07:ed:b1:75:38:d2:cf:14:07: 60:94:38:53:5f:9a:6f:8a:d5:70:c2:cb:53:ef:70: d0:d4:5e:f0:73:18:0c:27:18:26:6d:de:a2:3e:d0: 69:2d:04:fc:88:16:0c:71:06:e3:a2:41:2b:3a:a2: 32:a4:f6:d4:32:c5:01:8f:5e:15:5b:a0:5d:66:58: 96:20:99:fa:61:1a:4b:91:9d:ba:d7:9b:41:a3:1c: b9:d7:33:f3:43:f8:b6:db:2d:1c:e7:31:93:82:22: 86:e1:ca:53:68:f3:b4:33:d1:ec:87:43:bb:54:88: ef:99:2e:98:6c:92:ab:ff:61:07:ea:d3:ac:96:12: ec:e0:d5:39:d4:12:16:62:10:fa:4a:53:d3:c0:84: b5:84:1a:68:a1:3b:3f:4d:4d:6e:9f:08:d6:8e:a3: 1b:e7:6e:3e:20:c8:d9:66:c0:35:24:5f:07:0f:57: 32:e8:49:ba:a4:f3:92:b1:3c:41:f8:67:ae:e2:69: db:e0:62:4e:2c:08:f4:60:7f:ed:a3:77:92:9c:7b: d4:45:bb:84:c2:b4:ec:1a:34:01:01:d2:aa:b8:6c: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:51:2C:1F:8F:15:78:CA:C6:93:3F:D3:B6:CB:0D:AE:D1:0B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:b7:d1:cb:d5:da:1e:4d:85:48:07:89:fe:a7:f7:d8:1e: 7e:2f:89:ad:20:8e:90:f6:7a:b7:d7:7e:b2:c1:65:50:84:f7: 9d:58:f1:b3:d2:34:ed:c2:14:6c:61:f4:ef:33:b9:cc:04:16: 4e:cf:57:9f:9f:ec:65:27:a6:ae:a0:88:ff:cc:5b:d2:b8:cb: 97:e2:b8:af:38:12:d0:de:51:28:d1:df:15:c9:54:fe:b7:0b: c8:e2:2e:e8:b5:9d:92:49:62:a9:d7:16:0d:b9:10:c8:5a:1d: e0:ab:25:28:ab:fd:38:24:63:83:ba:a0:1c:d4:de:03:cd:0b: 6b:ef:a4:d6:25:3c:97:73:a1:f0:67:aa:fb:be:31:3c:47:89: 67:11:09:1a:93:a2:92:bd:d2:df:05:29:ca:6f:b3:86:0e:82: f6:fe:8a:6a:51:bf:d8:e6:30:39:aa:4c:d5:91:6c:09:b7:bd: 1e:11:13:fb:9a:24:5e:e5:04:86:8d:d1:96:f2:77:24:bf:72: cb:32:cb:9d:8a:70:02:61:46:8b:7c:58:49:9a:81:c4:8d:69: b3:c4:9e:d9:94:dc:87:7f:11:fb:51:82:a1:8f:b9:41:fc:34: f4:6d:27:78:28:aa:17:73:6a:8a:78:2c:0b:ad:d2:dc:cd:96: e0:cb:f9:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhmNtk4WFnEY6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2UzMDM4ODUtMjQxYi00NjE2LWJkOTQtYWVkMmM1OTRmNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Ko1vBZf4BrDksiyH+YnSCTMFt1gRhkq6m2 UTsjNSMU6SEH7bF1ONLPFAdglDhTX5pvitVwwstT73DQ1F7wcxgMJxgmbd6iPtBp LQT8iBYMcQbjokErOqIypPbUMsUBj14VW6BdZliWIJn6YRpLkZ2615tBoxy51zPz Q/i22y0c5zGTgiKG4cpTaPO0M9Hsh0O7VIjvmS6YbJKr/2EH6tOslhLs4NU51BIW YhD6SlPTwIS1hBpooTs/TU1unwjWjqMb524+IMjZZsA1JF8HD1cy6Em6pPOSsTxB +Geu4mnb4GJOLAj0YH/to3eSnHvURbuEwrTsGjQBAdKquGxDqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/gUSwfjxV4ysaTP9O2yw2u0QsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTI0MmMyYjMtNzdhOS0z YWZkLWIzNTktYTJhODhlMjI3MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESLt9HL1doeTYVIB4n+p/fYHn4via0gjpD2erfXfrLBZVCE951Y8bPS NO3CFGxh9O8zucwEFk7PV5+f7GUnpq6giP/MW9K4y5fiuK84EtDeUSjR3xXJVP63 C8jiLui1nZJJYqnXFg25EMhaHeCrJSir/TgkY4O6oBzU3gPNC2vvpNYlPJdzofBn qvu+MTxHiWcRCRqTopK90t8FKcpvs4YOgvb+impRv9jmMDmqTNWRbAm3vR4RE/ua JF7lBIaN0ZbydyS/cssyy52KcAJhRot8WEmagcSNabPEntmU3Id/EftRgqGPuUH8 NPRtJ3goqhdzaop4LAut0tzNluDL+RA= -----END CERTIFICATE-----Generated at Fri Sep 25 09:10:08 2026 by rpki-client