$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json) Hash identifier: cj++pRq5U8hmB2US2nQQ+AweuUVItAgzKuh+FfZGefE= Subject key identifier: DC:AC:7A:4A:A4:A6:F7:86:F5:54:A3:EF:CA:BE:DF:71:D5:3F:6B:36 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584AADF11166507413BF278E7C80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 40627 IP address blocks: 66.81.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:11:66:50:74:13:bf:27:8e:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=26e87cd0-14f3-41ac-821e-dbe65313d2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:3e:9a:d6:1e:2a:05:51:df:a7:e2:b3:4a: a8:56:5e:02:dd:56:3a:c8:93:8b:d8:a2:53:9b:01: d3:83:4e:ef:c6:61:30:55:45:a1:53:01:a9:b2:ca: e7:28:9a:07:53:0d:78:fb:3c:2f:37:ef:b4:fe:9b: c8:51:c9:28:a2:72:7e:89:16:c7:c3:90:90:96:9d: 2b:40:27:54:e7:66:ad:94:74:91:2e:4a:22:31:28: 3f:a1:51:b7:f0:f9:7e:e1:2a:14:f5:06:e0:f4:5f: be:3b:2a:26:a1:c9:6e:ac:6d:c0:90:85:1b:c8:c0: 8a:64:54:30:ef:6c:ff:f4:06:a0:5f:6a:eb:8c:6f: bd:78:d3:93:15:68:36:3b:df:b6:3b:c5:dd:57:e9: 9a:58:93:9e:e0:cd:88:5e:56:ea:6f:7d:20:bd:85: ff:0f:11:c9:37:e9:9e:42:f4:1f:cf:8f:15:b6:f8: 31:03:53:07:21:8e:35:7c:5d:a4:90:27:be:df:25: a9:73:0b:84:c2:34:13:1d:2f:2d:04:34:8b:32:6c: 35:66:05:84:40:af:63:65:62:30:80:08:6f:4a:aa: 89:34:a7:29:cd:70:90:e3:e4:d0:34:2a:93:0c:6e: c7:8e:4b:38:8a:53:95:c1:9e:91:e7:04:3e:3b:49: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AC:7A:4A:A4:A6:F7:86:F5:54:A3:EF:CA:BE:DF:71:D5:3F:6B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a1:05:dc:fd:81:a0:d7:14:5f:70:12:58:d6:68:87:66:e6: 54:ea:71:af:b7:e0:19:6a:92:4c:1d:35:8f:e7:40:46:9c:87: de:6e:c6:31:24:f9:39:90:bc:ed:ee:7f:86:00:e2:32:54:75: 3f:0c:78:3f:ea:82:80:2a:a9:40:ec:33:08:ad:cd:26:ae:07: f9:a4:32:cf:74:5f:37:8a:80:05:88:a4:2c:1e:31:8b:65:52: 06:a6:c9:a9:11:27:9b:6b:3a:27:70:03:e4:aa:50:f7:fe:45: 56:ac:5c:85:b7:4b:0a:9e:96:74:a1:d6:61:ec:72:b4:8a:4a: 02:a3:65:86:b3:3b:ef:dd:6d:19:1f:bd:f8:73:c3:54:c1:00: 03:85:22:a2:41:ab:c5:42:d2:e7:39:00:3b:c9:c4:fb:cf:fc: 59:6c:5e:3d:9c:86:fb:1c:2d:38:ad:f8:7a:cd:41:4c:d7:d9: cd:fb:3a:0f:5b:c4:23:e3:89:7b:0f:64:1b:6d:25:a6:f5:6e: 7d:86:92:2d:b8:d6:67:71:d4:6f:6c:04:5f:67:45:a4:57:c2: 30:4c:6d:49:67:28:94:be:00:a8:19:0d:0b:ce:18:fb:b8:4f: dc:f8:e0:26:d3:22:a1:d5:59:3d:49:8f:68:1d:f0:f4:82:e5: a2:45:29:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RFmUHQTvyeOfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MjZlODdjZDAtMTRmMy00MWFjLTgyMWUtZGJlNjUzMTNkMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RM+mtYeKgVR36fis0qoVl4C3VY6yJOL2KJT mwHTg07vxmEwVUWhUwGpssrnKJoHUw14+zwvN++0/pvIUckoonJ+iRbHw5CQlp0r QCdU52atlHSRLkoiMSg/oVG38Pl+4SoU9Qbg9F++OyomoclurG3AkIUbyMCKZFQw 72z/9AagX2rrjG+9eNOTFWg2O9+2O8XdV+maWJOe4M2IXlbqb30gvYX/DxHJN+me QvQfz48VtvgxA1MHIY41fF2kkCe+3yWpcwuEwjQTHS8tBDSLMmw1ZgWEQK9jZWIw gAhvSqqJNKcpzXCQ4+TQNCqTDG7Hjks4ilOVwZ6R5wQ+O0l/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNysekqkpveG9VSj78q+33HVP2s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMjU5MDY1N2EtZDc5OS0z MTY5LWI3YTgtZDQwYjE1NDI5ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAihBdz9gaDXFF9wEljWaIdm5lTqca+34BlqkkwdNY/nQEach95uxjEk +TmQvO3uf4YA4jJUdT8MeD/qgoAqqUDsMwitzSauB/mkMs90XzeKgAWIpCweMYtl UgamyakRJ5trOidwA+SqUPf+RVasXIW3SwqelnSh1mHscrSKSgKjZYazO+/dbRkf vfhzw1TBAAOFIqJBq8VC0uc5ADvJxPvP/FlsXj2chvscLTit+HrNQUzX2c37Og9b xCPjiXsPZBttJab1bn2Gki241mdx1G9sBF9nRaRXwjBMbUlnKJS+AKgZDQvOGPu4 T9z44CbTIqHVWT1Jj2gd8PSC5aJFKXo= -----END CERTIFICATE-----Generated at Mon Aug 4 07:51:35 2025 by rpki-client