$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json) Hash identifier: TxK4qqcSh83c+/yvH6GrThGYwa78flhcZ2eR5EcFaYY= Subject key identifier: 4F:9C:0C:9F:E4:E5:E7:5D:2B:60:F7:75:2D:52:B3:D8:10:14:DF:F0 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584AAB265A3A585168F4DBE8BA80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40627 IP address blocks: 199.68.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5a:3a:58:51:68:f4:db:e8:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=b55716d6-6ea3-452c-90c3-7f993990bee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:00:b4:3a:2d:6b:87:f8:75:ec:d6:d8:b7: 1e:82:fb:a5:4f:4a:1c:e3:32:c1:e4:aa:32:e3:30: fc:19:6c:83:fe:2d:67:c9:3f:61:aa:e8:8f:a8:89: 55:13:92:29:2a:09:e4:a3:34:e5:b0:7f:58:26:16: a8:ae:ba:6b:49:b0:65:dc:7b:85:2b:1a:fe:2b:52: 34:e2:63:ce:ac:52:4e:c5:6e:a8:42:50:12:b1:cb: 57:de:eb:3b:9e:3d:ce:9e:c7:b0:d4:63:46:a5:41: 97:ea:1a:90:56:6c:48:1b:1a:a4:28:70:d3:a9:45: 9a:10:47:47:bb:8c:1a:f5:59:cb:7e:89:ff:29:54: 58:c6:97:ef:2d:27:c2:c7:7f:8a:c3:fd:c9:97:1f: 31:29:ba:a3:17:60:ca:72:a3:5f:93:84:52:ef:78: b3:d8:5b:92:5b:bc:5f:84:bd:d2:3e:ee:e1:c7:b9: 8f:ba:ee:cb:0e:e6:96:33:96:36:5c:e3:1d:79:a9: 19:47:85:24:5c:8b:ac:c3:dd:02:30:58:aa:f8:fd: 98:11:52:8a:6b:11:c6:f8:fc:bb:41:79:ff:c9:a6: b8:63:29:9f:f9:33:12:a0:6b:27:fb:8a:d7:ed:73: 1f:c6:49:bf:5e:a6:35:a4:41:cd:77:52:aa:97:87: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9C:0C:9F:E4:E5:E7:5D:2B:60:F7:75:2D:52:B3:D8:10:14:DF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.68.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b7:c5:f9:cd:8f:c2:33:f8:57:52:1a:bf:c0:36:58:03:e8: 06:f7:95:8b:d8:f1:a5:dd:4d:3c:93:c7:7d:9b:50:d7:d7:c1: b9:65:3d:c5:fb:43:9c:41:b6:d6:59:dc:0f:4d:ef:2b:8f:a7: fc:2c:b5:fc:9d:4f:00:6f:e2:df:69:d4:71:8c:c4:58:ee:3f: 1b:fe:90:3a:5e:9b:40:fe:7f:58:95:96:31:1a:e3:6a:df:e6: 0b:fe:72:f4:9b:f7:8b:38:c7:49:55:20:85:60:da:0e:df:2f: 9f:b0:45:f9:8c:6b:65:3e:c0:e1:b9:92:2b:ad:1b:0c:ed:37: a2:d6:1b:4b:45:5f:5e:db:da:0c:07:56:fc:44:70:d7:45:b3: 47:17:79:91:c4:27:ee:1b:36:25:56:0c:99:61:80:de:9c:6b: e7:65:a8:f2:75:80:85:e1:6a:24:38:ac:af:5c:9b:7d:bc:de: 3d:c3:ce:a7:4f:e0:e1:04:3a:e5:f1:11:ff:cf:dc:90:9c:cd: aa:dc:32:32:fd:26:43:90:a7:5b:90:3c:2e:61:b0:cf:ab:1a: 63:96:4e:23:53:3a:14:9e:5d:64:c0:42:22:04:53:87:e5:86: 1c:a7:4e:4b:1d:b3:99:07:8b:cd:25:dd:76:5e:a0:a4:e4:5d: f4:15:15:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlo6WFFo9NvouoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YjU1NzE2ZDYtNmVhMy00NTJjLTkwYzMtN2Y5OTM5OTBiZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyswAtDota4f4dezW2LcegvulT0oc4zLB5Koy 4zD8GWyD/i1nyT9hquiPqIlVE5IpKgnkozTlsH9YJhaorrprSbBl3HuFKxr+K1I0 4mPOrFJOxW6oQlASsctX3us7nj3Onsew1GNGpUGX6hqQVmxIGxqkKHDTqUWaEEdH u4wa9VnLfon/KVRYxpfvLSfCx3+Kw/3Jlx8xKbqjF2DKcqNfk4RS73iz2FuSW7xf hL3SPu7hx7mPuu7LDuaWM5Y2XOMdeakZR4UkXIusw90CMFiq+P2YEVKKaxHG+Py7 QXn/yaa4Yymf+TMSoGsn+4rX7XMfxkm/XqY1pEHNd1Kql4eS5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+cDJ/k5eddK2D3dS1Ss9gQFN/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNWU4ZDNjNGUtNTYwMC0z MTRmLTkwYjUtNjlkN2NhNDRkNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa3xfnNj8Iz+FdSGr/ANlgD6Ab3lYvY8aXdTTyTx32bUNfXwbllPcX7 Q5xBttZZ3A9N7yuPp/wstfydTwBv4t9p1HGMxFjuPxv+kDpem0D+f1iVljEa42rf 5gv+cvSb94s4x0lVIIVg2g7fL5+wRfmMa2U+wOG5kiutGwztN6LWG0tFX17b2gwH VvxEcNdFs0cXeZHEJ+4bNiVWDJlhgN6ca+dlqPJ1gIXhaiQ4rK9cm3283j3DzqdP 4OEEOuXxEf/P3JCczarcMjL9JkOQp1uQPC5hsM+rGmOWTiNTOhSeXWTAQiIEU4fl hhynTksds5kHi80l3XZeoKTkXfQVFRc= -----END CERTIFICATE-----Generated at Mon Aug 4 07:49:23 2025 by rpki-client