$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa File: cfef727c-7d86-3e20-90da-9631286575b4.roa (raw, json) Hash identifier: aeGyLHap3G7Xk52uP5AOF43lzQCHXUP3txqoZepqMug= Subject key identifier: 07:26:FE:E4:B4:C4:41:B6:1E:24:55:70:7E:FF:EE:A8:53:A5:9B:C1 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584AAB265A1F369F329CC0349F00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40627 IP address blocks: 192.209.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5a:1f:36:9f:32:9c:c0:34:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=5456abfc-a591-4d02-84e1-caeac5a1fa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:a3:37:38:07:fd:08:db:71:9b:78:65:06: 98:a9:57:51:fd:83:fa:eb:31:24:b7:b9:d4:02:c0: 79:27:0b:c5:5f:79:91:60:bb:7b:df:27:c1:6b:8b: bb:84:08:dc:58:dc:4f:cf:0a:32:dd:ff:2b:3e:ad: b8:8e:bb:de:ef:fe:af:c8:12:89:63:76:69:df:65: 8f:75:08:c7:58:e5:76:01:ea:d5:72:e9:fc:bf:54: 60:32:18:ff:c4:f3:75:84:bd:8c:49:21:6b:6d:80: e7:75:d7:96:df:c5:cf:de:86:7e:9d:60:64:77:7c: 57:01:8c:1d:87:ca:49:e4:c7:b8:8f:4c:be:22:39: 2c:79:20:3e:72:33:30:c5:ab:d2:82:87:81:22:44: 53:56:50:3a:e8:b5:06:8b:28:7b:16:6f:35:ef:b6: ad:49:fa:be:af:35:4d:f3:02:15:49:0a:cb:12:e9: e3:b3:9e:64:fd:07:29:ae:e9:79:94:7c:73:4d:20: 8c:5f:c3:33:3d:35:9a:b6:38:1e:f7:ca:fa:76:ed: a7:08:68:8e:6b:b5:9d:7d:9e:f5:e8:f0:76:b2:bf: 5f:29:03:74:a2:f5:34:37:27:37:a7:14:5b:1d:8c: 79:37:ad:c0:45:d5:78:18:aa:78:40:24:d3:4a:7a: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:FE:E4:B4:C4:41:B6:1E:24:55:70:7E:FF:EE:A8:53:A5:9B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/cfef727c-7d86-3e20-90da-9631286575b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 192.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:36:fa:76:c1:54:a8:7d:8f:98:26:9a:05:7a:d7:32:6f:42: 09:4e:04:a2:43:4d:08:28:dd:ef:9c:16:51:36:02:f0:9e:be: 83:24:c8:4e:e1:4c:0f:fe:d7:38:c3:e9:fc:55:0e:37:26:01: be:88:76:5d:a6:c8:45:db:c8:ca:37:ea:c9:b9:40:de:01:c0: 52:80:2a:8e:6c:21:d7:66:b3:4d:e7:52:d9:21:8f:17:56:e5: 87:bc:7d:ee:ca:d2:16:4e:92:be:1a:dd:22:7b:0c:10:5c:05: 64:cc:9d:19:45:80:00:cb:cd:34:0d:59:9b:f2:48:fa:04:a4: ec:26:c9:02:ff:7e:d2:c2:9f:c2:aa:6c:81:17:1d:4b:f3:8a: 52:fa:d3:3c:9c:23:f6:e3:3a:e7:a3:f0:5f:54:e7:0a:78:b6: 34:92:b5:ee:ad:18:e9:ef:28:b2:08:13:bc:da:6b:a0:27:91: d0:fe:d3:f7:93:dd:91:41:9f:b1:09:34:24:ad:91:47:fb:ec: d4:55:5d:17:83:d5:9b:96:c2:35:5a:88:2b:73:56:8a:37:ad: a3:c0:25:68:c0:bf:fc:9f:3a:38:dd:ee:15:1f:39:79:24:15: a1:20:5e:b8:4a:8e:a9:17:9b:d2:2c:67:93:2b:66:89:3f:50: 49:ab:86:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlofNp8ynMA0nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NTQ1NmFiZmMtYTU5MS00ZDAyLTg0ZTEtY2FlYWM1YTFmYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzqjNzgH/QjbcZt4ZQaYqVdR/YP66zEkt7nU AsB5JwvFX3mRYLt73yfBa4u7hAjcWNxPzwoy3f8rPq24jrve7/6vyBKJY3Zp32WP dQjHWOV2AerVcun8v1RgMhj/xPN1hL2MSSFrbYDnddeW38XP3oZ+nWBkd3xXAYwd h8pJ5Me4j0y+IjkseSA+cjMwxavSgoeBIkRTVlA66LUGiyh7Fm8177atSfq+rzVN 8wIVSQrLEunjs55k/Qcprul5lHxzTSCMX8MzPTWatjge98r6du2nCGiOa7WdfZ71 6PB2sr9fKQN0ovU0Nyc3pxRbHYx5N63ARdV4GKp4QCTTSnq2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcm/uS0xEG2HiRVcH7/7qhTpZvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvY2ZlZjcyN2MtN2Q4Ni0z ZTIwLTkwZGEtOTYzMTI4NjU3NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG42+nbBVKh9j5gmmgV61zJvQglOBKJDTQgo3e+cFlE2AvCevoMkyE7h TA/+1zjD6fxVDjcmAb6Idl2myEXbyMo36sm5QN4BwFKAKo5sIddms03nUtkhjxdW 5Ye8fe7K0hZOkr4a3SJ7DBBcBWTMnRlFgADLzTQNWZvySPoEpOwmyQL/ftLCn8Kq bIEXHUvzilL60zycI/bjOuej8F9U5wp4tjSSte6tGOnvKLIIE7zaa6AnkdD+0/eT 3ZFBn7EJNCStkUf77NRVXReD1ZuWwjVaiCtzVoo3raPAJWjAv/yfOjjd7hUfOXkk FaEgXrhKjqkXm9IsZ5MrZok/UEmrhvQ= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:41 2025 by rpki-client