$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa File: e10be919-601f-3120-a397-03955d29b5b8.roa (raw, json) Hash identifier: ty9z5e8YsNEAdJ7neDMhxTqn+FqSmKxsQFcTPJIa6fs= Subject key identifier: 3D:10:D4:E7:C1:B2:C9:E7:3D:49:F0:06:A4:FE:05:E5:9A:F1:A2:77 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584BBA1036560EE86934B2F23D00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:36:56:0e:e8:69:34:b2:f2:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=33903c27-44d3-42ec-91aa-6f8e0c38c188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:46:de:31:2e:3d:de:a3:49:9f:cf:de:0e: 8c:22:85:56:36:38:78:a3:6d:9e:20:d2:de:b9:90: ec:53:ae:ab:a9:a4:22:8e:91:b0:39:44:f1:40:03: 0f:f9:6f:49:76:68:cb:32:f1:e5:11:d4:21:26:6f: 9d:3c:51:b0:c0:b9:6b:a8:17:3d:e3:5c:2e:af:17: 4e:48:a7:29:c3:d7:bb:21:4b:6d:0d:54:00:f1:5c: 1b:6d:f8:af:48:ac:27:5a:69:dd:f1:d4:23:23:63: 94:74:f7:fb:cd:89:e4:8d:49:2e:20:6a:a8:12:f5: 6f:8e:c2:69:cf:a2:7b:2c:f7:9b:e4:1c:44:b4:74: df:b6:09:02:24:c2:b8:bc:60:a3:14:c3:ea:e3:0b: f9:45:37:e5:49:03:31:5a:ba:fd:1e:f6:6d:9c:07: 3c:ab:d2:7d:f7:3b:38:e4:3e:cd:7a:ba:22:e1:05: 19:54:9b:c0:52:58:f6:91:d1:8d:44:80:79:fc:06: 97:3e:15:15:d2:de:b5:a0:e7:d9:91:6b:6d:6e:08: 4f:21:5d:6b:45:04:b0:b7:52:ca:e2:dc:42:73:a7: 57:61:25:30:8f:8f:a5:08:a6:95:8b:b2:6c:9e:9f: f6:7a:e6:8d:10:86:38:32:d1:11:da:2d:16:9e:44: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:D4:E7:C1:B2:C9:E7:3D:49:F0:06:A4:FE:05:E5:9A:F1:A2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:78:07:20:f6:8f:4e:ce:ed:dd:82:a6:d2:b3:1d:a5:a0:4f: 16:8d:10:68:e5:71:b9:e3:3f:a6:95:42:85:52:e0:7f:04:17: 36:4d:0c:73:6f:98:32:93:8f:9b:c6:46:29:f5:9e:62:08:f0: 61:51:0e:03:21:14:90:56:75:ea:2f:30:80:39:f2:a3:e2:bd: 1c:7c:1b:e3:f9:d5:24:f4:93:0e:5e:5b:64:bc:46:2d:71:7a: 1f:40:76:98:36:a6:de:6a:39:ea:8d:65:05:0c:3d:9c:0a:fe: 87:e8:50:55:75:01:d5:24:3b:0d:76:33:88:3d:bd:a9:b3:79: 71:ba:fb:d2:87:f1:8e:f9:24:80:ec:f7:3c:c2:1f:64:44:38: 49:29:2d:08:92:d1:75:b1:c9:7f:57:83:7a:4d:de:e8:8e:5b: 24:35:36:c4:9f:41:90:71:f3:bc:80:fa:11:bf:eb:42:41:5a: 39:57:b3:e5:cd:f2:37:1e:7b:9e:67:d8:1f:fe:86:ad:85:20: ac:3a:2e:8d:9c:4e:d2:42:34:63:52:e0:a1:fe:cd:db:c8:a3: cc:d8:df:15:d7:f7:93:d6:4b:2d:da:48:d1:43:d6:73:d6:4c: be:86:08:21:cb:98:75:aa:0f:db:e1:15:dd:66:dd:2b:00:89: e1:10:f8:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDZWDuhpNLLyPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MzM5MDNjMjctNDRkMy00MmVjLTkxYWEtNmY4ZTBjMzhjMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7RG3jEuPd6jSZ/P3g6MIoVWNjh4o22eINLe uZDsU66rqaQijpGwOUTxQAMP+W9JdmjLMvHlEdQhJm+dPFGwwLlrqBc941wurxdO SKcpw9e7IUttDVQA8VwbbfivSKwnWmnd8dQjI2OUdPf7zYnkjUkuIGqoEvVvjsJp z6J7LPeb5BxEtHTftgkCJMK4vGCjFMPq4wv5RTflSQMxWrr9HvZtnAc8q9J99zs4 5D7Neroi4QUZVJvAUlj2kdGNRIB5/AaXPhUV0t61oOfZkWttbghPIV1rRQSwt1LK 4txCc6dXYSUwj4+lCKaVi7Jsnp/2euaNEIY4MtER2i0WnkTgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0Q1OfBssnnPUnwBqT+BeWa8aJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTEwYmU5MTktNjAxZi0z MTIwLWEzOTctMDM5NTVkMjliNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ4ByD2j07O7d2CptKzHaWgTxaNEGjlcbnjP6aVQoVS4H8EFzZNDHNv mDKTj5vGRin1nmII8GFRDgMhFJBWdeovMIA58qPivRx8G+P51ST0kw5eW2S8Ri1x eh9Adpg2pt5qOeqNZQUMPZwK/ofoUFV1AdUkOw12M4g9vamzeXG6+9KH8Y75JIDs 9zzCH2REOEkpLQiS0XWxyX9Xg3pN3uiOWyQ1NsSfQZBx87yA+hG/60JBWjlXs+XN 8jcee55n2B/+hq2FIKw6Lo2cTtJCNGNS4KH+zdvIo8zY3xXX95PWSy3aSNFD1nPW TL6GCCHLmHWqD9vhFd1m3SsAieEQ+PA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:22 2025 by rpki-client