$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa File: e242c2b3-77a9-3afd-b359-a2a88e22709d.roa (raw, json) Hash identifier: 2jqPZahaIp4/b9GSvJxgOJxVh0JbkEba9H6RkXwjM6E= Subject key identifier: 97:EE:C8:31:DE:11:74:EC:B0:00:51:67:22:E8:00:7E:9D:D8:54:98 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584D7B6A7F04F58FEBE46D9D7780 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 40627 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:7f:04:f5:8f:eb:e4:6d:9d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=f56d9221-2f9a-4de1-a5bf-f471f6a15352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a3:ae:b4:94:3b:72:be:d7:fb:aa:f1:f7:42: 11:e8:67:45:24:c8:ef:24:af:5a:42:1b:29:55:39: 89:33:22:5f:1c:eb:73:fc:1e:59:c9:77:01:87:5c: 66:75:92:0f:1b:d2:a4:8b:78:9b:a2:0d:e2:74:be: dc:03:21:34:1d:39:b7:96:11:e1:1d:4d:f3:35:78: 16:7b:8d:57:46:2a:f1:61:f7:85:d8:5a:ee:a3:ab: e5:8b:a7:af:66:ab:ee:66:c9:9d:4d:bb:43:40:ad: 96:c6:58:40:57:43:77:74:45:07:6a:63:ed:cd:c3: 44:b2:b7:7a:15:dc:b2:4c:87:df:3e:4f:19:f1:48: 1e:19:96:98:41:d0:da:f2:15:ff:81:b3:3c:48:a5: c2:3f:b1:23:83:45:f0:21:d9:2b:01:33:20:e8:f6: 09:46:70:6c:d2:2a:d4:cd:48:bc:68:04:c5:df:1e: 59:7a:dc:a6:22:1e:91:01:5e:04:02:58:36:55:f5: 0f:a7:e3:e2:51:05:79:2c:f7:d4:b1:25:b7:90:c2: 26:8e:52:e2:bf:66:40:92:85:7b:46:c8:eb:7a:41: 93:17:2c:ff:2b:21:35:27:89:6b:aa:df:3c:8e:7a: 91:84:77:fb:8c:ed:8f:17:9c:2f:53:d0:d2:d0:b1: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:C8:31:DE:11:74:EC:B0:00:51:67:22:E8:00:7E:9D:D8:54:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1a:67:d6:b6:88:43:13:2b:14:31:0d:13:59:3e:ff:97:96: cb:4b:65:51:6e:c9:31:28:8d:d8:22:ca:db:62:8d:04:7b:33: 4c:05:26:c9:34:c5:c5:3a:7b:82:71:13:15:cf:fd:d5:a3:18: 99:3b:49:d8:37:9c:93:0d:97:d7:d7:54:42:a8:69:1f:b2:3d: 98:90:03:a9:b7:5a:e6:41:4f:50:43:ca:9d:b2:7d:16:cd:31: ae:42:ab:3b:bf:f8:0d:c3:83:ce:68:fa:f1:80:33:74:4a:ef: 08:10:54:41:00:f1:3e:1f:c0:78:23:fe:b7:10:f8:22:75:1f: dc:ae:f3:47:0c:a2:68:a9:b0:ea:70:5b:6d:dd:06:8e:11:db: dc:31:ff:d6:9e:27:21:aa:ad:ad:69:af:1f:d1:04:32:e9:3b: 81:05:e2:27:c4:71:c6:41:aa:6a:88:7b:63:a2:8b:7d:88:d1: 7c:54:84:36:e1:23:78:f2:28:a6:ea:06:b1:25:1b:97:5f:75: b0:b5:22:e2:21:0d:57:b5:a5:67:31:fa:41:e7:e9:28:ca:f9: ec:8b:78:7d:4c:16:a2:c3:5a:fc:5c:aa:fc:c2:4b:6a:34:6a: 9a:a0:78:31:bf:39:12:c6:15:38:f1:99:0a:3e:14:c1:25:25: d0:7c:f3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17an8E9Y/r5G2dd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZjU2ZDkyMjEtMmY5YS00ZGUxLWE1YmYtZjQ3MWY2YTE1MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6OutJQ7cr7X+6rx90IR6GdFJMjvJK9aQhsp VTmJMyJfHOtz/B5ZyXcBh1xmdZIPG9Kki3ibog3idL7cAyE0HTm3lhHhHU3zNXgW e41XRirxYfeF2Fruo6vli6evZqvuZsmdTbtDQK2WxlhAV0N3dEUHamPtzcNEsrd6 FdyyTIffPk8Z8UgeGZaYQdDa8hX/gbM8SKXCP7Ejg0XwIdkrATMg6PYJRnBs0irU zUi8aATF3x5ZetymIh6RAV4EAlg2VfUPp+PiUQV5LPfUsSW3kMImjlLiv2ZAkoV7 RsjrekGTFyz/KyE1J4lrqt88jnqRhHf7jO2PF5wvU9DS0LGVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfuyDHeEXTssABRZyLoAH6d2FSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTI0MmMyYjMtNzdhOS0z YWZkLWIzNTktYTJhODhlMjI3MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMaZ9a2iEMTKxQxDRNZPv+XlstLZVFuyTEojdgiyttijQR7M0wFJsk0 xcU6e4JxExXP/dWjGJk7Sdg3nJMNl9fXVEKoaR+yPZiQA6m3WuZBT1BDyp2yfRbN Ma5Cqzu/+A3Dg85o+vGAM3RK7wgQVEEA8T4fwHgj/rcQ+CJ1H9yu80cMomipsOpw W23dBo4R29wx/9aeJyGqra1prx/RBDLpO4EF4ifEccZBqmqIe2Oii32I0XxUhDbh I3jyKKbqBrElG5dfdbC1IuIhDVe1pWcx+kHn6SjK+eyLeH1MFqLDWvxcqvzCS2o0 apqgeDG/ORLGFTjxmQo+FMElJdB887k= -----END CERTIFICATE-----Generated at Sat Apr 18 01:35:59 2026 by rpki-client