$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/58fe1901-a070-3301-ab8d-84df49c0cf0d.roa File: 58fe1901-a070-3301-ab8d-84df49c0cf0d.roa (raw, json) Hash identifier: ka9GuXpXOUYFrvGsG6oLquPRtPnx+WgFi7h12QfSGjQ= Subject key identifier: 3F:32:4B:78:43:63:0A:CB:3B:CC:45:83:F4:C7:AC:9F:E1:DD:0A:70 Certificate issuer: /CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232 Certificate serial: 010D0C9F4328584B6F491C1CF12FC3ECA2A87BC0 Authority key identifier: 30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/58fe1901-a070-3301-ab8d-84df49c0cf0d.roa Signing time: Mon 06 Oct 2025 19:09:44 +0000 ROA not before: Mon 06 Oct 2025 19:09:44 +0000 ROA not after: Sun 04 Jan 2026 20:09:44 +0000 asID: 3763 IP address blocks: 24.233.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:49:1c:1c:f1:2f:c3:ec:a2:a8:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232 Validity Not Before: Oct 6 19:09:44 2025 GMT Not After : Jan 4 20:09:44 2026 GMT Subject: CN=02199569-0fe9-47e7-841e-775f0180998e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:20:b9:23:2d:25:b4:d8:42:da:34:4c:8e: 80:40:af:af:c2:f5:a7:3c:d3:ea:18:50:c2:16:5d: 86:ca:65:93:ff:cd:fa:b6:61:3e:2e:95:dc:12:97: 3f:6c:06:ee:cb:7f:09:32:21:dd:e3:d2:38:d9:6d: a9:0c:11:5b:5f:1d:1f:8c:b2:05:b3:0f:f1:52:a9: 83:3d:d1:ae:0d:a4:42:8f:f3:c2:8f:b8:1b:9b:ff: 70:ed:38:41:4c:9d:39:a6:9f:65:74:0e:ef:00:d9: 61:cc:26:db:2b:1c:2d:01:3b:2d:5b:73:b7:e1:ff: 3e:f7:6e:02:7c:59:51:49:42:46:ee:f8:b1:84:de: d7:a8:d2:09:d4:61:1d:38:a5:69:c8:e6:0e:f6:87: 66:f1:98:1e:43:1f:6a:56:b0:d7:87:78:64:ff:27: 71:00:8f:de:7f:3a:da:a0:8c:cc:97:fa:36:8b:a2: de:8b:70:00:ec:a6:1b:63:e3:26:a0:f0:ab:e0:b5: 45:36:d7:bd:0c:ef:ed:a6:15:ec:ee:5d:8e:c0:cf: 7f:a7:3a:66:e6:11:a4:97:49:9b:ac:0f:85:93:e4: f2:e8:72:4b:2e:b2:c6:73:3e:15:17:63:32:9a:18: 36:15:2c:bc:07:cc:e5:c0:d8:a9:52:eb:f2:57:64: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:4B:78:43:63:0A:CB:3B:CC:45:83:F4:C7:AC:9F:E1:DD:0A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/58fe1901-a070-3301-ab8d-84df49c0cf0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.crl X509v3 Authority Key Identifier: keyid:30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer sbgp-ipAddrBlock: critical IPv4: 24.233.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0c:00:72:45:b2:58:05:2a:6d:b0:63:9f:e9:ad:15:f4:52: a2:00:74:6f:d2:ad:82:bb:6f:15:98:ba:cd:0b:79:45:e1:a1: 8c:8b:01:e6:dc:8e:6e:e7:fc:4a:ea:d0:fa:c8:e8:27:68:57: 2f:a9:bb:83:f0:69:c3:d4:9d:33:9a:b2:88:b8:b1:45:7b:f0: f4:58:17:52:6c:a1:60:95:bc:e7:c9:f5:3a:58:ec:06:af:16: 87:f0:9b:49:b9:3f:d6:9a:dc:06:32:df:00:16:b4:3c:26:1e: 23:3e:76:17:eb:03:40:57:c8:80:66:ed:2e:4a:67:92:bc:7b: 51:35:26:97:42:67:cf:34:4d:22:f5:8d:7f:c5:74:83:69:96: fc:65:61:fe:d9:28:d2:cb:d1:e4:e5:27:39:15:60:b4:11:7d: d5:e3:22:bf:9d:11:88:05:40:00:20:a5:48:c0:d5:65:17:90: 41:9b:80:42:4d:c2:d1:bb:7f:fb:86:6b:47:16:46:3f:11:91: fe:0a:cd:d1:20:78:22:44:9c:90:a2:1e:b0:15:8e:d7:8e:2b: 89:4c:d9:21:70:b7:5d:31:65:d6:31:1c:0a:e4:07:cc:b4:bf: 4c:9c:70:1f:a4:0d:fb:8d:d4:99:c6:00:6e:71:1c:c4:41:f5: 95:7d:db:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvSRwc8S/D7KKoe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI0ODYyYjAtOGE3ZC00ZDY5LWJjMTgtMzhiNDMwYThj MjMyMB4XDTI1MTAwNjE5MDk0NFoXDTI2MDEwNDIwMDk0NFowLzEtMCsGA1UEAxMk MDIxOTk1NjktMGZlOS00N2U3LTg0MWUtNzc1ZjAxODA5OThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNYguSMtJbTYQto0TI6AQK+vwvWnPNPqGFDC Fl2GymWT/836tmE+LpXcEpc/bAbuy38JMiHd49I42W2pDBFbXx0fjLIFsw/xUqmD PdGuDaRCj/PCj7gbm/9w7ThBTJ05pp9ldA7vANlhzCbbKxwtATstW3O34f8+924C fFlRSUJG7vixhN7XqNIJ1GEdOKVpyOYO9odm8ZgeQx9qVrDXh3hk/ydxAI/efzra oIzMl/o2i6Lei3AA7KYbY+MmoPCr4LVFNte9DO/tphXs7l2OwM9/pzpm5hGkl0mb rA+Fk+Ty6HJLLrLGcz4VF2Mymhg2FSy8B8zlwNipUuvyV2Q4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8yS3hDYwrLO8xFg/THrJ/h3QpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YjQ4 NjJiMC04YTdkLTRkNjktYmMxOC0zOGI0MzBhOGMyMzIvNThmZTE5MDEtYTA3MC0z MzAxLWFiOGQtODRkZjQ5YzBjZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWI0ODYyYjAtOGE3ZC00ZDY5LWJj MTgtMzhiNDMwYThjMjMyLzliNDg2MmIwLThhN2QtNGQ2OS1iYzE4LTM4YjQzMGE4 YzIzMi5jcmwwHwYDVR0jBBgwFoAUMMbsdLufRtwshQxyuHjV/qEiLFkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YjQ4NjJiMC04YTdkLTRkNjktYmMxOC0zOGI0 MzBhOGMyMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsMAHJFslgFKm2wY5/prRX0UqIAdG/SrYK7bxWYus0LeUXhoYyLAebc jm7n/Erq0PrI6CdoVy+pu4PwacPUnTOasoi4sUV78PRYF1JsoWCVvOfJ9TpY7Aav Fofwm0m5P9aa3AYy3wAWtDwmHiM+dhfrA0BXyIBm7S5KZ5K8e1E1JpdCZ880TSL1 jX/FdINplvxlYf7ZKNLL0eTlJzkVYLQRfdXjIr+dEYgFQAAgpUjA1WUXkEGbgEJN wtG7f/uGa0cWRj8Rkf4KzdEgeCJEnJCiHrAVjteOK4lM2SFwt10xZdYxHArkB8y0 v0yccB+kDfuN1JnGAG5xHMRB9ZV92zk= -----END CERTIFICATE-----Generated at Wed Nov 5 23:21:03 2025 by rpki-client