$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa File: 3d4c19c0-cef8-3686-be24-c516be99f254.roa (raw, json) Hash identifier: kY8S6Hg+mZjVyjpmrm7FD22paS15xdB+NR9xsIpdb8g= Subject key identifier: 89:00:61:3E:47:2E:62:8C:98:AD:50:65:FE:76:93:AC:04:23:2F:06 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E5A4A01ACB23CA8ABA6347D80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 30238 IP address blocks: 207.54.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:01:ac:b2:3c:a8:ab:a6:34:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=eb48e004-2d53-4811-bdd1-166ba578d279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:ee:7a:78:a4:55:54:f9:cc:75:45:df:5c: 3c:65:85:3c:87:59:19:bb:0a:59:87:f5:dc:6d:d5: 11:2e:2e:00:87:ec:18:d1:38:00:c0:ce:02:cc:7a: ee:86:19:f0:16:77:76:b8:ad:d8:80:10:5a:ec:c3: ee:98:d7:c9:6f:d9:90:01:c4:f6:2a:18:e1:8b:1a: af:6e:45:4e:d6:c4:4c:e2:4f:4e:37:0b:96:35:f0: c0:f7:6e:7a:40:fd:f7:00:57:91:61:e4:e2:00:35: 2d:cb:b9:eb:29:bd:b7:09:db:a5:37:ec:2b:ab:de: fb:32:56:87:67:22:47:2c:b5:02:4f:62:08:83:be: 5f:a0:3f:7b:5e:88:9a:6a:4a:a9:ee:26:8d:f0:9a: a7:be:eb:29:c4:e5:24:d9:4a:2f:38:db:0a:66:3a: 73:7e:83:ce:c4:f5:12:ec:64:6f:ba:b0:ce:ed:82: 17:f5:a5:e0:9b:df:e4:a1:39:0e:b0:6a:96:34:59: b6:a1:91:c1:4c:4b:69:36:da:84:66:7b:4c:2a:26: ce:58:d2:3c:d7:2b:85:96:31:94:4d:f6:72:8d:f2: 96:f2:86:42:3b:d2:94:a3:f3:e2:5c:ce:63:47:b1: 12:73:88:8e:ec:60:d9:f5:f8:a9:68:5f:8d:11:78: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:61:3E:47:2E:62:8C:98:AD:50:65:FE:76:93:AC:04:23:2F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f3:9b:c0:f3:45:fe:46:68:7f:79:80:93:f6:20:28:fd:30: b6:ed:e7:aa:2e:eb:4e:0b:d0:6e:99:9d:cd:c9:f4:74:f5:08: c5:80:8b:94:6f:13:de:db:b0:e9:67:8b:a5:26:a2:34:01:17: 6b:a7:db:23:51:71:1e:dc:80:22:10:31:f4:fc:4b:df:cd:82: 3f:e7:31:18:de:74:d9:93:36:79:54:59:63:db:4e:8d:ec:4f: f6:f2:64:44:35:25:76:53:3e:ed:e5:75:48:3d:03:fc:0a:e2: 9e:a6:88:87:32:20:42:5b:4b:d2:62:c4:60:11:8b:1d:f0:ae: 04:02:68:01:81:13:8f:4e:0b:be:7c:3b:66:68:2e:47:09:be: 85:88:7d:92:85:d9:be:ea:93:be:5b:05:d4:c2:14:22:1b:5c: 31:dc:20:ce:2c:70:ac:a6:6e:47:26:6d:89:ec:0c:0e:e9:53: bf:e4:de:0e:74:07:27:1e:e5:3b:07:0c:c2:86:ac:39:d8:b2: 49:f1:96:03:7e:51:fd:df:21:34:d5:5e:e5:e0:2f:5f:04:ae: dc:39:59:aa:6a:65:8c:2c:2a:b9:fb:39:8a:87:a3:9b:2b:ab: 2a:39:ff:f0:ff:94:55:02:9a:25:66:bd:a2:69:d0:94:25:7c: ee:55:f6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgGssjyoq6Y0fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZWI0OGUwMDQtMmQ1My00ODExLWJkZDEtMTY2YmE1NzhkMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApezuenikVVT5zHVF31w8ZYU8h1kZuwpZh/Xc bdURLi4Ah+wY0TgAwM4CzHruhhnwFnd2uK3YgBBa7MPumNfJb9mQAcT2Khjhixqv bkVO1sRM4k9ONwuWNfDA9256QP33AFeRYeTiADUty7nrKb23CdulN+wrq977MlaH ZyJHLLUCT2IIg75foD97Xoiaakqp7iaN8JqnvuspxOUk2UovONsKZjpzfoPOxPUS 7GRvurDO7YIX9aXgm9/koTkOsGqWNFm2oZHBTEtpNtqEZntMKibOWNI81yuFljGU TfZyjfKW8oZCO9KUo/PiXM5jR7ESc4iO7GDZ9fipaF+NEXgvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkAYT5HLmKMmK1QZf52k6wEIy8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2Q0YzE5YzAtY2VmOC0z Njg2LWJlMjQtYzUxNmJlOTlmMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzzm8DzRf5GaH95gJP2ICj9MLbt56ou604L0G6Znc3J9HT1CMWAi5Rv E97bsOlni6UmojQBF2un2yNRcR7cgCIQMfT8S9/Ngj/nMRjedNmTNnlUWWPbTo3s T/byZEQ1JXZTPu3ldUg9A/wK4p6miIcyIEJbS9JixGARix3wrgQCaAGBE49OC758 O2ZoLkcJvoWIfZKF2b7qk75bBdTCFCIbXDHcIM4scKymbkcmbYnsDA7pU7/k3g50 Byce5TsHDMKGrDnYsknxlgN+Uf3fITTVXuXgL18Ertw5WapqZYwsKrn7OYqHo5sr qyo5//D/lFUCmiVmvaJp0JQlfO5V9mc= -----END CERTIFICATE-----Generated at Tue Jul 14 11:54:31 2026 by rpki-client