$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa File: 8857f622-c477-3dfb-a61e-c651670d500b.roa (raw, json) Hash identifier: JAKRAo/hHlQlad3OPN0hXqCB0mUIS0f+gSlFC9gOOuQ= Subject key identifier: 22:D3:E6:DF:49:99:E8:9C:E6:E1:6E:11:7A:14:0B:9D:F0:C4:81:60 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA7974474B572320DEB333A80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30238 IP address blocks: 207.54.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:44:74:b5:72:32:0d:eb:33:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f6d66cb-8b69-4be2-b7b4-b7d572a2ca7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:42:93:5d:96:9a:bf:47:d9:aa:c3:ab:64: ea:61:c7:a5:4b:02:89:ce:a6:cf:41:7a:6f:27:96: ab:24:b0:18:ab:8e:8a:bd:52:d9:99:86:f0:ef:7b: ed:7c:60:78:db:6b:51:80:74:8c:e9:a8:d4:b7:45: e3:7d:70:cc:52:f9:2d:08:d9:21:62:fc:06:4c:cc: e6:3f:1b:64:f2:5d:64:18:fa:6a:d5:60:8d:2b:ef: e8:95:ec:fb:5b:60:3d:89:b1:72:81:e2:c6:c6:78: ea:41:68:5d:a0:09:64:4f:fa:f4:8d:06:f5:ad:4c: fb:20:b4:de:cf:39:30:22:4e:09:db:b8:98:6f:e2: d8:7b:ac:ce:be:a3:5b:cd:d2:bc:9d:a6:6c:ac:33: 78:cb:9e:3f:c1:b0:37:c7:c2:f5:28:5c:32:f3:5c: e8:fb:5c:34:ee:cf:b7:08:7d:ce:65:6e:7b:93:97: 91:70:3f:96:65:10:6e:4c:a9:f3:44:6b:5d:c6:98: 77:fc:62:67:55:f1:41:aa:40:a0:b8:5f:70:f8:e2: 5c:68:58:01:a9:89:f2:a8:f8:8c:c0:dc:05:32:ca: a4:88:db:cc:db:a3:3e:1c:cf:bd:d4:5c:4f:e4:79: 50:ae:77:ac:63:29:ba:19:71:6e:6e:a2:bf:7c:b2: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:E6:DF:49:99:E8:9C:E6:E1:6E:11:7A:14:0B:9D:F0:C4:81:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c9:a3:38:96:27:ee:a1:da:d2:f5:6c:87:2e:6c:b8:86:7b: 62:d7:06:4a:cf:b2:bc:d6:11:1a:09:da:d7:ba:5b:6e:69:7e: d7:8a:53:cb:34:67:1d:2a:61:c2:cd:07:9c:07:03:e6:a9:3f: 35:87:1b:bb:5d:f3:35:fb:8f:6d:54:23:99:95:f7:b0:50:67: e7:cb:b6:23:ad:71:5e:e7:ae:52:26:08:6f:8f:98:0b:19:32: a9:4d:eb:68:e8:6a:b6:29:b8:61:b2:da:70:b9:f9:b9:2e:45: bf:82:1d:a6:cb:31:63:51:07:87:33:e8:a4:be:6e:fa:ad:80: de:9b:a3:04:45:b6:39:22:0e:93:ef:f7:ca:00:6f:6f:dd:55: 1a:08:80:c4:08:0d:ad:02:48:3b:29:f8:3f:89:dd:27:49:43: ef:0f:60:9b:94:ee:8f:c8:a3:9e:b8:d2:79:aa:6d:82:75:ab: e2:e8:ab:43:17:d2:a1:06:df:4a:63:83:e1:3f:19:9f:33:68: e1:0c:b8:16:85:da:34:a7:74:70:a0:fb:fd:c6:d6:a6:09:be: ce:1b:49:80:2a:e6:35:48:79:b4:bc:55:04:d8:96:da:5b:e2: 3c:0e:c9:42:80:7e:6d:12:68:ee:ac:86:88:b5:2e:61:24:90: 2c:ff:63:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl0R0tXIyDeszOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2Y2ZDY2Y2ItOGI2OS00YmUyLWI3YjQtYjdkNTcyYTJjYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dVCk12Wmr9H2arDq2TqYcelSwKJzqbPQXpv J5arJLAYq46KvVLZmYbw73vtfGB422tRgHSM6ajUt0XjfXDMUvktCNkhYvwGTMzm Pxtk8l1kGPpq1WCNK+/olez7W2A9ibFygeLGxnjqQWhdoAlkT/r0jQb1rUz7ILTe zzkwIk4J27iYb+LYe6zOvqNbzdK8naZsrDN4y54/wbA3x8L1KFwy81zo+1w07s+3 CH3OZW57k5eRcD+WZRBuTKnzRGtdxph3/GJnVfFBqkCguF9w+OJcaFgBqYnyqPiM wNwFMsqkiNvM26M+HM+91FxP5HlQrnesYym6GXFubqK/fLL61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLT5t9Jmeic5uFuEXoUC53wxIFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODg1N2Y2MjItYzQ3Ny0z ZGZiLWE2MWUtYzY1MTY3MGQ1MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7JoziWJ+6h2tL1bIcubLiGe2LXBkrPsrzWERoJ2te6W25pfteKU8s0 Zx0qYcLNB5wHA+apPzWHG7td8zX7j21UI5mV97BQZ+fLtiOtcV7nrlImCG+PmAsZ MqlN62joarYpuGGy2nC5+bkuRb+CHabLMWNRB4cz6KS+bvqtgN6bowRFtjkiDpPv 98oAb2/dVRoIgMQIDa0CSDsp+D+J3SdJQ+8PYJuU7o/Io5640nmqbYJ1q+Loq0MX 0qEG30pjg+E/GZ8zaOEMuBaF2jSndHCg+/3G1qYJvs4bSYAq5jVIebS8VQTYltpb 4jwOyUKAfm0SaO6shoi1LmEkkCz/YzA= -----END CERTIFICATE-----Generated at Sat Sep 12 14:27:06 2026 by rpki-client