$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bed47c25-dca2-34ed-a81c-3c9990d16f9b.roa File: bed47c25-dca2-34ed-a81c-3c9990d16f9b.roa (raw, json) Hash identifier: lx/ZW1KBOeudYQELJD9QacV1LkkeYMI9sn+kM96vT5M= Subject key identifier: 63:B3:C1:96:0E:36:21:9E:08:2A:90:79:74:05:9D:B6:89:E4:E2:FC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E5A49FC5D167240E106903CA0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bed47c25-dca2-34ed-a81c-3c9990d16f9b.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 30238 IP address blocks: 207.54.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:fc:5d:16:72:40:e1:06:90:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=89946dcb-95d1-4061-b3f0-9096b15c40f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:87:ef:06:2d:39:a9:91:72:96:20:fb:dc: 95:02:79:88:53:9e:63:55:1a:a0:a6:24:dd:d1:2a: 23:1c:e9:67:25:82:2f:39:ac:fd:ec:0b:b9:e0:7d: 06:29:35:90:b6:75:1d:a6:ce:36:d3:75:2a:53:4b: b6:6f:36:d8:82:ad:6a:0d:63:b0:00:53:d4:43:3c: f4:85:25:fe:f8:06:fa:e6:bc:42:4a:92:ae:f6:33: 85:5f:e2:d6:c5:ad:5e:8a:e0:50:d8:71:b3:ce:c9: f5:9b:33:ca:e7:70:c8:12:54:66:3d:68:8d:df:29: c6:0b:0a:6c:a7:ba:55:1c:0c:03:d5:2f:1a:61:7a: 12:4e:e9:58:f1:21:5e:8a:13:54:46:c5:0f:36:33: 38:68:ff:b1:e7:22:14:ba:f2:76:34:f1:09:e1:06: d7:74:6f:06:4a:7d:7e:68:a5:c0:c8:18:6c:eb:8c: 9e:bd:69:46:ff:63:c2:f1:2f:48:85:56:d4:cb:94: 42:0c:51:4d:ea:d9:ba:e5:1d:97:86:0e:48:c1:6d: ff:a3:bc:8a:15:ba:ab:fe:b0:1b:d4:ea:78:5c:a3: fd:60:16:fd:4e:6d:a9:da:87:9a:c8:84:1d:89:c8: 83:03:19:2b:8f:44:65:e0:da:b6:4c:53:bf:d1:9e: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:C1:96:0E:36:21:9E:08:2A:90:79:74:05:9D:B6:89:E4:E2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bed47c25-dca2-34ed-a81c-3c9990d16f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e3:08:da:15:83:ca:cb:ab:ae:d6:6c:ef:7f:6e:59:56:0b: 99:46:71:da:90:da:4e:f4:c9:54:db:c3:59:66:f3:33:53:7f: c0:a3:b2:f7:2b:3a:b8:82:80:0a:23:5d:e4:91:81:3b:b7:c7: 27:7c:c1:1c:f8:98:42:f5:81:13:49:c6:3d:e6:cd:22:de:bb: e3:19:78:3b:40:3e:76:c5:f0:2f:c8:29:c6:eb:e9:32:14:d4: a0:48:96:06:bc:ba:18:70:f3:44:e7:0d:61:96:ca:c7:c1:6b: 9f:4e:a0:db:b9:d7:f2:80:d7:e4:92:ce:a7:d1:17:4b:7e:f3: dd:5e:20:35:35:22:4c:ce:fd:04:c0:51:5b:12:36:97:99:b7: fe:7f:2c:2d:5a:78:14:4d:0d:b2:cc:6e:a9:8b:14:f6:15:95: 72:ac:93:3e:ee:2a:0d:99:c7:75:48:45:87:48:e4:ad:5a:b9: 56:80:3a:b9:03:95:be:67:4c:a6:0f:83:bc:b4:0f:5a:fe:1a: d0:3c:a4:7f:1f:b7:39:58:be:4b:21:18:7c:00:00:0b:38:f6: 8b:76:20:41:77:33:ca:d8:65:ac:fe:2a:59:45:aa:75:2a:26: bb:2f:d2:99:1c:6e:96:f9:41:e2:b1:eb:03:c9:42:75:59:05: 46:26:a2:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfxdFnJA4QaQPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ODk5NDZkY2ItOTVkMS00MDYxLWIzZjAtOTA5NmIxNWM0MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpyH7wYtOamRcpYg+9yVAnmIU55jVRqgpiTd 0SojHOlnJYIvOaz97Au54H0GKTWQtnUdps4203UqU0u2bzbYgq1qDWOwAFPUQzz0 hSX++Ab65rxCSpKu9jOFX+LWxa1eiuBQ2HGzzsn1mzPK53DIElRmPWiN3ynGCwps p7pVHAwD1S8aYXoSTulY8SFeihNURsUPNjM4aP+x5yIUuvJ2NPEJ4QbXdG8GSn1+ aKXAyBhs64yevWlG/2PC8S9IhVbUy5RCDFFN6tm65R2Xhg5IwW3/o7yKFbqr/rAb 1Op4XKP9YBb9Tm2p2oeayIQdiciDAxkrj0Rl4Nq2TFO/0Z4CPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOzwZYONiGeCCqQeXQFnbaJ5OL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmVkNDdjMjUtZGNhMi0z NGVkLWE4MWMtM2M5OTkwZDE2ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfjCNoVg8rLq67WbO9/bllWC5lGcdqQ2k70yVTbw1lm8zNTf8Cjsvcr OriCgAojXeSRgTu3xyd8wRz4mEL1gRNJxj3mzSLeu+MZeDtAPnbF8C/IKcbr6TIU 1KBIlga8uhhw80TnDWGWysfBa59OoNu51/KA1+SSzqfRF0t+891eIDU1IkzO/QTA UVsSNpeZt/5/LC1aeBRNDbLMbqmLFPYVlXKskz7uKg2Zx3VIRYdI5K1auVaAOrkD lb5nTKYPg7y0D1r+GtA8pH8ftzlYvkshGHwAAAs49ot2IEF3M8rYZaz+KllFqnUq Jrsv0pkcbpb5QeKx6wPJQnVZBUYmorc= -----END CERTIFICATE-----Generated at Tue Jul 14 11:56:06 2026 by rpki-client