$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa File: caf630ba-1c0c-3d82-83f6-60409e8262e6.roa (raw, json) Hash identifier: S/ZcBN+8HrJTmAYrtDKdTJcLPa4AOL30GEPv3lFxIT4= Subject key identifier: 83:87:48:2A:A8:6B:E8:B3:6F:F3:76:D8:BE:FD:F7:E0:B1:7B:DC:1D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA7884CF7CBAD61EC95EEE580 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 207.54.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4c:f7:cb:ad:61:ec:95:ee:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bef5b933-9a4b-41df-b2b3-e21137743056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:94:09:5b:80:fc:ef:3c:7b:7e:6c:25:1b: 87:a5:6d:64:e7:a1:7c:9c:73:a2:96:46:b5:ae:79: 3e:5f:37:59:89:b8:fa:72:f5:87:c5:1f:35:b5:89: 49:67:63:4d:ae:48:d1:dd:11:6f:f0:82:01:90:fc: eb:ae:0a:ed:b5:b3:72:c0:62:f0:2b:bf:de:85:a7: 8d:a4:86:81:ad:a2:75:47:74:cf:35:ff:30:18:0c: 5f:dd:b9:dc:f1:0d:5f:99:11:05:e8:7a:80:fc:85: 27:69:a1:33:f2:e7:90:1a:f6:84:57:bc:a6:d3:4c: 0f:54:27:af:93:32:0c:aa:e8:7f:9e:d6:8e:db:05: 9c:cc:5d:fc:5a:af:3f:9e:f7:91:df:b7:15:3b:41: 31:36:b4:56:c7:80:89:b7:e9:60:9d:c2:92:b6:06: e7:cb:c9:c9:b6:91:01:c0:4a:f7:e9:8b:c1:11:21: 5b:5f:22:b8:6c:2b:3f:14:bb:fc:12:ff:81:ba:b6: c9:cd:e7:c8:15:39:08:b1:a4:4c:78:d3:af:95:77: 64:8c:89:85:68:9c:72:76:e9:ae:43:82:22:d2:e6: 34:d6:86:2c:90:c5:66:e0:d1:ac:c2:9d:1d:61:ac: eb:8e:d8:66:18:83:5b:44:f9:f3:5d:10:15:85:23: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:87:48:2A:A8:6B:E8:B3:6F:F3:76:D8:BE:FD:F7:E0:B1:7B:DC:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dc:9f:ae:7a:90:cc:50:6d:5f:4a:50:04:77:a9:eb:e3:fc: 53:53:f3:0d:80:d3:ae:d2:7c:88:e0:51:f5:c6:a4:de:05:2d: ad:e2:46:b2:f2:42:84:47:b1:d5:0b:07:c9:19:d5:fb:a8:a3: bc:47:04:98:ea:a4:c6:6f:07:6e:fa:c3:af:5f:bb:61:81:73: 3a:0d:c0:e1:09:01:aa:61:f7:2e:81:63:f3:75:ca:dc:86:18: 2a:ba:94:d9:b7:85:c5:c2:1d:62:cc:0a:75:50:ec:11:9d:4f: 0d:48:94:19:74:c7:c6:07:27:55:a9:8f:06:d7:be:b8:65:55: de:c6:84:6c:9b:0a:c2:18:1d:a5:4a:02:aa:9a:5e:7e:fb:f6: 6e:85:89:a7:d0:eb:d7:4e:0d:c4:af:11:2b:87:93:77:69:c5: 80:56:b1:58:db:98:46:e1:ad:c1:05:54:74:93:7d:33:a9:2e: 15:bf:fd:79:61:bf:ae:90:45:17:02:4d:45:31:9d:23:36:e7: 02:d0:ce:37:a4:7f:c5:75:80:76:3d:19:52:0c:4b:32:ca:b8: 4a:fe:ae:c2:7d:9e:6c:e1:64:d2:87:6c:14:97:05:e4:04:b8: 70:16:3b:44:60:f3:ce:31:c5:47:20:46:b9:1f:26:4e:27:5d: 12:a5:67:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEz3y61h7JXu5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmVmNWI5MzMtOWE0Yi00MWRmLWIyYjMtZTIxMTM3NzQzMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFCUCVuA/O88e35sJRuHpW1k56F8nHOilka1 rnk+XzdZibj6cvWHxR81tYlJZ2NNrkjR3RFv8IIBkPzrrgrttbNywGLwK7/ehaeN pIaBraJ1R3TPNf8wGAxf3bnc8Q1fmREF6HqA/IUnaaEz8ueQGvaEV7ym00wPVCev kzIMquh/ntaO2wWczF38Wq8/nveR37cVO0ExNrRWx4CJt+lgncKStgbny8nJtpEB wEr36YvBESFbXyK4bCs/FLv8Ev+BurbJzefIFTkIsaRMeNOvlXdkjImFaJxydumu Q4Ii0uY01oYskMVm4NGswp0dYazrjthmGINbRPnzXRAVhSMsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOHSCqoa+izb/N22L799+Cxe9wdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2FmNjMwYmEtMWMwYy0z ZDgyLTgzZjYtNjA0MDllODI2MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvcn656kMxQbV9KUAR3qevj/FNT8w2A067SfIjgUfXGpN4FLa3iRrLy QoRHsdULB8kZ1fuoo7xHBJjqpMZvB276w69fu2GBczoNwOEJAaph9y6BY/N1ytyG GCq6lNm3hcXCHWLMCnVQ7BGdTw1IlBl0x8YHJ1WpjwbXvrhlVd7GhGybCsIYHaVK AqqaXn779m6FiafQ69dODcSvESuHk3dpxYBWsVjbmEbhrcEFVHSTfTOpLhW//Xlh v66QRRcCTUUxnSM25wLQzjekf8V1gHY9GVIMSzLKuEr+rsJ9nmzhZNKHbBSXBeQE uHAWO0Rg884xxUcgRrkfJk4nXRKlZ1w= -----END CERTIFICATE-----Generated at Sat Sep 12 15:11:45 2026 by rpki-client