$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa File: caf630ba-1c0c-3d82-83f6-60409e8262e6.roa (raw, json) Hash identifier: f7ks8RU5H2cYCvPj/Y2hnGiSQQ9bkBYEA6goZyX9QWM= Subject key identifier: 97:08:31:3E:A3:1B:80:A8:3E:42:0E:0A:D0:AE:16:17:26:FE:E0:84 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556E9BF89F41C4EE4C52680 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 207.54.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e9:bf:89:f4:1c:4e:e4:c5:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=1b37e4ba-47e5-4fdd-9acb-2524d956931b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:ca:9b:cb:b4:0f:0c:e8:f8:0f:14:5d:cb: f6:75:d8:ba:f8:ea:d8:ad:f3:f8:a8:6a:41:fa:2f: 76:76:d1:30:3a:8c:1b:a2:1f:12:e7:ea:36:ec:6f: 2d:d0:f7:61:40:98:e6:1d:ed:01:05:c9:1c:c8:d7: cb:81:34:d4:05:59:13:67:3a:80:8b:85:7d:43:71: 8d:d4:26:ca:7a:fb:99:e0:34:e4:29:99:92:de:c8: b1:57:71:a3:e3:f8:b7:7b:52:4c:a5:8e:85:76:83: c5:39:60:55:77:a5:d2:45:71:a8:df:d3:c5:43:cf: bd:0c:11:1e:ab:91:5e:d9:5e:95:14:76:f9:67:0a: 1a:3f:bd:30:c1:52:ff:c9:84:43:98:4f:3c:5f:b7: a4:a4:7e:64:d8:70:fc:8c:3d:a0:12:bd:0d:4f:70: 2b:e9:89:7b:f7:cd:49:a7:52:0a:d0:3a:57:f5:2e: f4:75:2b:7a:f6:cf:d5:39:f7:57:f3:34:9d:d1:b7: 65:94:29:77:1e:8e:e4:45:25:51:bb:34:54:2b:b6: 01:90:5f:8c:a4:01:b2:7a:a7:54:2c:8c:43:a5:c5: 9f:b4:eb:c5:1f:a2:42:51:62:79:63:21:81:a6:8f: 74:87:80:2b:01:e3:4b:96:f2:4a:04:fd:ed:4c:ef: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:31:3E:A3:1B:80:A8:3E:42:0E:0A:D0:AE:16:17:26:FE:E0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b9:b4:f6:12:4a:f4:46:d7:2a:0d:4c:63:96:85:21:92:e1: 77:c5:2f:65:a7:e8:fa:a6:1e:4f:4d:a3:72:e2:0d:f5:6c:0c: 51:09:0c:03:af:37:96:c3:3d:55:5d:82:68:db:12:a5:0e:7d: 6d:63:d2:3d:27:e3:09:85:c2:16:d9:5b:cf:7e:ac:c1:97:1a: 14:f3:12:5a:52:58:11:88:81:73:5b:7c:94:18:d3:7f:00:4b: 49:7c:7a:aa:5b:9f:a7:1c:62:bc:39:51:a7:18:9b:e3:51:a1: 44:98:f6:7a:a0:6b:72:af:74:6b:4f:62:94:e1:f1:96:a4:e1: 61:d7:36:d8:ce:89:13:25:86:08:4a:c2:94:60:b9:a5:d3:a7: b8:71:7b:6d:f6:aa:05:b7:35:13:5a:7a:7d:72:02:c5:5e:49: 39:0d:fd:c7:62:4b:cc:28:e2:1f:2d:82:8c:71:ca:d2:fe:28: 3e:fc:98:ef:c2:70:a8:01:85:36:4c:94:6a:39:51:41:bc:98: 9e:46:d1:d3:c8:a7:d0:c7:53:1b:95:45:37:8f:29:53:cb:65: 28:ea:b7:83:38:90:2e:35:cf:1b:dc:4a:8b:d4:1b:a1:ba:82: bc:86:fd:95:9e:c2:ed:aa:2f:f7:dc:e9:25:a8:0d:c0:8b:84: 34:cc:77:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vum/ifQcTuTFJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MWIzN2U0YmEtNDdlNS00ZmRkLTlhY2ItMjUyNGQ5NTY5MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgnKm8u0Dwzo+A8UXcv2ddi6+OrYrfP4qGpB +i92dtEwOowboh8S5+o27G8t0PdhQJjmHe0BBckcyNfLgTTUBVkTZzqAi4V9Q3GN 1CbKevuZ4DTkKZmS3sixV3Gj4/i3e1JMpY6FdoPFOWBVd6XSRXGo39PFQ8+9DBEe q5Fe2V6VFHb5ZwoaP70wwVL/yYRDmE88X7ekpH5k2HD8jD2gEr0NT3Ar6Yl7981J p1IK0DpX9S70dSt69s/VOfdX8zSd0bdllCl3Ho7kRSVRuzRUK7YBkF+MpAGyeqdU LIxDpcWftOvFH6JCUWJ5YyGBpo90h4ArAeNLlvJKBP3tTO9HjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcIMT6jG4CoPkIOCtCuFhcm/uCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2FmNjMwYmEtMWMwYy0z ZDgyLTgzZjYtNjA0MDllODI2MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA65tPYSSvRG1yoNTGOWhSGS4XfFL2Wn6PqmHk9No3LiDfVsDFEJDAOv N5bDPVVdgmjbEqUOfW1j0j0n4wmFwhbZW89+rMGXGhTzElpSWBGIgXNbfJQY038A S0l8eqpbn6ccYrw5UacYm+NRoUSY9nqga3KvdGtPYpTh8Zak4WHXNtjOiRMlhghK wpRguaXTp7hxe232qgW3NRNaen1yAsVeSTkN/cdiS8wo4h8tgoxxytL+KD78mO/C cKgBhTZMlGo5UUG8mJ5G0dPIp9DHUxuVRTePKVPLZSjqt4M4kC41zxvcSovUG6G6 gryG/ZWewu2qL/fc6SWoDcCLhDTMd30= -----END CERTIFICATE-----Generated at Tue Sep 16 02:30:42 2025 by rpki-client