$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa File: d7988856-9a82-35e4-8647-e7dca63b7c9b.roa (raw, json) Hash identifier: q3NPeLyUuGhRH6CYfikz/y2508C6U2d1X3V/IJFUBws= Subject key identifier: 0A:26:3A:33:CD:29:05:9B:5E:60:28:A8:B3:7A:09:F5:A5:38:41:D9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA7884D0D75340BBAEB6EAA90 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 207.54.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4d:0d:75:34:0b:ba:eb:6e:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=02768a0f-85ce-47c9-aa2d-4df21b708e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:40:1f:1c:9f:5f:f7:ff:67:b9:6a:35:b4: d5:36:5d:9d:2a:93:94:cd:3b:8f:cf:c6:98:3f:82: e1:f9:26:a9:6c:af:38:6c:cb:70:09:51:aa:ac:94: 36:c0:58:47:08:b1:ff:54:27:ba:3e:6b:2b:6c:f4: d3:2a:cc:7a:12:98:3d:2b:0d:16:df:bc:69:eb:4e: 2f:cb:34:28:16:0c:04:e3:97:95:64:58:bd:a5:22: 2d:ee:c4:b5:6a:fc:b1:73:35:35:24:5c:56:1f:72: 62:da:0b:dd:c9:a6:f7:2a:51:d0:22:c8:a6:9b:87: dd:85:07:76:d5:08:8c:4a:2d:9f:28:81:b1:4b:72: 8f:6e:1c:1b:3a:f3:a9:c8:86:e9:39:73:ba:7f:26: 21:cf:7a:47:48:62:3b:13:be:76:4e:1d:7c:a1:99: 3b:53:3a:0e:28:87:4d:45:9a:43:0e:63:ba:26:8e: 6a:49:80:d2:31:6b:78:46:a8:cc:b6:3f:d4:8a:ec: d0:f3:a7:90:66:3f:cd:df:aa:6f:f7:4b:4b:7a:f7: f4:d9:49:a1:3f:cf:78:86:77:c6:9f:5d:b6:fd:89: 31:f9:e1:1c:87:63:4e:56:e8:af:86:d4:91:19:fe: 10:fe:94:dd:f2:1d:3c:68:9a:de:b8:74:e5:0d:50: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:26:3A:33:CD:29:05:9B:5E:60:28:A8:B3:7A:09:F5:A5:38:41:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d7988856-9a82-35e4-8647-e7dca63b7c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3c:59:7f:3b:49:32:65:e7:a7:c1:ca:74:8d:b1:e7:c0:15: 39:80:a6:a5:4e:b4:98:79:f5:99:10:50:7c:26:69:4a:f6:c3: 55:ad:3f:6f:2f:6a:f4:3f:76:28:f6:3b:a6:b8:a9:86:a6:0e: d2:de:ec:60:4f:b2:c5:05:c8:d2:ba:b9:e0:c6:c0:ff:a4:56: 0b:74:79:ff:ca:51:6c:53:e9:07:b4:39:4e:ec:88:27:db:57: f8:c7:7d:a3:6c:2f:42:91:fa:50:76:36:c4:04:3c:a1:45:8e: 62:46:d5:1e:1c:3d:78:dc:fa:4c:24:ed:2c:92:10:06:f9:e4: a0:46:5a:bf:40:f1:bf:75:f3:72:18:8e:d0:d7:46:80:c1:11: ba:e7:98:e6:e3:c4:b9:89:fd:96:73:ce:98:80:e9:16:a3:d8: 70:f9:fb:dc:70:db:3c:70:ab:4f:0f:7b:48:a8:e2:fa:85:ee: 2e:1f:2d:41:8b:24:f7:65:19:8c:b6:98:6e:ad:5a:a3:09:e7: 8a:71:fd:89:2b:f4:60:13:51:71:ae:7f:3e:2e:30:46:38:b9: a5:39:51:85:53:91:6c:0b:93:ad:36:0a:c1:d0:4a:dd:d7:e2: 69:64:9f:9e:22:b7:b4:84:cf:af:ab:a3:b6:f1:3a:40:a9:d1: d3:af:37:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE0NdTQLuutuqpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDI3NjhhMGYtODVjZS00N2M5LWFhMmQtNGRmMjFiNzA4ZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCBAHxyfX/f/Z7lqNbTVNl2dKpOUzTuPz8aY P4Lh+SapbK84bMtwCVGqrJQ2wFhHCLH/VCe6PmsrbPTTKsx6Epg9Kw0W37xp604v yzQoFgwE45eVZFi9pSIt7sS1avyxczU1JFxWH3Ji2gvdyab3KlHQIsimm4fdhQd2 1QiMSi2fKIGxS3KPbhwbOvOpyIbpOXO6fyYhz3pHSGI7E752Th18oZk7UzoOKIdN RZpDDmO6Jo5qSYDSMWt4RqjMtj/UiuzQ86eQZj/N36pv90tLevf02UmhP894hnfG n122/Ykx+eEch2NOVuivhtSRGf4Q/pTd8h08aJreuHTlDVB+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAomOjPNKQWbXmAoqLN6CfWlOEHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDc5ODg4NTYtOWE4Mi0z NWU0LTg2NDctZTdkY2E2M2I3YzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs8WX87STJl56fBynSNsefAFTmApqVOtJh59ZkQUHwmaUr2w1WtP28v avQ/dij2O6a4qYamDtLe7GBPssUFyNK6ueDGwP+kVgt0ef/KUWxT6Qe0OU7siCfb V/jHfaNsL0KR+lB2NsQEPKFFjmJG1R4cPXjc+kwk7SySEAb55KBGWr9A8b9183IY jtDXRoDBEbrnmObjxLmJ/ZZzzpiA6Raj2HD5+9xw2zxwq08Pe0io4vqF7i4fLUGL JPdlGYy2mG6tWqMJ54px/Ykr9GATUXGufz4uMEY4uaU5UYVTkWwLk602CsHQSt3X 4mlkn54it7SEz6+ro7bxOkCp0dOvN/c= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:53 2026 by rpki-client