$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/260cc040-e89e-3e54-8195-0dca0e2f853b.roa File: 260cc040-e89e-3e54-8195-0dca0e2f853b.roa (raw, json) Hash identifier: hBOY9KymqE9tyTTzRp0gdKE8QyAdZpk6B1PGY8SlVlM= Subject key identifier: 58:22:E7:B2:C0:DB:00:41:FA:C8:ED:EA:C8:81:60:83:B7:C2:B5:EB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D8EF580BE7606D6EB84DE2F40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/260cc040-e89e-3e54-8195-0dca0e2f853b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30238 IP address blocks: 207.54.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:80:be:76:06:d6:eb:84:de:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=38e255a3-1cbd-4933-bbc1-2d1c8c376edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:0e:e8:18:1d:54:9c:f8:48:fe:3d:df:a0: bd:e3:f9:c7:f2:dc:45:23:e6:d7:55:40:dd:eb:79: 07:96:f8:74:92:69:13:a6:1a:dc:49:05:5f:a7:bd: d0:e3:ed:d8:d6:49:3c:9b:4b:af:55:fa:6c:aa:f6: 5a:68:be:c4:f2:08:2e:7f:51:96:b6:99:9a:1b:1e: fd:41:c0:75:0e:b3:40:54:a6:df:c5:b2:e5:44:2e: 7b:6e:c4:ec:85:20:51:87:10:58:8a:31:f2:45:30: 83:e7:8c:42:61:33:76:95:7b:36:d8:02:cd:c1:78: af:b1:af:39:67:e5:d6:8f:53:a6:89:b0:9e:86:b8: 75:1a:80:46:3a:5e:73:f2:e7:de:71:2e:d8:1a:c4: 03:83:e7:e6:74:35:dd:96:f1:0f:16:67:6d:98:bd: 89:38:00:24:dc:fb:f0:54:f8:dd:91:f3:41:50:2f: 17:0a:62:58:ea:50:5f:d0:ad:0f:65:f4:a5:c0:88: c2:95:29:98:1c:55:7e:47:24:e7:7e:df:23:a0:66: 8b:d5:f9:89:d3:b1:27:49:ce:be:f2:ae:54:13:f1: dd:69:1a:3e:4b:b7:5c:05:94:a4:3d:ae:e2:3b:8c: 07:0e:b5:9d:d9:f2:e8:11:6c:3f:f4:75:9d:97:1e: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:E7:B2:C0:DB:00:41:FA:C8:ED:EA:C8:81:60:83:B7:C2:B5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/260cc040-e89e-3e54-8195-0dca0e2f853b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:36:9f:d5:89:cc:61:6e:66:66:52:22:2c:f9:ca:74:64:89: 23:50:4d:54:69:27:e5:8c:81:c3:0d:45:10:cb:1d:86:f2:ae: 29:18:69:66:77:3f:3c:c7:3e:ca:35:95:b5:ee:19:be:30:5c: 71:de:60:b4:f5:bd:29:82:45:a5:ac:97:e3:8a:e0:89:b0:d5: f1:60:d8:29:c7:f6:42:87:e5:42:db:29:ce:4b:ab:bb:5c:75: b0:d0:22:65:81:db:f9:59:50:c9:a6:eb:00:b7:70:0e:69:72: 7f:26:dc:60:3b:2e:7a:7c:7d:12:60:8c:42:6d:38:2b:1c:2a: 3b:b0:c0:0c:2d:1e:c3:83:63:4a:82:6c:c0:41:45:d6:11:46: c1:c5:16:ab:09:b2:25:70:f3:7e:b4:f4:76:ae:2c:ff:a4:b0: 32:8d:0c:eb:4b:e0:ce:51:3c:ec:ab:2e:49:4d:37:c5:b3:b0: 93:1e:f7:69:7a:90:17:90:44:2c:bb:5b:c4:d7:24:4a:b7:20: 08:c7:92:8b:c3:b7:9b:32:0d:52:b5:09:1f:8a:e6:a5:e5:de: 48:39:f7:e6:da:65:b7:a0:8f:cf:fa:56:ee:89:6f:5a:4d:82: f1:29:36:7f:0a:94:a9:8e:31:a3:e4:19:29:df:e0:63:c6:13: f9:56:7a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YC+dgbW64TeL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzhlMjU1YTMtMWNiZC00OTMzLWJiYzEtMmQxYzhjMzc2ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvcO6BgdVJz4SP4936C94/nH8txFI+bXVUDd 63kHlvh0kmkTphrcSQVfp73Q4+3Y1kk8m0uvVfpsqvZaaL7E8gguf1GWtpmaGx79 QcB1DrNAVKbfxbLlRC57bsTshSBRhxBYijHyRTCD54xCYTN2lXs22ALNwXivsa85 Z+XWj1OmibCehrh1GoBGOl5z8ufecS7YGsQDg+fmdDXdlvEPFmdtmL2JOAAk3Pvw VPjdkfNBUC8XCmJY6lBf0K0PZfSlwIjClSmYHFV+RyTnft8joGaL1fmJ07EnSc6+ 8q5UE/HdaRo+S7dcBZSkPa7iO4wHDrWd2fLoEWw/9HWdlx7ZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgi57LA2wBB+sjt6siBYIO3wrXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjYwY2MwNDAtZTg5ZS0z ZTU0LTgxOTUtMGRjYTBlMmY4NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw2n9WJzGFuZmZSIiz5ynRkiSNQTVRpJ+WMgcMNRRDLHYbyrikYaWZ3 PzzHPso1lbXuGb4wXHHeYLT1vSmCRaWsl+OK4Imw1fFg2CnH9kKH5ULbKc5Lq7tc dbDQImWB2/lZUMmm6wC3cA5pcn8m3GA7Lnp8fRJgjEJtOCscKjuwwAwtHsODY0qC bMBBRdYRRsHFFqsJsiVw83609HauLP+ksDKNDOtL4M5RPOyrLklNN8WzsJMe92l6 kBeQRCy7W8TXJEq3IAjHkovDt5syDVK1CR+K5qXl3kg59+baZbegj8/6Vu6Jb1pN gvEpNn8KlKmOMaPkGSnf4GPGE/lWer0= -----END CERTIFICATE-----Generated at Wed May 13 09:19:47 2026 by rpki-client