$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/87c1d39f-751f-3b3c-bada-1097f05b22ca.roa File: 87c1d39f-751f-3b3c-bada-1097f05b22ca.roa (raw, json) Hash identifier: W89sE+jpcI6pFDDwdhG8YzhC7u2vsEgKoiClCLUd6GY= Subject key identifier: E1:10:E4:1D:11:8D:8A:9F:02:9A:6D:55:76:9D:3D:06:F4:54:03:E9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D1219AB7F8A74CF8C0AE80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/87c1d39f-751f-3b3c-bada-1097f05b22ca.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 207.54.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:21:9a:b7:f8:a7:4c:f8:c0:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=2238c17d-2841-492c-b25b-48bd33657ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:0a:75:cf:76:a7:a0:0b:7a:f7:50:0b:fc: 7e:12:80:9b:45:da:94:46:61:d5:89:ac:1d:a9:ac: 59:44:e2:d0:72:e9:7c:d5:44:13:24:ce:66:37:14: f4:c1:5e:9f:34:5e:02:da:b1:92:33:e8:76:ba:ff: 45:a5:f3:52:30:e2:31:76:00:10:40:f3:91:9b:8c: 32:ec:e9:f3:cd:0f:8e:e9:1b:70:21:fd:dc:a4:e3: 62:69:0b:93:a9:97:34:10:7e:44:b8:b1:22:6c:f1: bc:8e:6a:24:52:21:da:da:8f:2c:ce:c6:53:2c:83: b5:b4:a9:3b:f1:cd:8e:06:01:48:ed:4e:5c:dc:27: 38:ed:2b:e7:1d:4a:9b:28:8b:7a:b0:8f:aa:ab:08: d7:c6:cf:7b:1e:8d:f9:40:2d:2b:ca:9a:50:30:52: 56:76:9b:e5:8c:8b:05:04:7c:56:1e:2b:e1:e9:36: f2:e5:a2:e1:68:61:56:08:d9:9e:34:44:29:27:6e: 1d:3c:0d:ea:aa:8a:2f:07:33:fe:28:0e:93:26:ae: e9:e4:6c:90:4c:a7:14:74:8f:ec:aa:dd:ef:bb:df: 2f:21:de:5c:f5:5a:9d:9c:41:77:15:8d:04:08:45: 2e:6e:f1:fd:2f:de:53:d0:11:b7:01:8d:9f:ca:87: 73:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:10:E4:1D:11:8D:8A:9F:02:9A:6D:55:76:9D:3D:06:F4:54:03:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/87c1d39f-751f-3b3c-bada-1097f05b22ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:67:27:69:5d:1d:3f:71:52:5b:c6:a5:0b:0c:86:9c:a8:38: 1d:10:4c:f0:86:d8:d6:84:a6:3f:90:82:4d:f8:d2:2a:da:7e: 87:e2:62:3d:7d:60:19:0a:bd:a6:82:09:0a:17:69:1b:f0:16: 65:4e:3a:90:9a:fa:ab:17:c6:78:0c:e9:42:45:25:9d:df:b8: 0e:66:73:ac:0a:66:91:f9:4d:56:ff:c3:8d:8b:14:84:f8:f3: e9:57:5f:1d:b8:fc:5f:ba:10:ba:a8:d8:df:b5:41:4b:5d:1a: bf:fb:63:01:56:a9:92:d3:7d:c2:35:85:23:54:58:cf:00:68: 50:c7:f8:aa:28:4c:d8:61:83:89:b5:48:fe:cb:e5:a8:60:ed: 46:fa:2b:08:01:55:fb:ae:d8:2d:97:26:02:d1:6a:07:3e:7b: 80:43:54:99:5b:83:bd:29:76:7c:56:22:07:0d:ff:e0:79:91: f5:77:79:34:ec:47:92:01:bb:f5:d3:ef:02:7c:01:50:23:60: be:76:28:d6:c1:49:d5:e4:6c:b1:f5:b9:30:88:b8:ae:9a:21: 18:6c:cc:03:ac:b7:e8:15:a2:36:a5:bf:e3:60:19:b2:cc:b8: 45:3c:c5:ad:2c:66:84:ca:72:87:03:31:cd:48:07:93:4d:7d: c7:be:bf:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SGat/inTPjAroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MjIzOGMxN2QtMjg0MS00OTJjLWIyNWItNDhiZDMzNjU3ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn4Kdc92p6ALevdQC/x+EoCbRdqURmHViawd qaxZROLQcul81UQTJM5mNxT0wV6fNF4C2rGSM+h2uv9FpfNSMOIxdgAQQPORm4wy 7OnzzQ+O6RtwIf3cpONiaQuTqZc0EH5EuLEibPG8jmokUiHa2o8szsZTLIO1tKk7 8c2OBgFI7U5c3Cc47SvnHUqbKIt6sI+qqwjXxs97Ho35QC0ryppQMFJWdpvljIsF BHxWHivh6Tby5aLhaGFWCNmeNEQpJ24dPA3qqoovBzP+KA6TJq7p5GyQTKcUdI/s qt3vu98vId5c9VqdnEF3FY0ECEUubvH9L95T0BG3AY2fyodzOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEQ5B0RjYqfApptVXadPQb0VAPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODdjMWQzOWYtNzUxZi0z YjNjLWJhZGEtMTA5N2YwNWIyMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpnJ2ldHT9xUlvGpQsMhpyoOB0QTPCG2NaEpj+Qgk340irafofiYj19 YBkKvaaCCQoXaRvwFmVOOpCa+qsXxngM6UJFJZ3fuA5mc6wKZpH5TVb/w42LFIT4 8+lXXx24/F+6ELqo2N+1QUtdGr/7YwFWqZLTfcI1hSNUWM8AaFDH+KooTNhhg4m1 SP7L5ahg7Ub6KwgBVfuu2C2XJgLRagc+e4BDVJlbg70pdnxWIgcN/+B5kfV3eTTs R5IBu/XT7wJ8AVAjYL52KNbBSdXkbLH1uTCIuK6aIRhszAOst+gVojalv+NgGbLM uEU8xa0sZoTKcocDMc1IB5NNfce+v0Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:20:37 2025 by rpki-client