$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa File: 8857f622-c477-3dfb-a61e-c651670d500b.roa (raw, json) Hash identifier: Fzg1saXi2MnaMT6Ceh4V2eiNPgVzbXVIpXTrOzRg5Ig= Subject key identifier: 83:0C:03:94:97:89:FD:41:B2:F0:B6:8F:58:0E:17:D3:A2:30:CA:69 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F4976380FD9DBAF935AC02B00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30238 IP address blocks: 207.54.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:38:0f:d9:db:af:93:5a:c0:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8bfb7ea6-0986-4add-be15-5a76c0aa103e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:b2:03:86:ff:17:f2:8c:f0:f5:01:5d:b4: 00:ce:ab:84:60:1b:cf:2f:19:5d:20:a9:f5:42:48: 13:93:55:f3:f4:0f:ff:8f:fd:e9:5d:67:89:a5:44: 32:a7:4e:3a:b6:01:0a:42:6c:03:c6:d0:a6:18:46: bd:7b:d7:3b:71:51:6b:7e:b5:ab:cc:a9:fd:e1:00: c1:2b:f0:a5:c9:3e:ca:9e:cb:be:e0:ea:ac:12:1a: 91:3e:73:4e:5a:5e:c2:64:49:80:a7:65:29:7a:d0: 31:15:43:de:79:3c:e8:82:e1:ee:fb:de:87:46:e9: 31:08:d3:db:86:21:05:9e:ba:18:0e:56:50:56:92: 04:0a:82:45:06:94:0d:24:a9:fb:65:5b:1b:f9:11: 46:99:fe:b4:2a:42:34:15:bc:36:ff:ed:14:e8:ef: 20:f7:66:84:4a:b8:57:1a:77:6d:d7:15:83:63:41: 7a:59:76:f1:88:b6:e5:99:ad:7a:24:1a:a9:3d:df: 78:1e:ca:45:30:8f:f0:a8:f7:2d:2d:09:ad:3c:61: 4e:42:dd:46:0c:23:42:80:2d:1a:be:3b:a1:36:d8: fd:20:24:6f:9c:21:8c:b3:b4:52:f0:6e:38:65:1d: 0c:25:7b:9c:ce:99:28:8f:f9:69:91:14:4b:6d:75: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0C:03:94:97:89:FD:41:B2:F0:B6:8F:58:0E:17:D3:A2:30:CA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8857f622-c477-3dfb-a61e-c651670d500b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c6:dc:ef:bd:9c:54:5c:a1:86:1a:e7:71:10:79:61:e6:68: 6e:4e:a8:d6:ca:5d:b7:13:6a:1b:69:c7:d1:38:1d:df:a6:2f: b0:7c:89:be:a5:79:ea:38:da:a4:f2:87:83:55:9f:fc:b5:73: d8:2c:8b:a4:0b:fc:11:60:e8:49:b6:29:8d:5f:27:ad:4b:6e: 42:52:92:a5:ff:dd:1c:e8:41:5d:57:01:94:dd:e9:d2:a3:84: 93:ab:7f:52:d8:81:23:bd:02:62:21:08:d1:78:9f:c8:5c:f0: 9b:32:17:65:ee:2c:1c:ac:8e:d1:94:26:98:08:6b:8b:3a:eb: 9a:82:b3:6f:03:24:08:75:f0:3d:77:1b:da:3f:3f:23:ce:9c: 22:1d:3c:69:ab:a3:4c:21:7d:8f:aa:a6:d1:17:a4:73:5e:86: ba:af:c3:33:c0:5d:41:b8:14:75:aa:92:df:83:1b:cd:af:e9: 59:78:b0:42:45:5d:1e:d6:09:63:65:c9:6f:f7:c6:b0:ea:a6: 83:bc:e7:30:9a:d9:81:35:b0:67:36:b7:e2:ee:b1:14:ca:3e: f3:20:0f:e2:f4:3c:18:6c:8e:86:f3:40:69:04:e4:eb:91:42: 47:f6:b1:1f:df:cb:87:c0:89:94:0d:9c:5b:59:51:e6:63:77: 45:62:3e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdjgP2duvk1rAKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJmYjdlYTYtMDk4Ni00YWRkLWJlMTUtNWE3NmMwYWExMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c+yA4b/F/KM8PUBXbQAzquEYBvPLxldIKn1 QkgTk1Xz9A//j/3pXWeJpUQyp046tgEKQmwDxtCmGEa9e9c7cVFrfrWrzKn94QDB K/ClyT7Knsu+4OqsEhqRPnNOWl7CZEmAp2UpetAxFUPeeTzoguHu+96HRukxCNPb hiEFnroYDlZQVpIECoJFBpQNJKn7ZVsb+RFGmf60KkI0Fbw2/+0U6O8g92aESrhX Gndt1xWDY0F6WXbxiLblma16JBqpPd94HspFMI/wqPctLQmtPGFOQt1GDCNCgC0a vjuhNtj9ICRvnCGMs7RS8G44ZR0MJXuczpkoj/lpkRRLbXVktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMMA5SXif1BsvC2j1gOF9OiMMppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODg1N2Y2MjItYzQ3Ny0z ZGZiLWE2MWUtYzY1MTY3MGQ1MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbG3O+9nFRcoYYa53EQeWHmaG5OqNbKXbcTahtpx9E4Hd+mL7B8ib6l eeo42qTyh4NVn/y1c9gsi6QL/BFg6Em2KY1fJ61LbkJSkqX/3RzoQV1XAZTd6dKj hJOrf1LYgSO9AmIhCNF4n8hc8JsyF2XuLBysjtGUJpgIa4s665qCs28DJAh18D13 G9o/PyPOnCIdPGmro0whfY+qptEXpHNehrqvwzPAXUG4FHWqkt+DG82v6Vl4sEJF XR7WCWNlyW/3xrDqpoO85zCa2YE1sGc2t+LusRTKPvMgD+L0PBhsjobzQGkE5OuR Qkf2sR/fy4fAiZQNnFtZUeZjd0ViPiI= -----END CERTIFICATE-----Generated at Sat Oct 3 13:29:49 2026 by rpki-client