$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa File: bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa (raw, json) Hash identifier: kjfRuQPlhscoDdZ4h2cPCfcvFO3+Rx6dw6j0R/ujZxg= Subject key identifier: 4D:E6:DB:64:0A:0E:06:9D:9A:9B:02:79:C9:5B:4C:A1:88:15:9D:63 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D121884187F30098720A40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 207.54.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:21:88:41:87:f3:00:98:72:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=069b3d2a-6f11-4f47-a510-6c6d66c6789c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:5c:5f:09:5b:6a:45:3a:b5:32:33:81:e9: 6c:fc:1d:f4:fa:c9:2c:fc:1f:e9:f6:05:ad:c3:f4: 2e:6a:9f:50:05:a0:e9:5e:ce:99:33:30:5c:22:85: b4:3e:c0:da:da:f1:79:9c:87:91:d2:51:48:ab:76: 89:47:8b:d0:bf:78:54:43:42:7b:22:ce:a6:c5:3c: cf:27:29:ae:33:2e:a9:71:61:92:cb:eb:98:dc:17: 74:d0:17:5d:3d:f5:ec:c7:d6:49:c6:72:c5:a7:cc: 1b:54:57:d7:de:06:4b:b4:a8:87:e9:ea:19:b7:64: ca:72:a0:46:a7:f7:3f:a6:2e:83:e9:55:35:ab:b9: 41:7a:a1:ca:0c:f2:45:4a:07:cd:93:e8:42:b7:ec: c9:df:1b:64:e1:4e:21:83:ed:a5:bc:fe:a4:01:9d: 14:f7:1b:03:83:3a:2b:47:e6:11:d8:e4:e6:09:75: 70:3f:ce:e7:3d:e1:1b:78:06:a3:3f:33:01:59:cd: fe:d4:37:d0:2a:1a:70:9f:b6:f2:0e:ee:89:7b:10: cf:ee:36:94:22:c5:c9:95:e3:d9:f8:53:59:f9:c1: 4b:d6:8f:28:2a:d2:e7:7e:3f:00:e3:c5:b4:51:44: 11:8a:54:6e:04:93:c9:19:17:95:4b:b4:81:7f:00: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E6:DB:64:0A:0E:06:9D:9A:9B:02:79:C9:5B:4C:A1:88:15:9D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/bab05333-27e9-304a-84a6-ea0a5b87b5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:8f:f0:76:29:d5:c8:a7:63:3b:43:0d:4a:9f:0c:c6:e4:e3: 16:52:0e:3d:f5:53:b6:c3:7f:99:0a:e4:a4:6a:38:e0:2e:2b: c4:ac:f3:03:85:13:ce:0a:03:d7:0f:53:eb:1a:00:72:9e:2b: e1:02:ff:13:dd:d1:a6:84:3a:b6:40:f9:37:59:ea:5a:af:94: 94:af:0b:c8:19:9e:1f:f9:90:ff:b5:af:29:f1:56:98:ca:1c: 8c:d5:c4:b4:63:32:0c:73:00:a0:e5:e8:81:85:66:d9:00:03: f8:68:18:e4:ba:3b:aa:80:99:32:c8:54:81:7a:7c:90:80:61: ef:d5:a0:18:18:8c:a8:10:50:2e:cc:96:00:1e:62:dc:e9:8f: 7d:f8:d7:2e:9a:d2:f5:51:42:f2:be:d2:ad:e1:ea:98:88:7a: f7:9a:68:86:a3:9b:f3:52:9c:3a:a1:12:b7:5f:e9:86:98:57: 41:e1:5b:b5:0b:52:40:12:c9:f7:5c:4b:13:76:32:62:e6:82: cf:d3:d3:25:25:0a:76:7f:02:fb:67:3f:92:20:04:ba:af:9f: f3:99:cf:00:05:a0:75:75:bd:38:a7:7a:ca:c5:ee:4e:7c:8a: 15:52:ed:ff:28:46:eb:0d:b2:9a:9d:02:25:a2:cf:89:af:82: fe:1e:19:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SGIQYfzAJhyCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MDY5YjNkMmEtNmYxMS00ZjQ3LWE1MTAtNmM2ZDY2YzY3ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIlcXwlbakU6tTIzgels/B30+sks/B/p9gWt w/Quap9QBaDpXs6ZMzBcIoW0PsDa2vF5nIeR0lFIq3aJR4vQv3hUQ0J7Is6mxTzP JymuMy6pcWGSy+uY3Bd00BddPfXsx9ZJxnLFp8wbVFfX3gZLtKiH6eoZt2TKcqBG p/c/pi6D6VU1q7lBeqHKDPJFSgfNk+hCt+zJ3xtk4U4hg+2lvP6kAZ0U9xsDgzor R+YR2OTmCXVwP87nPeEbeAajPzMBWc3+1DfQKhpwn7byDu6JexDP7jaUIsXJlePZ +FNZ+cFL1o8oKtLnfj8A48W0UUQRilRuBJPJGReVS7SBfwBR3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3m22QKDgadmpsCeclbTKGIFZ1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmFiMDUzMzMtMjdlOS0z MDRhLTg0YTYtZWEwYTViODdiNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKP8HYp1cinYztDDUqfDMbk4xZSDj31U7bDf5kK5KRqOOAuK8Ss8wOF E84KA9cPU+saAHKeK+EC/xPd0aaEOrZA+TdZ6lqvlJSvC8gZnh/5kP+1rynxVpjK HIzVxLRjMgxzAKDl6IGFZtkAA/hoGOS6O6qAmTLIVIF6fJCAYe/VoBgYjKgQUC7M lgAeYtzpj3341y6a0vVRQvK+0q3h6piIeveaaIajm/NSnDqhErdf6YaYV0HhW7UL UkASyfdcSxN2MmLmgs/T0yUlCnZ/AvtnP5IgBLqvn/OZzwAFoHV1vTinesrF7k58 ihVS7f8oRusNspqdAiWiz4mvgv4eGeU= -----END CERTIFICATE-----Generated at Sun Aug 24 06:14:23 2025 by rpki-client