$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa File: caf630ba-1c0c-3d82-83f6-60409e8262e6.roa (raw, json) Hash identifier: jn59sq6CoPCOECx2W4QazOENG5PjjrSl+9A7AeRaTII= Subject key identifier: 8F:2E:EA:0B:04:B7:8F:A9:55:C2:F0:7E:67:A7:A5:FC:20:27:26:B0 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F497550EE0E19E1A768C8BF80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16417 IP address blocks: 207.54.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:50:ee:0e:19:e1:a7:68:c8:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef2023ce-0317-4800-8df9-6f8e7c834f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:d8:c4:bc:78:0e:4e:69:1c:6f:c6:07:e2: 95:ef:cb:5e:40:1a:f3:e0:67:55:10:d7:3c:5d:6b: 06:4f:42:83:7a:21:4b:cd:a1:42:72:74:de:38:b8: 99:21:b9:9d:ce:c0:26:31:ba:d4:0a:93:79:89:5f: 57:14:4a:ed:2a:22:8c:4c:fd:2c:f5:24:b6:6a:ce: d1:ed:af:67:ea:18:32:57:d8:0b:fe:d9:02:f3:32: f1:1a:29:1e:5f:cb:27:2a:f4:ba:2a:99:09:51:35: 07:0c:45:b3:8a:88:19:c5:81:0f:ee:f2:a3:61:6f: 03:a5:3e:cf:c6:ab:c5:52:4b:b6:00:be:cc:c9:8f: bf:a5:94:f8:4f:31:15:7d:96:c2:1c:18:16:91:6d: e3:6c:85:87:f2:8e:63:67:6d:9d:85:85:a9:8e:89: 99:78:83:41:10:d8:b9:ef:41:b0:ae:1a:f7:5b:b8: 56:c1:5e:12:8d:14:58:2f:b3:f9:c3:8e:51:48:c6: 0c:89:75:ce:43:31:55:2f:66:44:98:b9:d2:aa:13: 90:bc:db:71:e2:01:d3:76:b6:66:fa:d4:2a:c4:d7: f5:50:e7:b6:38:df:ca:dd:2b:9b:e6:45:7a:68:f9: a3:06:3f:4f:01:ba:59:77:01:04:8f:74:5f:01:af: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2E:EA:0B:04:B7:8F:A9:55:C2:F0:7E:67:A7:A5:FC:20:27:26:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/caf630ba-1c0c-3d82-83f6-60409e8262e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:da:8f:68:10:a5:0f:a9:ab:cd:86:95:16:98:73:d5:4e:4e: c6:f6:3f:28:46:80:f8:85:8a:fe:80:93:36:ae:51:33:2c:41: ec:05:a1:33:e2:91:3f:fc:07:2d:c6:b2:e9:88:f7:be:3b:84: 80:c0:5f:c7:12:77:e1:18:8f:75:3d:e2:d2:c2:7c:0d:23:0e: 32:21:e5:56:62:36:5c:45:71:8e:61:b5:1e:77:ff:78:5f:1a: 5b:9f:9e:47:8f:01:5b:97:66:4e:71:74:e9:92:5b:45:ee:6f: 88:77:25:c8:17:cf:77:73:d9:7b:9c:e1:95:d2:ed:06:33:09: 3a:54:17:45:c5:db:74:94:4d:ef:9a:67:43:e5:c4:05:09:47: 2c:45:d1:97:54:5d:b9:ac:f1:c1:56:0e:ea:cd:3c:6b:4f:53: bf:dc:38:95:b2:14:00:53:b7:a6:f1:fc:b9:ff:dc:18:cc:b9: 39:e2:08:c2:14:a3:2e:b4:30:ea:42:13:8b:de:d6:81:40:bc: a0:9d:e9:f7:5b:b7:5f:3d:f5:01:9b:7e:b0:9c:4e:cb:72:64: ae:be:2b:f4:25:aa:bb:48:8b:06:b0:c2:63:f5:02:8e:95:cb: 08:70:aa:79:0c:4d:28:d2:b1:cd:43:1a:2f:3e:4a:6a:ef:2e: 9d:45:55:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdVDuDhnhp2jIv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWYyMDIzY2UtMDMxNy00ODAwLThkZjktNmY4ZTdjODM0ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSnYxLx4Dk5pHG/GB+KV78teQBrz4GdVENc8 XWsGT0KDeiFLzaFCcnTeOLiZIbmdzsAmMbrUCpN5iV9XFErtKiKMTP0s9SS2as7R 7a9n6hgyV9gL/tkC8zLxGikeX8snKvS6KpkJUTUHDEWziogZxYEP7vKjYW8DpT7P xqvFUku2AL7MyY+/pZT4TzEVfZbCHBgWkW3jbIWH8o5jZ22dhYWpjomZeINBENi5 70Gwrhr3W7hWwV4SjRRYL7P5w45RSMYMiXXOQzFVL2ZEmLnSqhOQvNtx4gHTdrZm +tQqxNf1UOe2ON/K3Sub5kV6aPmjBj9PAbpZdwEEj3RfAa9lQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8u6gsEt4+pVcLwfmenpfwgJyawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2FmNjMwYmEtMWMwYy0z ZDgyLTgzZjYtNjA0MDllODI2MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfaj2gQpQ+pq82GlRaYc9VOTsb2PyhGgPiFiv6AkzauUTMsQewFoTPi kT/8By3GsumI9747hIDAX8cSd+EYj3U94tLCfA0jDjIh5VZiNlxFcY5htR53/3hf GlufnkePAVuXZk5xdOmSW0Xub4h3JcgXz3dz2Xuc4ZXS7QYzCTpUF0XF23SUTe+a Z0PlxAUJRyxF0ZdUXbms8cFWDurNPGtPU7/cOJWyFABTt6bx/Ln/3BjMuTniCMIU oy60MOpCE4ve1oFAvKCd6fdbt1899QGbfrCcTstyZK6+K/QlqrtIiwawwmP1Ao6V ywhwqnkMTSjSsc1DGi8+SmrvLp1FVdI= -----END CERTIFICATE-----Generated at Mon Sep 28 10:53:51 2026 by rpki-client