$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa File: 3d4c19c0-cef8-3686-be24-c516be99f254.roa (raw, json) Hash identifier: l9x0FwaiHyX2BW+rRwTA5X1Rpi0L238EA3YyFhsW2fM= Subject key identifier: 8B:69:66:C0:5E:CD:29:23:EA:4C:81:28:F6:0E:3C:41:BD:76:1F:E2 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D7A052E5EE4FF21BDE8FD3280 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 30238 IP address blocks: 207.54.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2e:5e:e4:ff:21:bd:e8:fd:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=8691447c-1bce-4095-bad7-ab9e9293db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:8b:bd:06:83:27:e3:4b:1b:f0:be:62:61: 14:75:d7:65:e0:5a:cf:d5:c8:a0:ae:29:7f:16:00: 44:24:ca:f2:00:38:7c:a9:40:2f:5d:d2:1f:a6:5f: f8:b5:2e:4e:b3:f1:97:57:54:46:d9:8d:bc:fb:b2: aa:8c:3d:6a:91:79:1a:c3:75:39:19:f5:03:41:60: fc:e9:d3:5b:12:04:6d:80:1c:0a:ff:25:7b:38:4e: 40:d3:b5:44:02:74:be:7b:1a:35:c2:72:fb:5d:86: 1b:1d:f0:b4:07:9c:a7:df:b6:ac:81:b3:55:39:c1: 05:f3:07:1a:37:62:09:bf:4d:30:c8:ea:bd:15:47: f1:44:3a:3d:9d:2b:53:66:a6:45:a3:7e:2f:e3:bb: 2e:8c:01:db:23:03:bd:e0:60:62:79:2a:ef:b2:be: 1f:04:7b:99:f5:a7:c4:a8:16:af:27:23:0e:16:28: 59:b1:7c:56:86:fe:2a:c2:bd:1a:bf:8f:46:e3:e9: 20:fb:3f:ad:7b:38:a1:52:ce:dc:29:de:5e:fc:1e: 52:8b:9f:1a:31:3c:2b:46:1c:cd:46:f9:5f:55:15: f2:8e:02:ca:c1:58:af:17:aa:25:eb:5c:16:00:f4: b7:4a:72:fd:c7:62:6d:fb:01:8d:81:a9:c4:d0:d0: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:66:C0:5E:CD:29:23:EA:4C:81:28:F6:0E:3C:41:BD:76:1F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3d4c19c0-cef8-3686-be24-c516be99f254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e9:72:37:3a:f5:fd:48:8e:9e:77:a3:45:5f:91:74:66:51: 58:4b:17:3d:aa:ac:bf:f4:50:94:54:c7:ed:79:35:bf:0a:f9: a4:96:18:68:e7:f2:b2:19:32:14:87:02:64:d5:27:03:3d:63: 5c:bf:f9:d7:7e:b5:59:3b:26:60:d0:d7:58:47:3e:82:97:ac: 0b:de:d8:32:74:7b:8e:d6:c8:6a:aa:68:76:81:eb:02:78:e4: d8:58:57:09:5a:61:0d:95:42:08:44:87:5e:c4:4b:e6:e1:1d: be:e3:87:76:b2:4d:a9:19:f8:81:b7:6f:1f:70:ad:bf:89:56: c4:c0:d9:14:43:25:03:e2:18:49:99:d3:6b:15:87:06:db:e9: a9:17:d5:59:8f:43:91:24:98:f3:f3:fa:2b:0b:97:80:34:16: 7a:6a:12:97:86:23:ec:65:aa:29:74:ca:8e:fb:41:ae:4c:0c: ef:a6:a3:df:3e:29:bb:a0:0e:31:51:23:70:1c:45:2b:c7:f6: e0:dc:bb:05:71:82:ef:21:47:34:2f:c9:5d:98:5e:c7:d7:0a: ff:85:79:25:b0:ef:4c:d5:4a:01:03:19:06:8a:c5:4f:13:0a: 0b:c2:f3:aa:11:4b:42:a4:e8:b1:9c:7d:3a:0d:28:ba:2b:ef: b0:7f:94:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS5e5P8hvej9MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODY5MTQ0N2MtMWJjZS00MDk1LWJhZDctYWI5ZTkyOTNkYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpiLvQaDJ+NLG/C+YmEUdddl4FrP1cigril/ FgBEJMryADh8qUAvXdIfpl/4tS5Os/GXV1RG2Y28+7KqjD1qkXkaw3U5GfUDQWD8 6dNbEgRtgBwK/yV7OE5A07VEAnS+exo1wnL7XYYbHfC0B5yn37asgbNVOcEF8wca N2IJv00wyOq9FUfxRDo9nStTZqZFo34v47sujAHbIwO94GBieSrvsr4fBHuZ9afE qBavJyMOFihZsXxWhv4qwr0av49G4+kg+z+tezihUs7cKd5e/B5Si58aMTwrRhzN RvlfVRXyjgLKwVivF6ol61wWAPS3SnL9x2Jt+wGNganE0NCR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItpZsBezSkj6kyBKPYOPEG9dh/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2Q0YzE5YzAtY2VmOC0z Njg2LWJlMjQtYzUxNmJlOTlmMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3pcjc69f1Ijp53o0VfkXRmUVhLFz2qrL/0UJRUx+15Nb8K+aSWGGjn 8rIZMhSHAmTVJwM9Y1y/+dd+tVk7JmDQ11hHPoKXrAve2DJ0e47WyGqqaHaB6wJ4 5NhYVwlaYQ2VQghEh17ES+bhHb7jh3ayTakZ+IG3bx9wrb+JVsTA2RRDJQPiGEmZ 02sVhwbb6akX1VmPQ5EkmPPz+isLl4A0FnpqEpeGI+xlqil0yo77Qa5MDO+mo98+ KbugDjFRI3AcRSvH9uDcuwVxgu8hRzQvyV2YXsfXCv+FeSWw70zVSgEDGQaKxU8T CgvC86oRS0Kk6LGcfToNKLor77B/lIQ= -----END CERTIFICATE-----Generated at Sat Apr 18 04:00:10 2026 by rpki-client