$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/faa2a3a2-910a-3fa7-94d7-aa646b7df5e7.roa File: faa2a3a2-910a-3fa7-94d7-aa646b7df5e7.roa (raw, json) Hash identifier: We4G3zNBtU6c6saP4YcXxjR9rCa9GIzsMO1Sj2WpmIM= Subject key identifier: 6C:5C:DA:AA:25:D0:77:15:8B:00:3D:CE:A0:04:BB:76:3A:1C:3E:93 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E78460975CB6CCFF78C790 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/faa2a3a2-910a-3fa7-94d7-aa646b7df5e7.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 207.54.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:84:60:97:5c:b6:cc:ff:78:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=03921360-28b6-4fb4-9de7-dce49f3a4a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:ec:e5:db:16:5b:a2:6a:6e:d3:24:8f:0f: 47:fc:6b:47:11:9a:bf:8d:77:ea:1c:a1:e9:df:20: b1:78:b8:de:b0:52:8c:ad:75:83:02:4e:e5:99:2e: 1b:32:81:43:07:13:f8:e2:c9:ee:0d:02:26:6a:90: 57:9f:7c:fd:22:20:e6:6f:29:5b:63:8c:b0:e2:94: 25:f1:bd:9b:ee:11:61:5b:eb:91:8a:53:91:5b:8f: 29:0a:e9:8b:aa:1f:bb:6b:96:b3:ed:f8:4c:c3:1f: d2:36:4c:38:ee:67:b8:d2:af:db:2d:22:d3:bd:d3: 86:92:a3:64:1e:31:cc:30:5b:17:16:90:dd:e2:b5: 4c:a0:11:d8:80:38:de:a7:79:b7:4d:1f:a9:3c:2c: bc:0a:43:51:a9:7c:2b:0b:16:56:46:ae:a0:23:46: 2d:ce:a7:da:0a:a9:d3:7f:e9:69:87:b5:89:80:16: fe:a1:b1:8b:03:45:26:4f:c2:9a:8e:dc:44:86:bf: 49:2b:26:7b:3a:0c:e9:3e:0c:80:5a:fc:ce:b5:fc: 43:d6:0d:bf:d2:cb:ea:c6:f1:06:00:a2:7c:ab:94: 00:7e:1b:f5:75:1e:3a:24:59:6d:3f:5c:13:0a:31: 4a:7e:8c:f0:2e:24:43:1f:ac:cd:90:40:29:f4:98: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:DA:AA:25:D0:77:15:8B:00:3D:CE:A0:04:BB:76:3A:1C:3E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/faa2a3a2-910a-3fa7-94d7-aa646b7df5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 207.54.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5a:5a:8a:31:a0:34:7a:bd:38:12:a3:0a:6d:47:87:c6:5f: be:a3:83:e6:8d:26:05:08:d7:6d:14:a8:09:6b:d4:9f:69:fd: d5:0e:c2:96:fb:57:f6:9b:94:eb:40:8e:8d:2d:a4:ce:fd:2b: 75:11:27:9b:95:d7:64:fa:51:2e:5d:fe:62:44:2e:6c:30:41: e6:cd:92:58:6f:88:fe:5d:db:a3:d3:18:67:d5:1b:a6:cd:e8: d5:9e:39:da:3f:65:1e:e1:3d:7c:65:41:5a:35:37:6f:b6:9b: 43:ba:8a:6a:27:d0:d5:99:0e:7d:e3:c7:f3:50:52:4a:4f:fd: 4c:18:bd:ef:32:09:dc:5f:1c:8d:7e:1d:ac:d9:72:1a:71:a2: fd:e3:90:50:b6:10:f6:90:98:2a:c7:22:a1:b3:54:09:d3:e0: 5d:4b:97:22:29:74:af:18:8a:46:f8:29:d4:ba:17:ab:bc:ed: 47:5f:65:10:90:79:30:a3:91:46:13:fd:b1:95:c7:26:aa:b5: bf:0b:b3:99:68:35:b5:b3:5e:ff:ea:8d:a6:ef:a5:10:89:a0: 39:9e:06:5f:46:42:1f:1d:2a:52:dd:5f:d0:b0:ec:0c:04:3b: 7d:3e:ea:f8:ac:a7:c8:f9:c4:0c:35:7a:83:fa:20:13:93:93: 77:b5:d8:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54Rgl1y2zP94x5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDM5MjEzNjAtMjhiNi00ZmI0LTlkZTctZGNlNDlmM2E0YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDTs5dsWW6JqbtMkjw9H/GtHEZq/jXfqHKHp 3yCxeLjesFKMrXWDAk7lmS4bMoFDBxP44snuDQImapBXn3z9IiDmbylbY4yw4pQl 8b2b7hFhW+uRilORW48pCumLqh+7a5az7fhMwx/SNkw47me40q/bLSLTvdOGkqNk HjHMMFsXFpDd4rVMoBHYgDjep3m3TR+pPCy8CkNRqXwrCxZWRq6gI0YtzqfaCqnT f+lph7WJgBb+obGLA0UmT8KajtxEhr9JKyZ7OgzpPgyAWvzOtfxD1g2/0svqxvEG AKJ8q5QAfhv1dR46JFltP1wTCjFKfozwLiRDH6zNkEAp9JjeYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxc2qol0HcViwA9zqAEu3Y6HD6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZmFhMmEzYTItOTEwYS0z ZmE3LTk0ZDctYWE2NDZiN2RmNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRaWooxoDR6vTgSowptR4fGX76jg+aNJgUI120UqAlr1J9p/dUOwpb7 V/ablOtAjo0tpM79K3URJ5uV12T6US5d/mJELmwwQebNklhviP5d26PTGGfVG6bN 6NWeOdo/ZR7hPXxlQVo1N2+2m0O6imon0NWZDn3jx/NQUkpP/UwYve8yCdxfHI1+ HazZchpxov3jkFC2EPaQmCrHIqGzVAnT4F1LlyIpdK8Yikb4KdS6F6u87UdfZRCQ eTCjkUYT/bGVxyaqtb8Ls5loNbWzXv/qjabvpRCJoDmeBl9GQh8dKlLdX9Cw7AwE O30+6visp8j5xAw1eoP6IBOTk3e12Fw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:56 2025 by rpki-client