$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa File: 11afab10-f59c-313b-b25b-4dc592a25c6e.roa (raw, json) Hash identifier: 1djBdv0FjpUczy1QRaWrzbWXVKgxXPCCiXIa2or0VbM= Subject key identifier: 4E:CF:BC:B4:B4:EC:1A:9A:9C:4A:C9:E5:F9:E0:6A:BC:4A:7C:B8:7E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AFC1C1EDCA947D869296DB7C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 68.232.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1e:dc:a9:47:d8:69:29:6d:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=db0caa78-1b18-4fa9-8108-50c34160cafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:4e:22:b2:38:5e:1b:28:cf:b3:90:a6:db: 8b:00:d5:15:a6:07:df:88:4b:f6:8c:91:a5:d8:e1: fe:48:7c:fb:50:d8:0c:59:b7:0c:d8:81:bd:2e:1c: be:39:59:2b:b3:38:67:aa:dd:69:40:46:43:a1:b0: 62:2b:ee:01:60:58:aa:b9:53:25:01:74:9c:ad:ca: c4:82:ff:18:b4:85:dd:11:29:79:b6:40:12:4c:00: c5:18:2f:ed:9b:f4:7f:74:4c:69:0f:97:86:08:04: dc:d3:a9:15:1e:ad:05:e6:32:20:2c:12:d9:66:96: d1:14:c0:cd:12:e9:02:42:95:e3:30:83:92:4d:d3: 39:37:99:95:a7:3b:a8:31:5d:d4:c9:2d:c8:1b:2b: e9:70:d3:98:fc:12:f5:41:8a:d0:50:94:61:24:45: 10:d4:aa:68:b8:41:d5:00:b8:f7:87:e0:b3:1b:9e: 92:82:ca:54:4d:a9:a1:2d:82:d5:85:5c:6f:49:61: ca:06:f4:0d:a3:f0:a0:72:57:11:8a:d7:9a:f5:cc: 80:fd:cc:2d:4d:e9:d8:ed:37:f4:fb:a0:55:58:73: b5:26:f6:51:8f:1b:73:52:e7:14:46:68:80:32:40: eb:05:0a:5e:0f:bb:85:36:8b:b9:80:87:6a:51:05: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CF:BC:B4:B4:EC:1A:9A:9C:4A:C9:E5:F9:E0:6A:BC:4A:7C:B8:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:09:2d:ac:52:6c:22:b0:3b:c1:34:fe:3c:7c:bf:ae:da:43: a2:f6:96:74:a5:a9:e2:0f:73:d6:f3:86:8c:57:f1:c1:ab:1b: bd:bd:06:ff:10:83:ec:ac:56:c3:17:7a:59:cc:66:06:b1:a5: 7d:b1:51:94:ff:2a:df:30:76:7d:c5:19:99:7f:c5:40:80:72: a1:39:21:1d:9e:6d:a8:05:16:36:ee:17:23:11:51:bf:34:ad: 7a:9b:cc:67:7f:10:59:91:10:3c:f7:67:45:11:96:76:37:b0: e6:05:73:6f:ab:1d:b2:35:7d:33:56:77:3d:05:24:77:07:30: 30:af:d8:08:6d:2a:33:d6:2c:84:66:1d:27:b5:ab:22:02:78: 10:d8:b1:f3:b5:5a:9e:7e:a2:31:86:b4:44:09:a4:ec:f8:f6: 79:a4:76:8c:b4:f8:1a:a9:bb:ec:5e:81:b9:aa:e5:56:72:e4: e9:de:4e:b7:b5:04:f5:73:11:f2:b3:39:15:25:14:b0:d8:d3: 0d:7c:99:f5:64:0e:80:2f:7b:40:d2:58:e0:bf:e9:36:e3:f9: bf:d2:0a:72:47:b2:59:33:d5:90:4c:42:c6:28:1f:d7:67:0b: 7e:3b:59:5a:7a:e1:d8:6f:40:b3:a4:3e:3d:fb:76:31:6e:4b: 5d:86:3d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB7cqUfYaSltt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGIwY2FhNzgtMWIxOC00ZmE5LTgxMDgtNTBjMzQxNjBjYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqlOIrI4Xhsoz7OQptuLANUVpgffiEv2jJGl 2OH+SHz7UNgMWbcM2IG9Lhy+OVkrszhnqt1pQEZDobBiK+4BYFiquVMlAXScrcrE gv8YtIXdESl5tkASTADFGC/tm/R/dExpD5eGCATc06kVHq0F5jIgLBLZZpbRFMDN EukCQpXjMIOSTdM5N5mVpzuoMV3UyS3IGyvpcNOY/BL1QYrQUJRhJEUQ1KpouEHV ALj3h+CzG56SgspUTamhLYLVhVxvSWHKBvQNo/CgclcRitea9cyA/cwtTenY7Tf0 +6BVWHO1JvZRjxtzUucURmiAMkDrBQpeD7uFNou5gIdqUQWUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7PvLS07BqanErJ5fngarxKfLh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTFhZmFiMTAtZjU5Yy0z MTNiLWIyNWItNGRjNTkyYTI1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4JLaxSbCKwO8E0/jx8v67aQ6L2lnSlqeIPc9bzhoxX8cGrG729Bv8Q g+ysVsMXelnMZgaxpX2xUZT/Kt8wdn3FGZl/xUCAcqE5IR2ebagFFjbuFyMRUb80 rXqbzGd/EFmREDz3Z0URlnY3sOYFc2+rHbI1fTNWdz0FJHcHMDCv2AhtKjPWLIRm HSe1qyICeBDYsfO1Wp5+ojGGtEQJpOz49nmkdoy0+Bqpu+xegbmq5VZy5OneTre1 BPVzEfKzORUlFLDY0w18mfVkDoAve0DSWOC/6Tbj+b/SCnJHslkz1ZBMQsYoH9dn C347WVp64dhvQLOkPj37djFuS12GPaQ= -----END CERTIFICATE-----Generated at Tue Sep 16 02:28:52 2025 by rpki-client