$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa File: 11afab10-f59c-313b-b25b-4dc592a25c6e.roa (raw, json) Hash identifier: w8T3gy4Mh/FQeXmEp6rPnfR5sYF2XlMHxY/wAg5zpNg= Subject key identifier: 11:9F:7A:73:2E:EC:E5:60:E8:E9:56:3B:0D:E4:2A:E8:49:B7:56:BA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F20F7D230C453445E80D65C00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 30238 IP address blocks: 68.232.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:30:c4:53:44:5e:80:d6:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=48200437-38fa-4a19-aaeb-3e35a468f0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:f2:3f:f9:f3:01:57:e7:b8:16:77:6c:96: 9b:83:69:aa:91:8a:f5:85:39:1e:e5:40:94:e5:7c: 7c:4c:02:9f:ed:40:c1:c4:84:35:aa:5f:ee:78:fc: 16:23:b3:e7:e7:50:b9:2d:62:4d:65:0e:3c:6c:97: fa:f9:cd:95:31:18:08:e9:1c:39:3f:db:67:b9:c6: 8c:ab:fc:68:5d:07:86:24:ef:37:3e:da:f0:61:9e: ea:2f:f7:77:08:42:95:00:88:f7:7d:e9:ba:95:8b: e7:a0:8a:d0:62:64:f2:70:f0:87:e0:95:a5:c0:58: 43:df:de:2f:ac:c5:ee:29:11:3c:ee:38:5b:2f:43: a3:d8:20:79:3c:ac:56:1e:36:55:2a:14:50:71:9e: b2:31:57:ad:eb:f5:40:a5:06:8e:38:4c:4c:74:2d: e5:ff:e2:f4:a7:04:48:7d:b0:ac:05:9c:06:af:e2: af:09:f6:33:d5:40:d9:d5:42:7e:1a:13:ce:38:9e: b8:20:0c:49:35:1b:34:08:6c:43:86:bc:b2:ff:ec: 30:e4:58:0e:11:7f:b0:25:b7:b8:28:bb:16:60:e5: 2e:8e:52:8a:e4:ca:88:24:80:41:b7:11:c3:aa:f4: 9b:c9:04:4d:30:21:f2:09:61:66:a7:b2:01:cf:9f: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9F:7A:73:2E:EC:E5:60:E8:E9:56:3B:0D:E4:2A:E8:49:B7:56:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:25:75:78:cd:62:9d:d8:a2:40:0a:3e:41:35:0c:d0:0b:13: 59:4c:31:e3:a9:ab:82:6c:d0:7c:fd:79:8b:74:ef:0f:de:75: 1b:b9:ff:85:db:69:10:40:7a:1b:81:3b:2d:05:46:42:09:2a: 5a:1c:e8:94:bd:b7:17:00:40:cd:e8:0d:e0:71:96:ae:81:d0: a2:fc:d4:d5:41:6f:06:92:94:97:ea:8c:f5:68:b2:40:df:b2: b7:e7:9a:94:4c:b6:1c:be:0b:00:e6:13:94:26:ca:97:7e:a7: 78:e8:12:69:7a:4b:10:b2:73:d9:b8:07:1d:b5:9c:a3:6d:7f: 6e:6d:ce:cf:b4:a9:3b:fb:8d:b1:50:8b:11:c7:2a:a0:1f:44: 34:0b:2b:0c:eb:e7:3d:65:00:c5:24:cd:da:63:23:02:31:31: e5:d2:e3:f3:30:3e:2c:cb:bc:9d:32:eb:b9:c4:1d:45:f0:40: a7:53:e4:02:e1:3b:0a:33:59:64:fb:35:aa:c0:fb:bb:3c:bc: 32:a7:c2:e2:c4:c0:4b:71:03:f2:90:82:56:ec:a1:97:a9:90: 62:a9:f9:c6:de:a8:62:59:c4:54:0e:76:17:ac:bd:e0:f0:cd: 9d:35:60:e7:98:2c:87:72:d6:38:2c:f8:90:2d:ee:4e:9b:f7: 3c:a3:69:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99IwxFNEXoDWXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDgyMDA0MzctMzhmYS00YTE5LWFhZWItM2UzNWE0NjhmMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWTyP/nzAVfnuBZ3bJabg2mqkYr1hTke5UCU 5Xx8TAKf7UDBxIQ1ql/uePwWI7Pn51C5LWJNZQ48bJf6+c2VMRgI6Rw5P9tnucaM q/xoXQeGJO83PtrwYZ7qL/d3CEKVAIj3fem6lYvnoIrQYmTycPCH4JWlwFhD394v rMXuKRE87jhbL0Oj2CB5PKxWHjZVKhRQcZ6yMVet6/VApQaOOExMdC3l/+L0pwRI fbCsBZwGr+KvCfYz1UDZ1UJ+GhPOOJ64IAxJNRs0CGxDhryy/+ww5FgOEX+wJbe4 KLsWYOUujlKK5MqIJIBBtxHDqvSbyQRNMCHyCWFmp7IBz5+xbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGfenMu7OVg6OlWOw3kKuhJt1a6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTFhZmFiMTAtZjU5Yy0z MTNiLWIyNWItNGRjNTkyYTI1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMldXjNYp3YokAKPkE1DNALE1lMMeOpq4Js0Hz9eYt07w/edRu5/4Xb aRBAehuBOy0FRkIJKloc6JS9txcAQM3oDeBxlq6B0KL81NVBbwaSlJfqjPVoskDf srfnmpRMthy+CwDmE5Qmypd+p3joEml6SxCyc9m4Bx21nKNtf25tzs+0qTv7jbFQ ixHHKqAfRDQLKwzr5z1lAMUkzdpjIwIxMeXS4/MwPizLvJ0y67nEHUXwQKdT5ALh OwozWWT7NarA+7s8vDKnwuLEwEtxA/KQglbsoZepkGKp+cbeqGJZxFQOdhesveDw zZ01YOeYLIdy1jgs+JAt7k6b9zyjabM= -----END CERTIFICATE-----Generated at Sat Sep 12 14:27:32 2026 by rpki-client