$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa File: 28138eb9-6117-317b-a8ba-edce60e35af8.roa (raw, json) Hash identifier: OAZAD+zCslyd9nXgssxmWgXTEb8GsfUYGnFT/bs3hE4= Subject key identifier: 2C:5E:68:FA:28:90:5F:1F:33:8C:66:70:99:DC:92:3C:96:25:B6:41 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F20F7B4CE8CDC0FBA7F79E460 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 30238 IP address blocks: 68.232.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b4:ce:8c:dc:0f:ba:7f:79:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=b2c92ded-d076-4c0e-9d00-1fc155545d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:48:a6:23:b6:74:64:42:01:bc:aa:3c:1e: 2a:32:4e:5b:bc:26:3f:c8:82:cc:69:bc:52:c8:6c: 9a:d5:26:b3:64:05:c5:c2:24:d0:6c:a9:d6:56:ca: 5d:5e:c1:d9:47:46:2a:a9:92:ab:f5:86:16:98:7d: 76:5a:b7:1d:09:1a:61:26:3c:09:d4:61:9b:51:4f: 13:79:36:79:ee:ec:5c:04:cb:48:72:75:8b:9c:14: a4:15:9c:85:5c:64:2a:0b:f8:7d:41:fc:0c:01:4b: 0a:2f:3b:4d:ed:f1:99:68:2c:93:40:ee:a9:d9:78: ea:37:20:ec:ba:3b:42:ea:0a:30:ea:2b:6c:ef:ff: 43:d8:13:a0:5c:14:ac:b1:7a:69:2d:9c:a9:9b:b3: 3a:0c:ab:bb:3d:45:6a:0f:e6:ae:e0:5f:a8:0f:a8: 24:95:d1:c0:a2:c9:2a:fe:6e:a1:49:24:71:01:3b: ea:61:46:f8:b8:dc:77:e5:1e:56:7e:d0:ab:5d:8d: 48:c6:78:60:db:bd:1a:4c:19:ad:9b:f2:7e:50:b5: ed:84:f7:9f:d1:1d:99:de:b7:e3:e5:56:37:7e:2d: 35:71:07:27:88:4d:dd:43:53:e0:32:63:d7:2c:51: 33:76:c0:65:f8:47:3f:e3:1b:25:d9:07:fa:62:87: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5E:68:FA:28:90:5F:1F:33:8C:66:70:99:DC:92:3C:96:25:B6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:be:ad:f3:32:9e:8f:2b:b5:47:3d:f4:67:5a:fb:9a:1d:70: b1:2b:b2:5a:e5:3c:1a:cb:10:11:2d:27:3e:8a:4d:c6:2d:b9: 14:94:b8:fb:8f:bf:b7:06:db:35:33:0f:9f:23:cc:b1:24:73: a1:1c:e8:b3:8d:47:44:13:50:9d:8e:29:19:11:48:c4:19:32: 7d:7a:52:8c:53:c5:86:0e:08:f9:60:48:55:13:6c:36:67:2c: 7b:fb:43:6e:43:af:03:07:d0:b7:4f:2e:54:3c:aa:87:82:3a: f9:6c:02:c9:8e:50:5b:83:e9:d5:c8:93:84:0a:c3:0c:c7:86: 93:fd:c7:fb:63:97:3d:0f:e6:69:58:01:48:16:b1:1c:7a:a6: 42:06:1d:a5:5d:c2:9a:e4:20:21:3b:53:e3:c9:04:89:c0:6d: 46:f9:62:83:72:55:ea:e5:5a:06:02:94:33:c2:03:0d:db:b8: 4b:d6:04:a2:4a:0b:e4:4f:26:34:96:ee:3e:f8:70:e5:64:76: e7:e1:de:ed:e3:d6:2f:05:91:23:92:bb:f2:9d:67:90:c1:b7: ba:d9:db:1e:6b:b3:4d:21:7c:d8:99:50:b5:5a:bb:60:ba:42: 77:af:ec:d6:b0:e8:99:7a:32:36:5b:e1:ff:43:eb:3e:0e:79: 4d:83:78:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97TOjNwPun955GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjJjOTJkZWQtZDA3Ni00YzBlLTlkMDAtMWZjMTU1NTQ1ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY9IpiO2dGRCAbyqPB4qMk5bvCY/yILMabxS yGya1SazZAXFwiTQbKnWVspdXsHZR0YqqZKr9YYWmH12WrcdCRphJjwJ1GGbUU8T eTZ57uxcBMtIcnWLnBSkFZyFXGQqC/h9QfwMAUsKLztN7fGZaCyTQO6p2XjqNyDs ujtC6gow6its7/9D2BOgXBSssXppLZypm7M6DKu7PUVqD+au4F+oD6gkldHAoskq /m6hSSRxATvqYUb4uNx35R5WftCrXY1Ixnhg270aTBmtm/J+ULXthPef0R2Z3rfj 5VY3fi01cQcniE3dQ1PgMmPXLFEzdsBl+Ec/4xsl2Qf6YofhuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxeaPookF8fM4xmcJnckjyWJbZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxMzhlYjktNjExNy0z MTdiLWE4YmEtZWRjZTYwZTM1YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO+rfMyno8rtUc99Gda+5odcLErslrlPBrLEBEtJz6KTcYtuRSUuPuP v7cG2zUzD58jzLEkc6Ec6LONR0QTUJ2OKRkRSMQZMn16UoxTxYYOCPlgSFUTbDZn LHv7Q25DrwMH0LdPLlQ8qoeCOvlsAsmOUFuD6dXIk4QKwwzHhpP9x/tjlz0P5mlY AUgWsRx6pkIGHaVdwprkICE7U+PJBInAbUb5YoNyVerlWgYClDPCAw3buEvWBKJK C+RPJjSW7j74cOVkdufh3u3j1i8FkSOSu/KdZ5DBt7rZ2x5rs00hfNiZULVau2C6 Qnev7Naw6Jl6MjZb4f9D6z4OeU2DeOs= -----END CERTIFICATE-----Generated at Sat Sep 12 14:27:23 2026 by rpki-client