$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa File: 28138eb9-6117-317b-a8ba-edce60e35af8.roa (raw, json) Hash identifier: aFmWE4sfJO/8HJ9G5eeVf61Qpbr48Uc2JSLtwm5YDEs= Subject key identifier: A1:AC:FA:C6:A6:77:C1:57:3B:FB:B0:8E:8C:9E:51:EB:67:12:8E:B3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AFC1BFDAF93BB70C621CF0180 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 68.232.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fd:af:93:bb:70:c6:21:cf:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ddf4c3aa-338d-49d5-84f6-270332390f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:d5:ed:35:39:69:91:a3:c3:06:2d:f2:4e: b0:56:b3:40:74:56:e4:a0:e6:05:d0:3c:89:f3:ae: 0f:8a:84:be:e2:fd:1c:f6:18:1d:c3:8e:49:04:c7: 2b:68:c4:4e:6b:b8:aa:ba:22:0c:cd:59:c5:4a:97: 49:c6:2a:68:4f:99:ff:b6:a3:13:1b:87:89:fb:5b: 96:76:c3:e3:7a:01:39:e5:85:c5:d6:3c:53:76:2d: 9b:dd:25:26:45:69:08:31:b9:24:9a:f1:88:32:f8: 07:32:00:d0:dc:79:c1:38:62:73:51:07:ce:b8:2d: e9:8d:ca:22:6a:21:77:8f:3a:8b:da:8f:83:7f:9b: 1b:e6:51:dd:a8:0a:0d:c0:52:fe:ca:c2:71:6c:9d: 73:85:70:5d:c2:eb:1f:61:df:42:6b:7b:4f:a9:07: db:ee:63:71:63:ea:9e:60:05:82:ea:94:80:ba:2a: 24:cf:8d:a8:73:30:65:d0:b0:36:3d:03:21:34:88: 5e:21:26:c1:ba:29:41:86:9c:cd:59:40:e2:fc:36: d6:c2:c6:d3:df:0a:9b:d8:e8:10:50:64:82:dd:cf: d3:06:d2:dc:da:78:e2:f7:e2:0b:53:f9:93:1d:38: 2f:cc:fd:14:d9:e2:b9:01:c8:6a:6f:70:4d:55:0f: 0d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:FA:C6:A6:77:C1:57:3B:FB:B0:8E:8C:9E:51:EB:67:12:8E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/28138eb9-6117-317b-a8ba-edce60e35af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:57:05:f0:86:c7:77:e1:c8:62:eb:7e:e8:17:58:db:04:1d: 0a:93:47:f7:65:62:b8:db:e0:c4:dc:07:78:ce:d1:34:54:0f: 0c:50:44:bd:e6:18:78:37:18:ad:e7:64:d6:ab:e7:c6:33:cf: 46:73:ad:a3:3c:2f:ac:18:6b:e8:53:00:bb:64:bb:f0:fb:7a: 43:84:2a:81:c6:97:c5:6a:a9:ec:15:32:17:81:32:7f:a0:f1: 12:46:e0:67:4c:b2:aa:69:78:fa:21:2d:59:27:69:29:1b:69: a1:59:7c:20:05:8f:9c:c0:21:a2:3b:8d:be:67:80:c2:d8:e3: 87:69:26:6f:a0:0f:ae:f7:42:bf:b3:67:14:23:5d:7c:18:c5: 67:68:64:a1:5c:7c:cd:51:91:9f:ab:3d:4e:80:88:41:be:60: 95:fd:ae:14:ae:58:e0:70:a7:86:28:4c:99:4e:2b:d6:d6:43: 03:58:fe:21:3c:c7:97:57:f5:1b:6c:d3:60:83:95:f1:fb:d3: 04:a1:c0:f3:a1:e7:a7:ac:cf:4e:32:0c:d9:1f:64:b0:f7:91: 1e:5e:f5:b2:e7:70:ce:4f:52:10:28:a5:17:c1:96:ee:87:72: cf:35:4d:34:37:a8:05:4e:cd:d2:a7:6e:0c:02:da:88:2c:77: e0:96:8d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/2vk7twxiHPAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGRmNGMzYWEtMzM4ZC00OWQ1LTg0ZjYtMjcwMzMyMzkwZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDV7TU5aZGjwwYt8k6wVrNAdFbkoOYF0DyJ 864PioS+4v0c9hgdw45JBMcraMROa7iquiIMzVnFSpdJxipoT5n/tqMTG4eJ+1uW dsPjegE55YXF1jxTdi2b3SUmRWkIMbkkmvGIMvgHMgDQ3HnBOGJzUQfOuC3pjcoi aiF3jzqL2o+Df5sb5lHdqAoNwFL+ysJxbJ1zhXBdwusfYd9Ca3tPqQfb7mNxY+qe YAWC6pSAuiokz42oczBl0LA2PQMhNIheISbBuilBhpzNWUDi/DbWwsbT3wqb2OgQ UGSC3c/TBtLc2nji9+ILU/mTHTgvzP0U2eK5Achqb3BNVQ8NDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGs+samd8FXO/uwjoyeUetnEo6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMjgxMzhlYjktNjExNy0z MTdiLWE4YmEtZWRjZTYwZTM1YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpXBfCGx3fhyGLrfugXWNsEHQqTR/dlYrjb4MTcB3jO0TRUDwxQRL3m GHg3GK3nZNar58Yzz0ZzraM8L6wYa+hTALtku/D7ekOEKoHGl8VqqewVMheBMn+g 8RJG4GdMsqppePohLVknaSkbaaFZfCAFj5zAIaI7jb5ngMLY44dpJm+gD673Qr+z ZxQjXXwYxWdoZKFcfM1RkZ+rPU6AiEG+YJX9rhSuWOBwp4YoTJlOK9bWQwNY/iE8 x5dX9Rts02CDlfH70wShwPOh56esz04yDNkfZLD3kR5e9bLncM5PUhAopRfBlu6H cs81TTQ3qAVOzdKnbgwC2ogsd+CWjf4= -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:50 2025 by rpki-client