$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa File: 2facff71-9840-3679-b83b-43e50bddf021.roa (raw, json) Hash identifier: 6DlrlnqbyeQOcCP49YzKQPARRhh8eiiY63QprLYjEyQ= Subject key identifier: 2F:11:24:6C:63:49:BC:DA:39:7C:1C:B3:EE:13:67:83:72:4F:1D:4C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556F1CD26EAD7E284268D00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 68.232.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f1:cd:26:ea:d7:e2:84:26:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=d7ee67c7-e2f0-4579-b8e1-f69e4405d8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:6b:cc:b7:d3:30:78:6c:2b:ea:54:3f:9b: a6:4f:3a:c3:02:53:9a:00:9e:ff:0b:29:20:a9:30: 44:75:79:ab:00:6a:ea:27:41:d3:cd:13:e9:57:d6: 97:c4:fe:f2:df:c2:d0:21:22:f7:1f:f0:e1:3e:17: 1d:a4:c0:12:c0:f6:20:59:72:ac:f1:8e:20:c0:62: cb:b7:a4:29:c5:8f:3c:7a:a4:2f:cd:dc:59:70:6b: b6:ea:70:ed:dc:63:9a:b6:9d:5a:8e:ce:82:3e:bc: a0:f1:db:22:7e:a7:16:72:93:7d:32:57:e4:7f:0d: 03:bf:7a:ee:89:2f:48:7c:3c:ff:b4:c1:79:31:87: ca:6d:2f:bd:5e:f7:67:59:1a:43:75:37:43:80:79: db:a6:3e:d2:84:23:54:39:b6:09:37:60:c1:58:6d: 77:c5:a2:b3:a1:ac:0d:f9:ee:8f:c9:98:56:63:43: 0b:d3:29:a5:3b:3e:0f:cc:98:cf:b1:c4:56:73:ad: cc:4e:76:68:20:38:29:b2:9c:84:f6:76:3b:b2:ed: 46:58:ae:80:a2:5a:2a:89:af:01:c4:f3:40:84:f8: 9d:a3:66:35:e5:90:10:0c:d0:26:d3:22:17:6b:c2: 45:a9:2e:16:44:a7:59:c0:ad:fb:94:8f:6a:0c:d9: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:11:24:6C:63:49:BC:DA:39:7C:1C:B3:EE:13:67:83:72:4F:1D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9e:77:d1:3e:25:cd:ff:7a:98:d9:20:9d:54:1e:05:5d:f2: 2d:e5:a7:0f:c1:01:c9:3b:08:36:21:02:c4:93:c4:3d:fb:d1: b4:57:1b:6c:ae:de:f0:26:2b:a3:21:ce:0b:2e:16:54:42:15: b2:50:90:70:03:c9:54:05:03:0b:ce:b7:e6:b6:e5:05:6d:2f: ce:17:f5:6f:0f:ab:4b:95:4b:4a:7e:a1:eb:f1:30:52:f4:b5: b3:31:8d:e2:58:77:e9:a2:49:ce:f1:0d:00:0d:a4:21:47:64: 32:a3:ce:30:53:48:be:72:74:18:4e:4e:e9:66:be:a5:42:1d: c9:00:aa:6a:08:0d:41:a1:c2:01:ee:71:e9:b0:72:62:d5:75: f7:fd:49:a9:a6:3c:b6:1f:bb:f6:9f:40:71:bc:de:ce:32:bf: ba:ab:ef:83:1c:1b:f0:24:0c:3b:a7:f4:62:49:bb:21:8c:e1: 68:31:3c:a8:5a:99:78:39:2b:f8:4a:2b:8f:38:3b:5e:9f:36: e8:7d:25:2d:52:62:30:29:d5:d3:2a:3f:62:3d:c8:ae:75:d1: 0f:84:8c:4a:a7:47:9d:2c:3f:e1:44:b1:6f:5b:d6:82:04:c8: 84:88:dd:b6:34:fb:cf:8b:38:8b:09:1b:e7:86:d2:20:a4:4d: fd:5d:09:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvHNJurX4oQmjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDdlZTY3YzctZTJmMC00NTc5LWI4ZTEtZjY5ZTQ0MDVkOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZlrzLfTMHhsK+pUP5umTzrDAlOaAJ7/Cykg qTBEdXmrAGrqJ0HTzRPpV9aXxP7y38LQISL3H/DhPhcdpMASwPYgWXKs8Y4gwGLL t6QpxY88eqQvzdxZcGu26nDt3GOatp1ajs6CPryg8dsifqcWcpN9Mlfkfw0Dv3ru iS9IfDz/tMF5MYfKbS+9XvdnWRpDdTdDgHnbpj7ShCNUObYJN2DBWG13xaKzoawN +e6PyZhWY0ML0ymlOz4PzJjPscRWc63MTnZoIDgpspyE9nY7su1GWK6Aoloqia8B xPNAhPido2Y15ZAQDNAm0yIXa8JFqS4WRKdZwK37lI9qDNlcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8RJGxjSbzaOXwcs+4TZ4NyTx1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMmZhY2ZmNzEtOTg0MC0z Njc5LWI4M2ItNDNlNTBiZGRmMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECed9E+Jc3/epjZIJ1UHgVd8i3lpw/BAck7CDYhAsSTxD370bRXG2yu 3vAmK6MhzgsuFlRCFbJQkHADyVQFAwvOt+a25QVtL84X9W8Pq0uVS0p+oevxMFL0 tbMxjeJYd+miSc7xDQANpCFHZDKjzjBTSL5ydBhOTulmvqVCHckAqmoIDUGhwgHu cemwcmLVdff9SammPLYfu/afQHG83s4yv7qr74McG/AkDDun9GJJuyGM4WgxPKha mXg5K/hKK484O16fNuh9JS1SYjAp1dMqP2I9yK510Q+EjEqnR50sP+FEsW9b1oIE yISI3bY0+8+LOIsJG+eG0iCkTf1dCRg= -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:20 2025 by rpki-client