$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa File: 2facff71-9840-3679-b83b-43e50bddf021.roa (raw, json) Hash identifier: r+0D4UrgCnDSaf1TDLe2dPJyrkkS34pCbvCmSpAappk= Subject key identifier: 99:F4:41:1F:64:17:53:05:7F:92:B2:71:7A:BE:B6:24:6A:91:93:7F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA78850BC2D27AF3ADCC89A80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 68.232.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:50:bc:2d:27:af:3a:dc:c8:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1a49f29e-5a08-440d-a4e1-15ebbcf39c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:1c:7d:dc:24:9b:be:5a:63:93:eb:51:90: ff:b8:ad:29:cf:98:59:21:78:ad:76:25:46:bf:2c: 5a:c4:01:64:b0:1c:45:92:66:1a:ea:fe:ed:63:64: c9:47:fe:9f:80:dc:26:b6:6b:ab:16:6f:ce:73:19: 8a:f3:a5:2a:59:48:f4:01:f8:c2:c1:8b:b0:e4:e2: 49:4d:5a:39:a2:09:41:7e:00:b7:23:fe:bb:c7:5f: 44:19:30:23:19:96:fe:c2:68:9f:dc:62:31:53:7c: 1a:97:9a:0a:95:4d:47:8f:51:65:87:6c:53:da:ce: 5f:02:ed:5a:af:9d:4b:ab:7b:ab:a8:53:18:b1:2a: b9:94:ff:49:31:9b:a8:84:e0:be:bf:a8:3e:74:58: 18:9d:64:24:93:9f:ff:27:34:19:e4:1b:fe:2f:fd: 73:ab:97:db:30:46:9a:ab:76:f5:b9:31:29:9b:cd: c5:e9:6c:61:f3:bd:40:15:0f:c7:19:67:1c:46:56: f4:3a:d6:96:e7:06:07:7c:63:5e:00:1e:f8:30:e4: 78:8b:a6:3c:18:ec:b1:92:5f:14:58:1e:37:31:53: ed:43:ff:84:06:74:de:27:dd:39:3f:97:44:2c:b6: fb:6f:df:fc:50:d2:a1:76:a2:84:3f:75:92:14:9b: 59:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F4:41:1F:64:17:53:05:7F:92:B2:71:7A:BE:B6:24:6A:91:93:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:15:af:7f:9a:48:ca:98:6a:07:13:64:42:9d:7e:0f:27:10: f6:74:b2:a6:56:0d:b8:5b:c9:9f:d3:49:15:ec:46:1b:38:93: 85:c0:60:31:2e:9d:1c:5d:ed:f9:30:3b:e3:d7:cb:c8:ad:47: 70:8d:b0:8b:64:f1:08:39:67:98:0c:f8:cb:92:65:00:68:2f: 29:41:aa:19:58:e8:33:3a:da:0a:0d:11:1c:d7:1a:65:d7:0e: ff:3a:2f:13:1f:bd:0e:1e:c0:d0:fe:05:f8:4c:1e:b0:72:44: 32:5b:3a:7f:3c:e7:0f:b7:1f:e9:e3:14:6f:4d:a6:1d:9c:32: ef:cf:90:41:7c:b8:37:92:a4:60:7f:b1:95:84:00:fc:d3:86: 64:08:fe:60:c2:ec:2d:68:2f:e0:a4:da:aa:9b:ea:fd:93:59: 3c:e8:c0:4d:c3:91:c8:1d:f1:07:cd:60:29:43:55:b3:3b:cd: 2b:26:26:23:b5:7a:7c:a2:d0:44:44:eb:64:15:1b:6c:29:ea: 27:20:60:28:8b:65:23:01:ae:0a:de:b7:af:f5:17:32:46:d7: a9:39:81:7f:6b:8a:a3:5b:54:0d:fe:ad:95:a6:1d:c8:3e:44: 88:0e:52:39:61:f8:ce:c7:00:13:ac:f8:f2:6e:15:45:37:09: ea:8c:9d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFC8LSevOtzImoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWE0OWYyOWUtNWEwOC00NDBkLWE0ZTEtMTVlYmJjZjM5Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiEcfdwkm75aY5PrUZD/uK0pz5hZIXitdiVG vyxaxAFksBxFkmYa6v7tY2TJR/6fgNwmtmurFm/OcxmK86UqWUj0AfjCwYuw5OJJ TVo5oglBfgC3I/67x19EGTAjGZb+wmif3GIxU3wal5oKlU1Hj1Flh2xT2s5fAu1a r51Lq3urqFMYsSq5lP9JMZuohOC+v6g+dFgYnWQkk5//JzQZ5Bv+L/1zq5fbMEaa q3b1uTEpm83F6Wxh871AFQ/HGWccRlb0OtaW5wYHfGNeAB74MOR4i6Y8GOyxkl8U WB43MVPtQ/+EBnTeJ905P5dELLb7b9/8UNKhdqKEP3WSFJtZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn0QR9kF1MFf5KycXq+tiRqkZN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMmZhY2ZmNzEtOTg0MC0z Njc5LWI4M2ItNDNlNTBiZGRmMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIVr3+aSMqYagcTZEKdfg8nEPZ0sqZWDbhbyZ/TSRXsRhs4k4XAYDEu nRxd7fkwO+PXy8itR3CNsItk8Qg5Z5gM+MuSZQBoLylBqhlY6DM62goNERzXGmXX Dv86LxMfvQ4ewND+BfhMHrByRDJbOn885w+3H+njFG9Nph2cMu/PkEF8uDeSpGB/ sZWEAPzThmQI/mDC7C1oL+Ck2qqb6v2TWTzowE3Dkcgd8QfNYClDVbM7zSsmJiO1 enyi0ERE62QVG2wp6icgYCiLZSMBrgret6/1FzJG16k5gX9riqNbVA3+rZWmHcg+ RIgOUjlh+M7HABOs+PJuFUU3CeqMnaE= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:35 2026 by rpki-client