$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa File: 347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa (raw, json) Hash identifier: PfDIaL/4M0O/N0t4XZ4foE1vx0WstjqBP69PlD0ZiqM= Subject key identifier: EB:C3:89:C4:83:EC:D1:1B:A1:D1:DC:9D:52:1A:5E:1A:3D:00:C8:0F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F119D12ACA6CAB3AE6AACAE80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 30238 IP address blocks: 68.232.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:12:ac:a6:ca:b3:ae:6a:ac:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=77ed3a9e-86bb-49af-aea2-93764650be6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4c:85:f8:1c:87:48:54:39:64:17:e2:72:65: df:80:d3:44:bc:fd:01:d8:55:cb:ad:22:16:99:f2: db:fb:da:22:bc:47:b5:f9:49:08:91:3c:b9:f7:6a: c3:fb:5e:24:9c:f0:4c:e7:ec:17:db:88:ba:5b:58: 36:61:db:d7:89:1a:69:9b:ef:16:01:8d:13:e8:1b: e3:80:55:57:4e:3b:f0:63:52:dd:c7:ac:20:ff:0f: 71:dd:99:dc:7e:09:23:a8:af:7d:57:bc:da:e8:0a: 37:a5:87:90:df:ce:83:38:3b:35:4b:40:dc:f4:d4: 9c:c2:09:12:be:0c:2f:1e:a1:27:b3:03:bb:f4:e1: 49:b2:a8:c9:10:4a:b8:23:3e:0f:a4:93:72:bc:2a: 41:22:16:fc:dd:d5:36:a3:39:e4:cd:73:d8:e4:dc: 35:9e:b9:82:e6:73:61:46:ae:3b:ce:42:e2:68:94: 83:b2:49:43:07:b7:45:a8:91:88:19:3b:44:4c:db: b7:f8:36:56:19:e0:99:c2:33:ba:39:4b:70:19:94: 2e:bb:08:09:47:0d:02:0e:92:fd:08:15:e9:46:b3: 47:c3:1d:7b:6f:41:df:03:93:10:f3:1e:9a:19:0a: 32:aa:27:13:32:fb:fe:c9:a7:0d:d7:41:90:5f:74: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C3:89:C4:83:EC:D1:1B:A1:D1:DC:9D:52:1A:5E:1A:3D:00:C8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:dc:c0:59:d8:e9:dc:05:8e:80:b2:61:28:02:d3:44:60:84: b2:1f:ff:d4:cd:4b:45:12:d3:2d:03:93:98:29:91:16:2f:cd: d3:1d:2e:36:4d:14:81:36:16:5f:6a:6a:f8:5b:33:1f:1d:e7: ce:fc:04:fd:fd:b6:47:37:60:12:40:3c:5a:da:b5:cc:54:e7: ae:fc:48:b1:61:50:8e:fe:ba:56:e5:20:91:a9:2c:14:b1:cd: e6:2f:3c:57:c4:43:8c:74:76:f7:5e:c3:a2:27:d2:b3:f2:3f: 6a:a4:06:f5:d8:1e:a6:07:04:49:90:aa:b4:75:7d:c3:af:d0: 0b:c4:12:dd:68:4a:e1:74:35:c0:2f:6e:82:f2:e9:d6:ee:01: 5e:e7:85:43:55:3a:bf:94:73:fc:3e:94:bf:70:f3:05:87:07: 40:dd:5d:bd:74:68:21:c7:ab:cf:92:d9:ec:bf:93:0c:46:64: 91:e1:0f:0a:85:ce:9a:49:15:94:d1:fd:e4:e8:a0:b5:99:04: 43:c6:1c:51:f6:a6:7b:14:d8:8d:46:e7:a7:58:35:ac:91:d7: 2c:62:10:d5:d7:72:f1:68:79:32:fc:91:2b:5b:29:76:f5:19: a1:a4:24:b9:63:9f:c2:30:0c:8e:1c:35:4a:6e:a3:04:61:d1: 8d:f8:3f:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRKspsqzrmqsroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdlZDNhOWUtODZiYi00OWFmLWFlYTItOTM3NjQ2NTBiZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkyF+ByHSFQ5ZBficmXfgNNEvP0B2FXLrSIW mfLb+9oivEe1+UkIkTy592rD+14knPBM5+wX24i6W1g2YdvXiRppm+8WAY0T6Bvj gFVXTjvwY1Ldx6wg/w9x3ZncfgkjqK99V7za6Ao3pYeQ386DODs1S0Dc9NScwgkS vgwvHqEnswO79OFJsqjJEEq4Iz4PpJNyvCpBIhb83dU2oznkzXPY5Nw1nrmC5nNh Rq47zkLiaJSDsklDB7dFqJGIGTtETNu3+DZWGeCZwjO6OUtwGZQuuwgJRw0CDpL9 CBXpRrNHwx17b0HfA5MQ8x6aGQoyqicTMvv+yacN10GQX3RYzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvDicSD7NEbodHcnVIaXho9AMgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ3YmQ4NWUtODZjNy0z ZDM2LWFiMzctZTFhMTAxY2NhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXcwFnY6dwFjoCyYSgC00RghLIf/9TNS0US0y0Dk5gpkRYvzdMdLjZN FIE2Fl9qavhbMx8d5878BP39tkc3YBJAPFratcxU5678SLFhUI7+ulblIJGpLBSx zeYvPFfEQ4x0dvdew6In0rPyP2qkBvXYHqYHBEmQqrR1fcOv0AvEEt1oSuF0NcAv boLy6dbuAV7nhUNVOr+Uc/w+lL9w8wWHB0DdXb10aCHHq8+S2ey/kwxGZJHhDwqF zppJFZTR/eTooLWZBEPGHFH2pnsU2I1G56dYNayR1yxiENXXcvFoeTL8kStbKXb1 GaGkJLljn8IwDI4cNUpuowRh0Y34Pw0= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:38 2026 by rpki-client