$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/368f25ca-e439-3d90-80b9-013d59e7e643.roa File: 368f25ca-e439-3d90-80b9-013d59e7e643.roa (raw, json) Hash identifier: VSql+w/wx+6Lgy32qT7RRrDdQOOGkR2JErrk8kw2nlg= Subject key identifier: 0F:02:93:4F:B3:93:E0:92:79:8F:66:59:0C:06:A9:0A:F9:5D:F2:81 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA78850B15A5798AC89487D00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/368f25ca-e439-3d90-80b9-013d59e7e643.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 68.232.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:50:b1:5a:57:98:ac:89:48:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2d6725f2-2701-4a75-a90d-d406043a64a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:27:9f:e9:df:18:4f:de:a8:d6:71:5d:b5: 50:4a:c8:7b:72:02:ea:c4:29:bb:54:61:8e:88:b2: bd:51:3a:f4:60:a2:d9:25:d3:4a:6b:6c:6a:5a:b0: 24:20:71:f1:aa:c8:26:52:db:35:59:3c:81:06:46: 3f:83:c9:04:be:f3:2e:a0:59:1e:28:f7:3a:fd:7c: 8f:4e:56:a0:b0:e8:e7:ad:8e:62:37:5c:63:58:5d: ff:d0:39:f7:26:93:2f:79:99:ff:fd:4c:03:08:bb: 63:69:ab:22:49:8d:be:82:db:05:13:fb:fb:23:48: 4d:5c:d0:be:27:9c:51:ea:1d:9b:0f:5d:b8:44:27: b5:97:df:0a:2c:f5:da:56:e5:6c:de:f6:c0:26:47: 2c:18:e5:73:63:40:b2:74:95:e9:00:03:bf:a6:be: 21:84:4e:5c:7f:38:48:83:f1:44:b6:c2:e5:a7:25: f0:72:ea:fd:1e:eb:ef:12:af:a9:4e:41:69:c5:f1: c0:8f:dd:4b:71:15:25:8d:83:16:df:c4:b9:98:33: 4d:95:09:53:a6:0e:45:4b:a6:21:67:d2:96:1c:ca: fd:2c:0c:31:3a:2a:c0:9f:e3:10:8b:49:f2:73:e9: f2:a6:1f:ee:7d:58:eb:7b:50:a9:c4:8d:53:4b:78: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:02:93:4F:B3:93:E0:92:79:8F:66:59:0C:06:A9:0A:F9:5D:F2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/368f25ca-e439-3d90-80b9-013d59e7e643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:23:23:5f:27:69:72:27:b7:10:7e:a1:06:91:ac:31:ce:9e: 19:2f:0c:2e:c1:0d:9c:53:4e:f0:e2:74:20:5a:cd:76:9e:86: 95:2b:41:6d:2d:9c:22:c3:67:a5:a3:b3:64:85:4d:7e:22:14: e7:18:4e:f1:c2:f1:9c:21:ef:a6:11:7b:8a:80:26:ba:46:fa: 45:32:24:57:ba:e0:00:6e:5b:1a:7e:7f:81:3f:1a:69:b4:b7: 47:1c:02:66:34:c7:a8:be:2e:db:58:48:a7:ce:e2:74:e3:ca: 63:e1:55:c1:20:ce:3b:40:0d:a3:c6:1f:96:67:0a:1e:a2:7b: a0:9f:fb:27:7b:25:c4:34:78:8c:5c:1f:b7:6a:e9:9c:1b:eb: 53:b5:8e:14:8f:33:f8:45:15:02:9b:c3:0f:ed:c7:78:c4:33: 5a:f7:49:10:c2:aa:1d:e7:c1:65:ce:9f:43:3e:f1:1b:45:3a: ba:f1:49:73:dc:98:25:bf:90:d1:99:4d:78:20:f4:e4:b2:3f: 9a:5e:7c:e4:d5:29:99:25:22:62:e8:99:42:a6:c1:16:ef:f2: a5:b7:18:42:22:63:3c:cc:fe:f0:9c:39:01:c2:5e:da:c3:bc: 1b:38:71:75:3b:55:7a:42:b7:05:97:44:15:48:2c:82:31:b4: db:4d:fd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFCxWleYrIlIfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmQ2NzI1ZjItMjcwMS00YTc1LWE5MGQtZDQwNjA0M2E2NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV0nn+nfGE/eqNZxXbVQSsh7cgLqxCm7VGGO iLK9UTr0YKLZJdNKa2xqWrAkIHHxqsgmUts1WTyBBkY/g8kEvvMuoFkeKPc6/XyP TlagsOjnrY5iN1xjWF3/0Dn3JpMveZn//UwDCLtjaasiSY2+gtsFE/v7I0hNXNC+ J5xR6h2bD124RCe1l98KLPXaVuVs3vbAJkcsGOVzY0CydJXpAAO/pr4hhE5cfzhI g/FEtsLlpyXwcur9HuvvEq+pTkFpxfHAj91LcRUljYMW38S5mDNNlQlTpg5FS6Yh Z9KWHMr9LAwxOirAn+MQi0nyc+nyph/ufVjre1CpxI1TS3j98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8Ck0+zk+CSeY9mWQwGqQr5XfKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzY4ZjI1Y2EtZTQzOS0z ZDkwLTgwYjktMDEzZDU5ZTdlNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEjI18naXIntxB+oQaRrDHOnhkvDC7BDZxTTvDidCBazXaehpUrQW0t nCLDZ6Wjs2SFTX4iFOcYTvHC8Zwh76YRe4qAJrpG+kUyJFe64ABuWxp+f4E/Gmm0 t0ccAmY0x6i+LttYSKfO4nTjymPhVcEgzjtADaPGH5ZnCh6ie6Cf+yd7JcQ0eIxc H7dq6Zwb61O1jhSPM/hFFQKbww/tx3jEM1r3SRDCqh3nwWXOn0M+8RtFOrrxSXPc mCW/kNGZTXgg9OSyP5pefOTVKZklImLomUKmwRbv8qW3GEIiYzzM/vCcOQHCXtrD vBs4cXU7VXpCtwWXRBVILIIxtNtN/XI= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:41 2026 by rpki-client