$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa File: 38cab474-b5b6-3345-8e24-1fb8e962b03e.roa (raw, json) Hash identifier: 4zbJdCMZHUxfdYlTH5p3NJjVl/Ez2XQGW7Sd1K+G670= Subject key identifier: 19:39:5B:59:FC:95:9D:0C:36:3F:3E:28:42:BC:C3:89:10:5E:D3:9D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D1B19F383C5F4AABF5D09F4E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16417 IP address blocks: 68.232.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f3:83:c5:f4:aa:bf:5d:09:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=a1ae50da-215a-4bfb-9126-358abaeea02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:75:bf:4e:97:a7:8a:1c:55:37:32:1b:a0: 65:56:7c:94:25:f2:0c:4a:36:06:05:5d:ac:fe:f7: 8d:b0:51:03:50:6e:53:84:05:85:c2:d9:29:3f:73: b5:0b:83:5d:59:f8:2a:d2:3d:59:e5:73:ef:3d:06: bc:0d:73:ca:f1:14:45:04:34:f1:31:23:8f:f0:9b: 85:8c:b2:9e:65:74:59:9f:27:fc:8e:8b:81:22:80: 07:72:8d:da:6d:5c:8f:7f:9a:8a:a9:e1:7b:b1:07: 2b:ff:f5:e7:9e:4a:92:31:30:48:a0:84:e7:f0:8f: ea:93:91:b7:74:cb:8e:7f:3a:87:a0:f5:03:01:8d: 6f:e1:37:92:e5:c4:3c:26:b2:d3:a8:14:20:9f:bb: a9:4c:7f:9f:46:55:c9:30:6c:48:d1:65:e6:d0:3a: 88:46:20:b0:a4:dc:f5:f6:6b:3d:d2:6f:a7:74:50: 04:6c:8b:8d:c9:6e:b9:d2:83:f5:5b:fb:3c:ae:19: d1:64:7d:0c:d4:6d:fb:bd:c2:57:96:33:00:19:61: d8:75:bc:6b:3b:2c:6f:05:ba:88:71:8b:80:ba:44: 87:38:8c:00:bd:f8:98:4c:24:19:7e:be:43:8f:2d: 97:e4:8b:7e:dd:ca:85:70:53:52:f3:e1:4e:12:0b: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:5B:59:FC:95:9D:0C:36:3F:3E:28:42:BC:C3:89:10:5E:D3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e4:37:e5:66:ad:90:cf:82:f2:4f:fc:ca:10:40:a3:77:0b: 7c:67:8a:e5:84:6b:4d:fa:f0:f4:92:3d:69:23:2e:06:f1:e6: b3:63:29:b8:7b:b6:e8:c8:de:29:00:d2:74:65:3e:c7:46:18: 06:5a:1a:a9:73:8d:e6:b5:3a:44:5d:f6:f1:42:cb:07:ba:73: 28:c6:43:4f:04:c5:ae:7d:b5:e1:d3:d5:5e:8c:3a:ed:d4:e3: 46:88:21:79:5a:12:b9:b6:cc:8b:9a:e7:b7:ba:c0:d4:03:5b: f7:32:b8:83:91:6d:d9:5f:37:71:0b:a4:55:1b:de:40:6a:67: 02:68:ea:6a:c9:da:b8:e3:ab:07:5b:40:43:ca:2d:8e:d1:9d: b0:2b:af:19:f6:a9:f3:0d:97:43:4e:46:71:58:8c:17:1b:c8: 83:bd:b2:72:7e:89:fc:77:06:a7:d7:4b:e1:7a:e0:ab:88:ae: 65:eb:3e:56:ad:cb:5e:f9:14:4f:34:80:1f:5f:3b:17:29:b5: c9:77:ef:18:5b:3f:64:d8:78:c5:e1:a6:6e:f0:26:96:7a:f9: 4f:e6:24:63:ed:8d:41:00:fb:25:98:56:1b:aa:11:d9:71:b1: 43:31:d0:2f:60:e0:39:6a:59:2e:0f:2e:d6:f2:a3:a6:b6:21: 7a:58:07:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfODxfSqv10J9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YTFhZTUwZGEtMjE1YS00YmZiLTkxMjYtMzU4YWJhZWVhMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyN1v06Xp4ocVTcyG6BlVnyUJfIMSjYGBV2s /veNsFEDUG5ThAWFwtkpP3O1C4NdWfgq0j1Z5XPvPQa8DXPK8RRFBDTxMSOP8JuF jLKeZXRZnyf8jouBIoAHco3abVyPf5qKqeF7sQcr//XnnkqSMTBIoITn8I/qk5G3 dMuOfzqHoPUDAY1v4TeS5cQ8JrLTqBQgn7upTH+fRlXJMGxI0WXm0DqIRiCwpNz1 9ms90m+ndFAEbIuNyW650oP1W/s8rhnRZH0M1G37vcJXljMAGWHYdbxrOyxvBbqI cYuAukSHOIwAvfiYTCQZfr5Djy2X5It+3cqFcFNS8+FOEgs+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk5W1n8lZ0MNj8+KEK8w4kQXtOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzhjYWI0NzQtYjViNi0z MzQ1LThlMjQtMWZiOGU5NjJiMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbkN+VmrZDPgvJP/MoQQKN3C3xniuWEa0368PSSPWkjLgbx5rNjKbh7 tujI3ikA0nRlPsdGGAZaGqlzjea1OkRd9vFCywe6cyjGQ08Exa59teHT1V6MOu3U 40aIIXlaErm2zIua57e6wNQDW/cyuIORbdlfN3ELpFUb3kBqZwJo6mrJ2rjjqwdb QEPKLY7RnbArrxn2qfMNl0NORnFYjBcbyIO9snJ+ifx3BqfXS+F64KuIrmXrPlat y175FE80gB9fOxcptcl37xhbP2TYeMXhpm7wJpZ6+U/mJGPtjUEA+yWYVhuqEdlx sUMx0C9g4DlqWS4PLtbyo6a2IXpYB1c= -----END CERTIFICATE-----Generated at Thu Mar 19 21:39:13 2026 by rpki-client