$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa File: 38cab474-b5b6-3345-8e24-1fb8e962b03e.roa (raw, json) Hash identifier: B1u0N6JeD7DOOWi1bcBtK5k7iYCRdTdGTT6y4oXla2Q= Subject key identifier: 70:D9:73:F9:37:D9:26:8F:E4:5D:E0:EC:02:B6:86:A6:1C:A3:0F:E4 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA798A28CA3D25BE879311F00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 68.232.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:a2:8c:a3:d2:5b:e8:79:31:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ea6cd4b6-b477-4538-9730-8b003b43d07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:69:e1:5e:13:ac:8b:d9:af:bc:0a:ef:1c: 92:5e:0b:cb:0c:fe:ff:9f:50:0c:ea:8b:ee:c2:d3: 92:95:92:f0:3a:8a:dc:35:f4:f9:2f:17:3a:36:02: ad:88:b0:e3:67:80:61:66:e9:1f:e3:5e:77:bc:23: 3d:34:26:4e:95:dd:ca:b0:b6:ce:d8:69:a6:4d:b4: 41:ee:99:9a:20:5a:67:e8:31:d0:73:47:6f:3f:a0: 63:c1:b9:ba:16:c0:85:11:a8:4c:d1:53:dd:f2:5e: 26:e9:3c:9e:21:5c:ea:0a:14:a9:54:66:a1:0b:f0: 3c:79:65:51:09:42:38:f8:68:b2:24:9c:f7:9d:fb: 6c:e5:d7:61:70:07:f7:f3:5e:53:77:19:45:5a:7b: 43:fb:6d:32:7d:91:3e:4d:e3:81:ea:96:1d:68:2e: 96:89:ef:9e:00:18:69:b4:32:84:eb:5e:45:03:e0: f1:79:85:16:cc:c0:fe:79:6a:8d:72:d6:5e:d1:87: 5e:f4:f2:5e:45:78:cc:1f:c3:48:52:28:1b:7f:12: a1:b8:76:7c:95:ce:ca:c2:87:e8:05:ec:ad:fe:e1: a5:69:6f:76:55:79:e8:4c:25:b8:b0:00:d6:7e:f4: 6a:ab:bc:58:78:f2:11:b3:12:34:fe:44:6f:81:ce: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D9:73:F9:37:D9:26:8F:E4:5D:E0:EC:02:B6:86:A6:1C:A3:0F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:25:52:98:ce:40:7c:84:6b:21:d3:92:cf:30:4a:bb:74:20: e2:d6:b9:5e:57:3c:e9:74:ec:d2:b7:8a:0b:21:9c:1b:3f:19: 3b:fc:5a:9d:9d:ff:dd:e0:5d:98:bd:76:d7:1f:79:7c:1d:5f: 08:4f:85:5d:ac:1d:06:57:c5:23:64:92:0b:6f:25:c3:18:24: 37:61:a1:8f:24:14:63:a5:4a:14:a2:5c:71:d4:a9:a2:83:13: 93:35:80:73:b1:64:d9:61:11:f0:3c:94:47:6c:87:53:64:20: ad:e7:c1:05:bb:dd:d0:40:3d:5a:a3:42:b6:b1:76:bc:bd:68: be:8a:b5:1b:0d:f7:46:58:71:1b:79:ff:6e:eb:93:76:23:72: 57:f0:4e:ba:32:7c:75:62:f1:7f:62:a8:eb:ad:67:33:35:4f: d0:f1:d6:52:ce:7d:a5:ad:fd:13:8c:d7:22:95:2a:91:5c:2d: 12:1c:4d:67:0f:59:81:05:a5:07:4c:74:19:65:b2:80:0a:5a: 42:d6:fa:01:5c:c4:0b:cf:ce:79:40:b6:5c:42:a6:96:7e:ce: ba:3b:0b:ed:73:cd:9b:90:f4:c2:27:db:ea:88:84:09:a6:70: 1e:e7:10:38:f2:68:d2:5b:85:7f:5e:16:b6:9a:44:1a:75:42: 9e:6b:1e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKKMo9Jb6HkxHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWE2Y2Q0YjYtYjQ3Ny00NTM4LTk3MzAtOGIwMDNiNDNkMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnhp4V4TrIvZr7wK7xySXgvLDP7/n1AM6ovu wtOSlZLwOorcNfT5Lxc6NgKtiLDjZ4BhZukf4153vCM9NCZOld3KsLbO2GmmTbRB 7pmaIFpn6DHQc0dvP6Bjwbm6FsCFEahM0VPd8l4m6TyeIVzqChSpVGahC/A8eWVR CUI4+GiyJJz3nfts5ddhcAf3815TdxlFWntD+20yfZE+TeOB6pYdaC6Wie+eABhp tDKE615FA+DxeYUWzMD+eWqNctZe0Yde9PJeRXjMH8NIUigbfxKhuHZ8lc7Kwofo Beyt/uGlaW92VXnoTCW4sADWfvRqq7xYePIRsxI0/kRvgc5jrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDZc/k32SaP5F3g7AK2hqYcow/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzhjYWI0NzQtYjViNi0z MzQ1LThlMjQtMWZiOGU5NjJiMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJslUpjOQHyEayHTks8wSrt0IOLWuV5XPOl07NK3igshnBs/GTv8Wp2d /93gXZi9dtcfeXwdXwhPhV2sHQZXxSNkkgtvJcMYJDdhoY8kFGOlShSiXHHUqaKD E5M1gHOxZNlhEfA8lEdsh1NkIK3nwQW73dBAPVqjQraxdry9aL6KtRsN90ZYcRt5 /27rk3YjclfwTroyfHVi8X9iqOutZzM1T9Dx1lLOfaWt/ROM1yKVKpFcLRIcTWcP WYEFpQdMdBllsoAKWkLW+gFcxAvPznlAtlxCppZ+zro7C+1zzZuQ9MIn2+qIhAmm cB7nEDjyaNJbhX9eFraaRBp1Qp5rHho= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:56 2026 by rpki-client