$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa File: 40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa (raw, json) Hash identifier: SVGKPwRp/7Hu+LPt4pQW0QcDIj15pKYEEMVrfIdX2q4= Subject key identifier: 1D:C9:FD:74:FD:BB:16:76:FE:37:47:8C:86:E6:DF:84:A9:83:07:49 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E5A4A02695DE00FE2CA274100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 30238 IP address blocks: 68.232.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:02:69:5d:e0:0f:e2:ca:27:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=c38e53e6-e777-403d-9bfe-daae40579ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:87:61:20:c1:39:24:54:e0:23:b7:b9:3b: 7a:dd:ce:96:04:2b:fa:84:3b:38:f0:d3:c7:21:47: da:5e:9f:4d:0e:5b:b1:f4:78:b5:94:9b:a6:64:b8: 55:d2:6f:c2:01:ee:ac:19:fe:d1:d8:f6:c6:56:38: 2d:7b:2f:94:86:57:7c:fd:4a:51:a1:38:9c:cc:3c: 73:f6:22:e4:82:bb:52:65:b9:ff:5a:7d:44:7d:bc: f8:f8:b0:de:22:1c:30:cf:2a:21:a2:72:47:fb:ed: bf:b8:c4:6d:15:3b:3f:df:48:0a:1e:2f:31:c4:d6: 22:df:4b:8c:39:81:5f:05:f1:af:67:b6:72:a5:6e: 37:36:7b:d7:05:fc:3c:05:03:d6:ab:ed:98:f7:0b: fc:6f:43:5d:56:3e:91:69:38:14:4a:8d:df:6f:96: 22:15:5e:fe:62:35:37:c6:37:21:08:6d:51:85:e7: b4:69:2d:8a:8d:33:fe:f3:c2:8d:66:2b:ac:45:cf: 33:7a:5e:6d:f0:8d:a9:6b:79:bf:97:cd:c8:9a:1a: e1:64:4a:2d:19:4b:26:99:56:fb:de:8a:fa:af:d6: 13:f5:c0:34:09:4d:5c:f8:7e:21:20:a3:c2:0a:4d: c8:11:a5:fc:51:fd:8d:d1:52:84:d7:9c:0f:b1:cf: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C9:FD:74:FD:BB:16:76:FE:37:47:8C:86:E6:DF:84:A9:83:07:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:a3:1f:2f:69:c8:65:cd:42:da:32:08:e1:be:81:f8:fa:bd: 49:4b:e6:d6:69:fd:b2:ca:0f:bb:9c:9a:41:d6:9b:63:e2:f8: 7d:dd:f7:6f:24:e5:dc:3b:ff:83:f6:a8:27:4d:9a:64:55:f3: 3f:9e:a4:57:44:03:bc:f4:5f:9a:35:9a:a0:8c:c3:58:2e:09: a9:a3:ae:49:33:60:24:4d:81:88:79:4f:35:bf:57:96:e6:2d: 3f:5d:ba:cc:34:9a:15:97:30:b7:52:d6:1b:d4:89:f0:f4:8b: 07:14:45:da:75:6b:2d:0d:04:67:50:6b:a9:4c:74:ec:e5:9f: b5:78:23:a3:f1:82:fb:56:bd:04:fa:75:ca:8c:fa:69:1d:10: 4a:03:d9:74:4c:80:57:d7:e8:87:f2:61:0f:ea:07:4c:25:7e: 12:9c:06:09:4b:6a:ea:ff:62:ba:0c:a8:da:e4:61:e4:50:7a: ae:80:e4:e4:00:c7:63:cc:16:a1:3c:36:47:38:80:78:d5:1d: f5:6b:45:18:1c:08:12:63:37:ae:b9:44:76:0d:34:20:cb:fd: d1:75:a1:0c:c6:27:ef:c3:d6:70:65:85:ed:23:95:74:50:d9: 91:c6:53:dc:35:f1:80:95:9e:e1:df:32:71:84:8b:d8:25:63: 9c:11:14:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgJpXeAP4sonQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk YzM4ZTUzZTYtZTc3Ny00MDNkLTliZmUtZGFhZTQwNTc5Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66HYSDBOSRU4CO3uTt63c6WBCv6hDs48NPH IUfaXp9NDlux9Hi1lJumZLhV0m/CAe6sGf7R2PbGVjgtey+Uhld8/UpRoTiczDxz 9iLkgrtSZbn/Wn1Efbz4+LDeIhwwzyohonJH++2/uMRtFTs/30gKHi8xxNYi30uM OYFfBfGvZ7ZypW43NnvXBfw8BQPWq+2Y9wv8b0NdVj6RaTgUSo3fb5YiFV7+YjU3 xjchCG1Rhee0aS2KjTP+88KNZiusRc8zel5t8I2pa3m/l83ImhrhZEotGUsmmVb7 3or6r9YT9cA0CU1c+H4hIKPCCk3IEaX8Uf2N0VKE15wPsc8vnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3J/XT9uxZ2/jdHjIbm34SpgwdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDBjNDg2NzAtMmZmOS0z ZDZiLWEzNTgtOWJmY2RlMGY3ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6jHy9pyGXNQtoyCOG+gfj6vUlL5tZp/bLKD7ucmkHWm2Pi+H3d928k 5dw7/4P2qCdNmmRV8z+epFdEA7z0X5o1mqCMw1guCamjrkkzYCRNgYh5TzW/V5bm LT9dusw0mhWXMLdS1hvUifD0iwcURdp1ay0NBGdQa6lMdOzln7V4I6PxgvtWvQT6 dcqM+mkdEEoD2XRMgFfX6IfyYQ/qB0wlfhKcBglLaur/YroMqNrkYeRQeq6A5OQA x2PMFqE8Nkc4gHjVHfVrRRgcCBJjN665RHYNNCDL/dF1oQzGJ+/D1nBlhe0jlXRQ 2ZHGU9w18YCVnuHfMnGEi9glY5wRFNg= -----END CERTIFICATE-----Generated at Tue Jul 14 11:55:26 2026 by rpki-client