$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/46bbea22-6e18-332e-981a-ddbe837828f4.roa File: 46bbea22-6e18-332e-981a-ddbe837828f4.roa (raw, json) Hash identifier: JNsM5lYLuFj8wR6ZULPRNHhRHe3FaIgTgMZGrilNsqg= Subject key identifier: C9:BB:E3:D6:66:38:AD:EE:BE:5E:6B:FF:C0:65:30:57:63:2D:9C:82 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B1F01769816E2D720474D55C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/46bbea22-6e18-332e-981a-ddbe837828f4.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 68.232.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:76:98:16:e2:d7:20:47:4d:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=208680cb-c63c-4576-a076-b6d010eb226a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:09:13:28:92:9e:3d:15:53:79:3a:62:30: 24:6b:01:31:e1:4a:9e:79:a9:d5:51:df:56:e0:ab: 9e:10:60:a1:83:3f:61:e3:08:1c:92:9b:8b:ba:58: 43:ac:28:1e:af:6e:66:56:1f:fc:44:c5:6b:27:1a: 78:ea:d9:a0:c2:76:39:74:77:17:09:4c:f6:37:26: 19:f2:e7:8b:e9:41:a2:bb:43:b6:56:d6:7c:7b:5a: 77:22:89:a0:20:2c:62:6e:b9:b7:3c:6c:c2:b6:a7: 09:6b:16:94:fc:60:78:12:cc:48:31:57:90:b3:65: 58:ca:24:f3:a5:3c:ae:65:d2:37:a5:4c:13:4f:1b: d3:97:b3:90:64:7f:5a:6d:60:9d:c7:b6:05:8d:14: 9a:cf:d8:2d:30:ff:16:1e:d0:c1:46:ad:fe:f6:3f: 9c:f4:a0:73:f1:b2:b7:47:61:8b:cd:e2:db:38:59: 68:cd:a9:1c:85:8c:0d:67:45:8c:c7:4c:f5:87:88: 4e:e1:67:25:7d:65:e0:1d:43:eb:18:b0:62:ac:4a: 57:da:c8:c1:5e:ab:fd:cc:b1:72:19:7e:7a:2b:d6: ab:65:b6:82:ae:d4:b5:fe:c4:5c:a6:53:a7:e5:40: 94:39:34:11:10:56:d5:02:20:cf:14:60:02:16:19: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:E3:D6:66:38:AD:EE:BE:5E:6B:FF:C0:65:30:57:63:2D:9C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/46bbea22-6e18-332e-981a-ddbe837828f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f3:d7:fc:0c:17:c1:e2:f0:4b:1b:03:d8:0b:8d:ca:79:2a: af:a1:a7:31:50:0a:cf:1f:97:5d:dd:a7:47:77:d0:97:7b:37: b9:ff:29:dc:05:78:00:a1:9b:1d:cd:0c:f0:50:b8:9e:52:aa: 9d:b2:04:5e:59:01:21:65:f9:a7:73:57:38:cd:f1:27:9b:70: 10:1f:d0:a2:a8:c6:04:e2:66:0c:44:e2:dc:43:83:14:95:99: bf:9d:74:69:ba:18:6a:37:39:4b:67:7e:68:d6:51:28:77:cb: 2b:1e:b4:9e:2f:f2:49:e6:1c:f6:f0:79:0b:f3:2d:a0:d1:a6: d8:e5:90:5d:f3:9a:74:06:8e:0b:09:df:52:3b:17:86:81:2c: 72:3a:9b:4c:d6:3d:63:28:93:cf:47:15:14:62:0a:65:78:58: 87:d2:fb:c4:55:5a:41:06:0f:6b:f3:a6:ce:28:99:af:27:28: 55:cb:e1:06:95:c2:af:c7:9f:29:b3:8f:c2:02:73:f1:8f:dd: 49:bc:83:e3:f2:e5:ae:99:d3:5a:53:2f:14:d1:be:1b:c1:6a: 14:e3:92:44:a9:3e:8d:96:d5:0c:06:1a:98:1f:0b:0c:ec:b5: 0b:91:9c:a6:85:9c:35:5c:4f:1f:07:e3:34:48:bc:26:6d:28: e0:79:28:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXaYFuLXIEdNVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjA4NjgwY2ItYzYzYy00NTc2LWEwNzYtYjZkMDEwZWIyMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwEJEyiSnj0VU3k6YjAkawEx4UqeeanVUd9W 4KueEGChgz9h4wgckpuLulhDrCger25mVh/8RMVrJxp46tmgwnY5dHcXCUz2NyYZ 8ueL6UGiu0O2VtZ8e1p3IomgICxibrm3PGzCtqcJaxaU/GB4EsxIMVeQs2VYyiTz pTyuZdI3pUwTTxvTl7OQZH9abWCdx7YFjRSaz9gtMP8WHtDBRq3+9j+c9KBz8bK3 R2GLzeLbOFlozakchYwNZ0WMx0z1h4hO4WclfWXgHUPrGLBirEpX2sjBXqv9zLFy GX56K9arZbaCrtS1/sRcplOn5UCUOTQREFbVAiDPFGACFhmbhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm749ZmOK3uvl5r/8BlMFdjLZyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDZiYmVhMjItNmUxOC0z MzJlLTk4MWEtZGRiZTgzNzgyOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPz1/wMF8Hi8EsbA9gLjcp5Kq+hpzFQCs8fl13dp0d30Jd7N7n/KdwF eAChmx3NDPBQuJ5Sqp2yBF5ZASFl+adzVzjN8SebcBAf0KKoxgTiZgxE4txDgxSV mb+ddGm6GGo3OUtnfmjWUSh3yysetJ4v8knmHPbweQvzLaDRptjlkF3zmnQGjgsJ 31I7F4aBLHI6m0zWPWMok89HFRRiCmV4WIfS+8RVWkEGD2vzps4oma8nKFXL4QaV wq/Hnymzj8ICc/GP3Um8g+Py5a6Z01pTLxTRvhvBahTjkkSpPo2W1QwGGpgfCwzs tQuRnKaFnDVcTx8H4zRIvCZtKOB5KP8= -----END CERTIFICATE-----Generated at Tue Sep 16 02:30:30 2025 by rpki-client