$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa File: 4842f1d7-272b-3985-8501-86b60ee63bf5.roa (raw, json) Hash identifier: EYlz9DaAYB2lCg6hJQ6JGjqM5EToAbBEyCDi55/LPtg= Subject key identifier: C2:2C:CD:93:A5:08:FE:6E:B3:51:D7:52:1D:C1:25:E7:EF:4A:74:3F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AFC1C202D4E4EA00357E09980 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 68.232.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:20:2d:4e:4e:a0:03:57:e0:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=7e111c16-0078-4d79-b3a3-8872098d6328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:33:a8:03:1f:74:fc:c9:7b:9b:6c:d1:30: 8d:4f:a2:55:0c:e7:b1:5e:5c:28:18:94:84:95:02: b5:4c:d1:fa:d6:8f:f4:67:00:f9:b5:38:57:72:b4: 20:c9:af:c3:10:e5:cd:0e:31:be:8c:0d:bc:3d:4b: bc:59:0f:71:a1:65:b5:95:61:e9:44:ce:e1:dd:bf: cd:34:16:8a:f0:0d:35:77:27:7e:17:02:41:37:c3: 57:9c:52:0b:33:7f:59:83:c9:3c:8b:33:0f:e5:e1: 17:b2:73:d8:d9:14:85:4f:fe:7f:7e:3a:33:f5:c3: 95:7a:6e:7c:1b:e6:b7:61:d3:57:e8:f9:43:e8:fa: 89:a1:10:ea:fa:17:90:50:86:ae:e4:71:fc:c1:ad: dd:cf:7b:a0:f4:a7:de:d0:fa:fe:09:f1:87:bf:ed: b4:44:bb:d8:2a:b5:59:02:e1:7f:9d:fb:40:22:15: b7:52:a7:a4:5b:b5:6b:47:c0:6f:3a:6b:b1:18:26: 4e:b9:c6:e0:67:4c:b0:6d:c9:d5:cf:5e:93:35:ac: 95:ed:bc:d5:e6:46:8a:2c:24:44:1f:38:1e:09:cf: 82:c7:15:56:e4:43:10:6e:8b:e8:cc:57:6f:9b:b6: 91:4b:b9:20:e8:70:c5:61:f8:71:6e:95:61:c9:d2: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2C:CD:93:A5:08:FE:6E:B3:51:D7:52:1D:C1:25:E7:EF:4A:74:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5b:18:87:14:f3:e1:ff:b3:09:ad:56:26:02:3b:40:1f:c0: 16:a7:d1:d7:ee:c5:f2:bd:8c:d9:1e:49:cd:57:cb:9e:7b:80: 3a:ba:56:de:9c:69:1e:c2:fd:bb:d3:c4:72:00:84:5d:6e:4b: fd:06:7b:25:2a:fe:9e:4a:76:5d:c7:fd:0d:ed:b7:54:ef:f6: c2:75:9d:3e:ac:42:69:7f:08:fc:41:8a:00:29:a8:44:54:15: 14:5f:a9:7e:a9:a6:ea:54:c7:48:99:6c:69:8c:8e:c0:aa:11: 9b:94:fa:59:98:44:7d:0e:0f:cd:f1:bb:a1:34:c7:a4:fb:75: 3f:40:e2:e8:e9:dd:f1:a5:b9:01:8c:96:ec:ed:d8:43:b8:c4: 4d:64:f7:73:7f:a4:d2:dd:8a:81:d7:b9:57:37:ab:10:e1:48: ae:1b:5c:a0:51:e0:52:3d:1f:ec:45:4c:35:bf:38:2f:c1:99: 76:5c:27:3b:1e:15:de:87:5a:b2:38:73:14:b2:41:16:b4:ba: 3c:e7:77:25:7c:5b:d3:ab:05:23:ba:a1:bd:61:7f:3a:6e:40: 21:b0:9f:ca:09:6b:33:ed:7f:4d:2b:d2:2f:08:41:38:f9:ff: 89:8f:81:20:e1:88:c6:3e:33:ef:f3:11:1a:8f:9d:63:5b:71: 04:d0:d3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HCAtTk6gA1fgmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk N2UxMTFjMTYtMDA3OC00ZDc5LWIzYTMtODg3MjA5OGQ2MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp8zqAMfdPzJe5ts0TCNT6JVDOexXlwoGJSE lQK1TNH61o/0ZwD5tThXcrQgya/DEOXNDjG+jA28PUu8WQ9xoWW1lWHpRM7h3b/N NBaK8A01dyd+FwJBN8NXnFILM39Zg8k8izMP5eEXsnPY2RSFT/5/fjoz9cOVem58 G+a3YdNX6PlD6PqJoRDq+heQUIau5HH8wa3dz3ug9Kfe0Pr+CfGHv+20RLvYKrVZ AuF/nftAIhW3UqekW7VrR8BvOmuxGCZOucbgZ0ywbcnVz16TNayV7bzV5kaKLCRE HzgeCc+CxxVW5EMQbovozFdvm7aRS7kg6HDFYfhxbpVhydL9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIszZOlCP5us1HXUh3BJefvSnQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDg0MmYxZDctMjcyYi0z OTg1LTg1MDEtODZiNjBlZTYzYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhbGIcU8+H/swmtViYCO0AfwBan0dfuxfK9jNkeSc1Xy557gDq6Vt6c aR7C/bvTxHIAhF1uS/0GeyUq/p5Kdl3H/Q3tt1Tv9sJ1nT6sQml/CPxBigApqERU FRRfqX6ppupUx0iZbGmMjsCqEZuU+lmYRH0OD83xu6E0x6T7dT9A4ujp3fGluQGM luzt2EO4xE1k93N/pNLdioHXuVc3qxDhSK4bXKBR4FI9H+xFTDW/OC/BmXZcJzse Fd6HWrI4cxSyQRa0ujzndyV8W9OrBSO6ob1hfzpuQCGwn8oJazPtf00r0i8IQTj5 /4mPgSDhiMY+M+/zERqPnWNbcQTQ01w= -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:47 2025 by rpki-client