$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa File: 4842f1d7-272b-3985-8501-86b60ee63bf5.roa (raw, json) Hash identifier: rQ9pA4iygLgsIxA034i8cdDB/RWQO0a2iTFWhKnwrVw= Subject key identifier: 0C:EE:E9:A9:2B:21:CE:1A:CE:51:83:8E:F5:08:1E:BC:73:8E:1B:DC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E7E9509453003F720ACBA5C80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 30238 IP address blocks: 68.232.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:09:45:30:03:f7:20:ac:ba:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=49ea710d-fc32-4114-83bb-afc0783ae746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:a8:85:60:6b:03:40:12:52:86:fd:5f:15: 32:29:ef:4e:94:cc:3c:6f:c9:5f:95:75:c6:8f:b1: 50:27:6c:f0:3f:b0:72:71:49:3b:fd:9a:06:88:31: a4:12:3a:8d:cc:0d:03:ad:35:d8:a6:6e:b1:9c:91: 93:68:7b:1f:12:60:46:bc:63:64:de:07:ef:b1:9c: c7:96:82:cf:ce:c1:87:a2:2c:22:83:c0:f2:37:1c: f0:dd:f2:38:a2:90:fd:db:cc:97:62:55:b0:48:f9: 07:62:bf:3f:7d:cf:a3:57:24:d0:05:e7:17:fa:0a: 70:ba:02:5a:5e:43:68:16:22:8e:3e:ed:34:69:c2: 2a:70:b6:62:98:b0:0e:e8:1d:57:58:99:2e:c1:2a: 2c:04:51:17:13:b4:b3:55:01:a0:62:c4:83:35:7c: 8d:0b:80:c3:44:e7:f3:00:76:cc:3a:17:63:66:05: 44:5f:b1:93:09:54:d5:58:02:92:a5:36:e7:2e:d5: 3d:a5:d4:c1:30:ce:4c:9d:35:25:ad:04:d3:5b:3d: a3:a9:25:77:7d:34:21:1d:2f:a3:9c:11:6f:32:5b: 41:46:6c:ba:af:9b:d1:fe:da:fb:66:0c:24:6d:13: 49:ae:f0:78:29:67:1a:5a:d4:76:6c:a1:a7:b5:8a: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:E9:A9:2B:21:CE:1A:CE:51:83:8E:F5:08:1E:BC:73:8E:1B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:da:cf:f8:a2:40:a5:9f:84:ad:9d:c6:e8:9e:ea:76:e5:69: 3c:98:73:b9:a9:4d:9f:6b:e6:af:d2:b0:57:36:47:55:83:f7: dd:59:1b:b7:88:c0:cc:5d:19:b4:44:11:e4:e3:ae:8f:d1:8b: aa:d5:87:5d:5e:d2:60:0c:43:b1:a1:7a:38:c4:f0:09:d5:85: dd:f4:09:e6:0a:7b:80:ce:84:d3:57:46:44:6d:a7:09:17:8d: 9c:f4:14:37:c8:80:45:ff:7f:11:39:05:b1:81:54:53:a4:6d: 1a:f2:2b:c9:5c:42:3e:e3:19:5a:06:ef:78:4c:5e:33:a7:f2: 05:85:dd:f8:1b:4b:ec:76:bd:80:62:13:02:3a:2d:b3:02:84: 87:e1:86:62:f4:af:fb:7c:72:b6:e8:f3:d5:d3:e0:98:ee:09: 7a:c2:08:69:95:df:52:23:54:7b:cd:79:00:1b:ea:92:67:d4: 36:e1:ea:ca:83:13:5e:f2:8f:16:2c:bf:6e:2e:a8:33:14:84: 3c:6d:2c:37:ac:ab:68:1d:2c:2c:08:9d:29:1f:ea:eb:db:dd: 4c:2a:17:68:e3:a6:86:f8:55:81:46:86:6a:6d:41:10:e2:bd: 0d:d5:dd:60:0a:a7:4e:e0:a2:16:72:d1:68:5b:1a:07:2c:27: 51:a2:5c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQlFMAP3IKy6XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NDllYTcxMGQtZmMzMi00MTE0LTgzYmItYWZjMDc4M2FlNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXqohWBrA0ASUob9XxUyKe9OlMw8b8lflXXG j7FQJ2zwP7BycUk7/ZoGiDGkEjqNzA0DrTXYpm6xnJGTaHsfEmBGvGNk3gfvsZzH loLPzsGHoiwig8DyNxzw3fI4opD928yXYlWwSPkHYr8/fc+jVyTQBecX+gpwugJa XkNoFiKOPu00acIqcLZimLAO6B1XWJkuwSosBFEXE7SzVQGgYsSDNXyNC4DDROfz AHbMOhdjZgVEX7GTCVTVWAKSpTbnLtU9pdTBMM5MnTUlrQTTWz2jqSV3fTQhHS+j nBFvMltBRmy6r5vR/tr7ZgwkbRNJrvB4KWcaWtR2bKGntYrivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzu6akrIc4azlGDjvUIHrxzjhvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDg0MmYxZDctMjcyYi0z OTg1LTg1MDEtODZiNjBlZTYzYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDaz/iiQKWfhK2dxuie6nblaTyYc7mpTZ9r5q/SsFc2R1WD991ZG7eI wMxdGbREEeTjro/Ri6rVh11e0mAMQ7GhejjE8AnVhd30CeYKe4DOhNNXRkRtpwkX jZz0FDfIgEX/fxE5BbGBVFOkbRryK8lcQj7jGVoG73hMXjOn8gWF3fgbS+x2vYBi EwI6LbMChIfhhmL0r/t8crbo89XT4JjuCXrCCGmV31IjVHvNeQAb6pJn1Dbh6sqD E17yjxYsv24uqDMUhDxtLDesq2gdLCwInSkf6uvb3UwqF2jjpob4VYFGhmptQRDi vQ3V3WAKp07gohZy0WhbGgcsJ1GiXOE= -----END CERTIFICATE-----Generated at Tue Jul 14 11:57:02 2026 by rpki-client