$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa File: 7ab7b27a-d14d-39af-9d87-f3f814730a14.roa (raw, json) Hash identifier: 3+JkxM6b4yMGGFC1iwWpOiHcxv0DlQ+BFsNoL5fQEJ8= Subject key identifier: 1A:1F:24:00:34:AC:34:1F:96:10:4D:59:67:FC:8B:6B:D9:3C:38:6D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EAA819F4D1088F41D380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 68.232.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:a8:19:f4:d1:08:8f:41:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=caecfe77-7e3a-4fad-85f6-6c062b27a977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:41:6f:99:20:8a:a0:c8:cb:2f:60:da:f7: a4:53:ff:56:7f:a0:8a:0f:59:99:4e:3c:a8:84:45: 2c:01:ea:dc:2d:dc:d3:87:21:93:54:1b:58:61:1d: 4e:f1:2f:a2:a1:d8:cd:0e:31:a3:e9:18:65:d4:4b: b3:df:a3:4c:2d:b2:20:4f:82:ad:1d:ce:4c:95:cb: 16:39:16:3d:74:e2:1a:d8:60:37:20:e6:2a:cd:4c: db:dc:65:db:08:0a:fb:57:77:a9:59:ec:76:02:46: f2:9d:88:b1:1f:6a:fb:80:04:54:d3:0e:36:39:7a: 06:8e:03:60:0f:6b:d5:ef:5b:2a:10:63:d1:e8:d9: 55:19:c8:fd:9a:52:01:03:be:be:86:d6:af:cf:34: b6:fd:e0:e4:b0:b7:ee:54:69:89:94:86:0e:2b:b1: 89:3b:64:a6:90:b0:b7:a4:97:2f:f7:74:37:a1:c7: 8c:f1:08:49:50:11:3e:46:d1:de:d7:87:af:d9:cb: 56:e8:7a:b9:76:1a:91:3a:64:55:14:a2:8e:15:ab: 44:25:b2:0d:d3:af:94:9c:16:69:37:cc:4c:92:bf: a2:91:5a:7c:e1:b5:a6:fa:9a:30:7c:a3:12:e7:66: 27:d7:de:b5:39:bc:82:33:5e:4d:60:82:b3:24:01: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1F:24:00:34:AC:34:1F:96:10:4D:59:67:FC:8B:6B:D9:3C:38:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c8:50:c3:e5:cd:46:6a:e5:45:c8:5e:59:ad:47:9d:57:86: d5:d9:28:05:dd:c9:22:0c:7a:1e:83:17:e1:7d:3e:b6:4d:2c: c8:2c:96:25:4f:70:0c:3b:e8:19:d3:84:e5:e5:b4:e1:4d:1a: 98:94:11:98:e7:a6:b3:77:83:5d:3a:b0:ef:20:2e:de:32:b9: 50:80:ce:18:fd:fe:51:f7:39:0d:02:25:fd:67:18:fe:58:d1: d0:dc:54:10:06:2e:1a:85:fc:82:e0:14:63:c4:ad:6e:a3:be: a2:83:07:ca:17:50:f1:fc:cd:19:56:0b:9d:25:6a:41:00:a9: 5d:32:ca:e4:55:07:8f:52:54:fb:c3:f1:3c:cc:c7:d3:81:57: 7d:7d:dc:d8:b9:8e:7e:80:cd:68:6f:c7:3f:08:c9:93:67:06: f4:34:64:f8:c1:a7:11:08:98:f3:06:e6:e5:24:3a:79:66:05: 5c:ed:cc:85:af:de:8a:2e:8f:1e:c1:72:36:7b:76:ff:d1:a1: f3:b7:9f:b3:07:e8:cc:4a:d5:b4:29:0c:7b:b8:e9:fd:a4:03: 91:e4:e4:dd:76:54:5c:4a:af:2e:46:31:12:b9:3d:e8:be:27: 96:46:a0:9f:ca:02:76:14:ad:f0:0a:d6:ac:7d:f9:9a:63:96: 3f:b3:4d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuqoGfTRCI9B04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2FlY2ZlNzctN2UzYS00ZmFkLTg1ZjYtNmMwNjJiMjdhOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWJBb5kgiqDIyy9g2vekU/9Wf6CKD1mZTjyo hEUsAercLdzThyGTVBtYYR1O8S+iodjNDjGj6Rhl1Euz36NMLbIgT4KtHc5MlcsW ORY9dOIa2GA3IOYqzUzb3GXbCAr7V3epWex2AkbynYixH2r7gARU0w42OXoGjgNg D2vV71sqEGPR6NlVGcj9mlIBA76+htavzzS2/eDksLfuVGmJlIYOK7GJO2SmkLC3 pJcv93Q3oceM8QhJUBE+RtHe14ev2ctW6Hq5dhqROmRVFKKOFatEJbIN06+UnBZp N8xMkr+ikVp84bWm+powfKMS52Yn1961ObyCM15NYIKzJAGJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBofJAA0rDQflhBNWWf8i2vZPDhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2FiN2IyN2EtZDE0ZC0z OWFmLTlkODctZjNmODE0NzMwYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTIUMPlzUZq5UXIXlmtR51XhtXZKAXdySIMeh6DF+F9PrZNLMgsliVP cAw76BnThOXltOFNGpiUEZjnprN3g106sO8gLt4yuVCAzhj9/lH3OQ0CJf1nGP5Y 0dDcVBAGLhqF/ILgFGPErW6jvqKDB8oXUPH8zRlWC50lakEAqV0yyuRVB49SVPvD 8TzMx9OBV3193Ni5jn6AzWhvxz8IyZNnBvQ0ZPjBpxEImPMG5uUkOnlmBVztzIWv 3ooujx7BcjZ7dv/RofO3n7MH6MxK1bQpDHu46f2kA5Hk5N12VFxKry5GMRK5Pei+ J5ZGoJ/KAnYUrfAK1qx9+Zpjlj+zTT8= -----END CERTIFICATE-----Generated at Tue Sep 16 02:35:55 2025 by rpki-client