$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa File: 85ead007-abb0-3f09-a8f1-e13fc5734e16.roa (raw, json) Hash identifier: SKos/L3CZYQkFvERiHrtHVhy9XRKE9RseH7TTcsYGq4= Subject key identifier: F5:98:A5:70:93:03:F8:51:74:76:B2:5B:97:76:70:55:2D:90:FC:E1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D638A2E7D086A4D08400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 68.232.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d6:38:a2:e7:d0:86:a4:d0:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=5b906ad7-eb26-4b1f-a826-48945c536a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:7a:f8:3d:9b:f3:49:7a:5b:44:15:8b:b0: eb:ae:cc:37:ce:f6:1e:7b:da:82:63:4d:4b:20:1a: 73:07:9a:c2:a7:a2:5f:8e:ef:2f:48:12:86:3c:1a: 23:d3:0c:61:54:59:41:6a:aa:44:0f:bb:c5:98:9c: 93:7a:9f:4d:ef:04:85:c4:44:de:b0:b4:02:c9:68: 2e:ca:c8:c6:3d:bf:a1:a2:5e:36:44:f3:6b:e3:61: d3:72:c9:54:48:8f:f9:00:4c:d2:5d:bb:57:f9:9e: 35:3c:d0:22:e4:78:77:ad:ce:0f:3f:50:a2:30:73: b8:de:08:ae:7c:c0:aa:49:90:5b:fc:02:f7:e6:c0: 44:47:0e:a2:2d:e2:07:5a:f3:af:4a:46:05:1d:c6: 2f:ee:1c:ac:b4:87:4b:d6:7a:11:c2:39:d8:e4:5b: 9f:53:1a:c9:b3:d0:70:2f:93:77:d8:3f:77:5b:96: 24:d8:53:78:3f:6b:50:02:82:c0:17:1d:95:9d:44: 1e:61:87:e1:95:80:04:ea:b9:c8:54:74:14:fe:a3: b9:b5:81:3a:ac:9c:1b:9d:a5:f6:58:cc:28:fd:f3: 5b:13:38:d6:45:87:c6:a1:86:25:85:54:db:e2:88: bc:3f:d8:dc:08:41:97:a2:fe:6d:1d:e6:53:f1:d9: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:A5:70:93:03:F8:51:74:76:B2:5B:97:76:70:55:2D:90:FC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:20:a2:e5:fe:dd:e7:e7:81:f5:ae:f3:6b:2d:0a:ce:1e:56: 85:a8:c8:12:67:2d:9d:8d:bf:74:65:3f:da:55:59:d1:3f:9a: 53:86:6a:a5:4c:e4:76:c9:7f:34:3e:e0:2c:92:39:7f:9a:4f: 13:ae:a4:a1:1f:f5:6b:be:db:be:a1:3c:87:e3:a1:be:fa:2e: 93:20:2b:95:f3:11:76:91:8f:96:40:13:fa:d8:ab:9e:03:97: 65:c3:17:2a:fb:b7:e1:c2:c8:f6:a1:b7:52:50:b7:f3:d6:8f: ae:13:8e:e6:a8:55:7a:ba:a5:db:86:bd:f0:79:9d:6f:c7:9e: fd:05:bb:55:75:50:5f:13:76:16:72:b2:53:b2:67:2e:c9:3c: ad:14:2f:2d:65:f7:af:8e:d7:e3:67:00:3a:e2:75:62:0d:9b: 21:5c:42:5b:b7:d6:7e:23:da:d4:fd:0a:47:a1:a1:0c:52:7a: 49:68:78:5b:c9:88:92:7e:14:18:9e:cb:c1:bf:ef:62:8b:9e: 92:35:ee:ff:84:7e:e8:18:e5:a2:83:00:4d:ae:6a:91:17:fc: 3b:ef:f2:49:6e:71:5d:54:10:6e:8a:cc:08:ae:1d:cb:b5:79: d9:7a:9d:96:85:81:61:fb:4d:d0:88:17:27:2a:06:e1:b4:bb: fc:ba:d2:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodY4oufQhqTQhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NWI5MDZhZDctZWIyNi00YjFmLWE4MjYtNDg5NDVjNTM2YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAl6+D2b80l6W0QVi7Drrsw3zvYee9qCY01L IBpzB5rCp6Jfju8vSBKGPBoj0wxhVFlBaqpED7vFmJyTep9N7wSFxETesLQCyWgu ysjGPb+hol42RPNr42HTcslUSI/5AEzSXbtX+Z41PNAi5Hh3rc4PP1CiMHO43giu fMCqSZBb/AL35sBERw6iLeIHWvOvSkYFHcYv7hystIdL1noRwjnY5FufUxrJs9Bw L5N32D93W5Yk2FN4P2tQAoLAFx2VnUQeYYfhlYAE6rnIVHQU/qO5tYE6rJwbnaX2 WMwo/fNbEzjWRYfGoYYlhVTb4oi8P9jcCEGXov5tHeZT8dnu1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWYpXCTA/hRdHayW5d2cFUtkPzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODVlYWQwMDctYWJiMC0z ZjA5LWE4ZjEtZTEzZmM1NzM0ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwgouX+3efngfWu82stCs4eVoWoyBJnLZ2Nv3RlP9pVWdE/mlOGaqVM 5HbJfzQ+4CySOX+aTxOupKEf9Wu+276hPIfjob76LpMgK5XzEXaRj5ZAE/rYq54D l2XDFyr7t+HCyPaht1JQt/PWj64TjuaoVXq6pduGvfB5nW/Hnv0Fu1V1UF8TdhZy slOyZy7JPK0ULy1l96+O1+NnADridWINmyFcQlu31n4j2tT9CkehoQxSekloeFvJ iJJ+FBiey8G/72KLnpI17v+EfugY5aKDAE2uapEX/Dvv8klucV1UEG6KzAiuHcu1 edl6nZaFgWH7TdCIFycqBuG0u/y60tg= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:48 2026 by rpki-client