$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/94462847-6c1b-3c6f-8386-790798c7f0a6.roa File: 94462847-6c1b-3c6f-8386-790798c7f0a6.roa (raw, json) Hash identifier: dgob1WQXTYWmQ8onTd8j2Ofvm2VuKIFGti+0ecen36o= Subject key identifier: 02:0C:8A:08:21:B8:90:F9:87:D1:5C:39:D5:F8:D3:5C:91:DB:3A:C9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D1B1A626BC82B760B64732E80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/94462847-6c1b-3c6f-8386-790798c7f0a6.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16417 IP address blocks: 68.232.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:62:6b:c8:2b:76:0b:64:73:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=b09178a5-1c25-43a2-9d7d-7994d7744458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:f3:78:8b:e7:77:1f:65:c0:ba:39:f6:d4: 56:47:31:de:8b:16:f4:d7:ee:9e:37:65:db:a5:73: fc:c4:53:e7:8e:4f:86:b8:9a:25:7d:45:7c:05:be: 41:3b:f0:7b:fd:dc:7e:d3:77:b5:3a:ab:66:eb:cd: da:4b:9e:1e:1a:9b:7c:f7:88:01:88:15:9e:f0:dd: 03:da:ba:8f:d8:6f:52:55:86:96:af:7f:cb:c8:25: d7:c4:15:20:7a:67:3d:58:55:e2:e2:1b:06:a8:96: b4:3a:b8:8b:f1:3c:b6:51:09:5f:53:ca:14:3e:43: e8:1c:de:5a:88:c8:93:0d:76:fa:c0:76:db:59:c4: 43:f8:c0:90:b5:82:22:82:2f:0b:8e:ab:5e:e8:92: 22:23:66:a5:b6:4c:b5:64:47:99:6f:b8:b7:23:92: b6:38:f6:5d:5d:8b:f1:8d:1c:35:73:e9:0c:ba:77: b9:66:4d:12:69:4c:3c:07:91:29:b3:f1:dc:85:44: 76:8c:2b:3b:b1:ca:24:38:66:6e:10:21:b9:e0:f5: 3a:61:c9:e6:e4:75:80:d6:2b:69:e7:a3:e5:f3:3a: 9c:9b:d4:f4:99:2a:60:01:14:06:cf:58:3b:89:d5: 92:49:5b:bb:20:aa:a3:ca:8e:ee:e2:2a:d6:be:36: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0C:8A:08:21:B8:90:F9:87:D1:5C:39:D5:F8:D3:5C:91:DB:3A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/94462847-6c1b-3c6f-8386-790798c7f0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:56:5f:71:44:47:86:73:80:ce:53:34:cd:63:99:36:b7:5b: 31:9a:16:68:8f:6d:2f:11:6c:41:49:4d:31:52:ad:a5:45:f3: 30:56:4b:c2:c4:52:cf:8e:5c:05:a9:15:44:f9:c8:5e:9a:00: bb:e4:48:9b:a5:39:2b:1a:da:67:c1:d1:89:ec:5c:1c:53:e8: ad:74:42:88:ac:f3:4b:9c:a0:8d:cb:5d:4b:9b:73:5a:ff:c0: 4d:fe:2a:47:74:e2:ee:0c:c2:43:76:35:24:e9:9e:25:c9:02: b1:e2:30:16:40:e4:bf:f4:23:99:fa:6e:37:73:71:4b:d2:8a: 36:83:bb:b0:10:20:ed:78:b6:21:97:fa:25:de:57:83:be:46: b5:47:8f:21:56:4f:32:4f:34:95:4e:34:c7:b9:c6:83:08:b2: d5:6f:57:51:b1:77:f8:6f:fd:07:d9:2e:51:92:71:25:ee:08: 4d:08:f1:5e:00:54:06:9c:93:e7:8d:21:7e:06:f8:de:74:52: 5f:14:ad:5f:71:26:06:88:81:43:c8:24:a9:56:49:a9:21:c2: 9f:cd:41:84:88:7c:c6:b1:8a:59:07:0c:98:f6:12:40:9b:39: 08:56:99:1d:1e:38:b9:0b:21:d4:27:d0:06:de:15:61:27:68: 91:4a:cf:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmJryCt2C2RzLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YjA5MTc4YTUtMWMyNS00M2EyLTlkN2QtNzk5NGQ3NzQ0NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHLzeIvndx9lwLo59tRWRzHeixb01+6eN2Xb pXP8xFPnjk+GuJolfUV8Bb5BO/B7/dx+03e1Oqtm683aS54eGpt894gBiBWe8N0D 2rqP2G9SVYaWr3/LyCXXxBUgemc9WFXi4hsGqJa0OriL8Ty2UQlfU8oUPkPoHN5a iMiTDXb6wHbbWcRD+MCQtYIigi8Ljqte6JIiI2altky1ZEeZb7i3I5K2OPZdXYvx jRw1c+kMune5Zk0SaUw8B5Eps/HchUR2jCs7scokOGZuECG54PU6Ycnm5HWA1itp 56Pl8zqcm9T0mSpgARQGz1g7idWSSVu7IKqjyo7u4irWvjZ30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIMigghuJD5h9FcOdX401yR2zrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOTQ0NjI4NDctNmMxYi0z YzZmLTgzODYtNzkwNzk4YzdmMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtWX3FER4ZzgM5TNM1jmTa3WzGaFmiPbS8RbEFJTTFSraVF8zBWS8LE Us+OXAWpFUT5yF6aALvkSJulOSsa2mfB0YnsXBxT6K10Qois80ucoI3LXUubc1r/ wE3+Kkd04u4MwkN2NSTpniXJArHiMBZA5L/0I5n6bjdzcUvSijaDu7AQIO14tiGX +iXeV4O+RrVHjyFWTzJPNJVONMe5xoMIstVvV1Gxd/hv/QfZLlGScSXuCE0I8V4A VAack+eNIX4G+N50Ul8UrV9xJgaIgUPIJKlWSakhwp/NQYSIfMaxilkHDJj2EkCb OQhWmR0eOLkLIdQn0AbeFWEnaJFKzwk= -----END CERTIFICATE-----Generated at Thu Mar 19 21:41:42 2026 by rpki-client