$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa File: 9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa (raw, json) Hash identifier: oDUdcx0I+RY098aY7AlktPZJyQiaKggmWY/oTY9soK4= Subject key identifier: 52:A4:60:35:BA:9B:66:79:3B:03:03:59:03:5F:0A:C8:F5:42:35:F1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E7E94ED0C9AF7BD38FF53C760 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 30238 IP address blocks: 68.232.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ed:0c:9a:f7:bd:38:ff:53:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=60b0009b-8355-4050-9982-c6c7dd97a132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:f8:13:cd:9c:9f:25:0d:87:9c:a2:82:43: 50:42:5d:ab:0b:5d:c7:ed:4b:ff:32:49:3c:7b:45: 20:4b:e3:a2:fc:ca:d4:dd:0c:b6:01:c0:ba:05:c5: 35:b7:eb:d6:aa:3c:20:98:a2:c0:44:f0:0c:18:be: 00:8a:52:31:69:ae:73:63:f7:55:be:6a:39:0c:93: 9c:58:07:75:fb:c7:0d:b5:38:98:47:c2:5b:4d:dc: fb:69:1f:87:0a:75:c1:cd:c2:21:db:12:70:d6:b6: 45:76:89:12:3a:95:7f:da:ef:22:31:34:55:80:ca: 76:22:bc:68:d0:24:4c:62:e8:9d:62:3d:2d:11:95: 53:89:33:a3:b2:55:72:1b:37:b5:d8:64:30:a0:bd: 5b:7f:50:3d:5f:48:ab:1f:08:5a:63:9c:70:c0:fe: a3:73:53:4d:5a:18:00:4c:3d:61:cb:c6:c4:56:5d: fd:c9:07:53:38:21:70:40:4e:cc:44:30:f8:36:4e: ef:e5:3a:53:b4:b2:f5:2c:46:7d:0e:6c:fb:7d:04: 2a:5e:70:2a:33:82:1b:b7:33:43:09:b5:91:44:7a: 79:72:de:23:bb:13:78:38:09:b9:44:56:35:c5:3b: 2c:38:56:5a:aa:c6:a3:49:16:80:e8:ce:f2:d2:28: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A4:60:35:BA:9B:66:79:3B:03:03:59:03:5F:0A:C8:F5:42:35:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:74:6f:f8:ee:1d:a7:47:68:06:40:2d:04:b3:59:f9:f9:b3: 9a:ff:8e:90:e5:cf:82:47:e7:22:ca:34:7b:2b:12:15:a4:6e: 53:a4:03:0b:a7:d5:8f:b0:76:4f:55:44:a8:75:bc:8e:95:ea: 06:29:9a:29:3d:a1:31:8a:31:ec:2c:29:31:4f:9b:98:48:64: 85:88:ac:ff:8f:80:1a:de:99:08:df:5d:93:ef:95:45:62:02: e7:cd:c5:93:06:db:fd:85:4b:dd:6b:ff:6e:33:9f:13:81:20: 06:f5:93:2e:de:90:f9:68:86:2b:90:b7:13:da:12:d4:8a:71: 51:e2:8c:2d:40:5e:2e:cb:9a:11:1a:8d:62:cc:3d:44:59:ae: da:50:5a:7c:c1:11:50:61:1b:51:de:be:50:d3:2b:25:14:7c: ab:b0:0f:49:d3:e8:73:fa:34:5b:6f:ed:6d:3a:87:fe:d5:ee: 1a:fa:68:fa:79:87:be:a4:df:d3:c8:46:35:61:2f:9c:77:f9: e1:45:ec:ba:23:37:b2:dd:f7:bd:82:3a:be:b5:e0:87:71:9b: cd:d4:a7:c3:51:de:fa:4b:6e:f2:04:2c:68:23:c7:9e:00:86: 61:64:e3:3c:f6:c8:db:e0:99:11:53:19:96:96:56:4f:07:cb: 3c:3e:46:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lO0Mmve9OP9Tx2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NjBiMDAwOWItODM1NS00MDUwLTk5ODItYzZjN2RkOTdhMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfn4E82cnyUNh5yigkNQQl2rC13H7Uv/Mkk8 e0UgS+Oi/MrU3Qy2AcC6BcU1t+vWqjwgmKLARPAMGL4AilIxaa5zY/dVvmo5DJOc WAd1+8cNtTiYR8JbTdz7aR+HCnXBzcIh2xJw1rZFdokSOpV/2u8iMTRVgMp2Irxo 0CRMYuidYj0tEZVTiTOjslVyGze12GQwoL1bf1A9X0irHwhaY5xwwP6jc1NNWhgA TD1hy8bEVl39yQdTOCFwQE7MRDD4Nk7v5TpTtLL1LEZ9Dmz7fQQqXnAqM4IbtzND CbWRRHp5ct4juxN4OAm5RFY1xTssOFZaqsajSRaA6M7y0iilJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKkYDW6m2Z5OwMDWQNfCsj1QjXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOWM4NTNmOGMtMTNkMC0z YmMwLTkwYjMtNDNkYzZiZWFiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd0b/juHadHaAZALQSzWfn5s5r/jpDlz4JH5yLKNHsrEhWkblOkAwun 1Y+wdk9VRKh1vI6V6gYpmik9oTGKMewsKTFPm5hIZIWIrP+PgBremQjfXZPvlUVi AufNxZMG2/2FS91r/24znxOBIAb1ky7ekPlohiuQtxPaEtSKcVHijC1AXi7LmhEa jWLMPURZrtpQWnzBEVBhG1HevlDTKyUUfKuwD0nT6HP6NFtv7W06h/7V7hr6aPp5 h76k39PIRjVhL5x3+eFF7LojN7Ld972COr614Idxm83Up8NR3vpLbvIELGgjx54A hmFk4zz2yNvgmRFTGZaWVk8Hyzw+Rts= -----END CERTIFICATE-----Generated at Tue Jul 14 11:56:20 2026 by rpki-client