$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa File: 9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa (raw, json) Hash identifier: C1Tk2yJ4K5Q9Lzel7yyUr83Us7h4+zrlvchw7jrBXBI= Subject key identifier: AF:2B:C3:CE:AB:BD:A6:6D:A5:37:AB:9E:6B:4B:9B:18:D7:0C:1C:E3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AFC1BFDD95453ECA0BBC75A00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 68.232.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fd:d9:54:53:ec:a0:bb:c7:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=6fd187a3-e6fe-46ac-9549-6aa078f1cfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:f8:ec:43:5f:73:8b:ce:ad:e1:54:42:74: 81:d4:cf:b0:d4:ed:d0:56:de:a7:ed:ff:b7:ec:35: 49:2e:b8:c8:ca:3b:be:ba:b5:e8:d9:0d:46:01:3d: 4b:9e:72:15:18:57:3e:e9:ac:76:8b:66:b4:66:0a: ac:bb:3f:9a:16:10:2a:eb:6e:22:be:2f:ed:f8:49: 1d:ad:29:25:64:15:6b:81:fc:58:8f:4a:1f:83:c0: c4:81:80:72:72:a0:22:48:65:37:7e:da:26:f8:ea: a6:39:f6:a8:3d:59:93:da:2e:78:d6:20:de:77:52: a7:4d:a4:1b:8f:27:41:04:96:f4:56:a0:17:05:d9: ee:b4:1c:cb:7a:c0:09:04:90:e3:a0:af:e5:52:8c: 22:53:18:3c:f7:1a:bc:64:4d:33:8d:80:2d:80:13: d7:cb:e0:ff:b8:4a:0d:3b:c4:c7:dc:a5:4b:a4:63: 7f:2f:5a:8b:fe:53:c8:5e:31:d9:66:bf:16:af:53: bf:14:7f:76:4c:17:9e:c6:6c:a6:0e:5a:08:f4:ca: 98:19:b3:eb:a2:97:d1:9d:31:73:5e:3e:43:88:be: 18:2a:d6:63:a2:f8:a5:8a:9b:92:0e:d6:e3:8b:00: 4d:31:e1:3e:c7:4a:c9:da:9a:10:da:f2:28:3d:f9: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:C3:CE:AB:BD:A6:6D:A5:37:AB:9E:6B:4B:9B:18:D7:0C:1C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:11:e3:f4:6a:2a:79:41:82:86:0b:93:a0:5b:d6:3f:a9:3b: ac:66:9e:5f:e5:b6:74:17:7b:50:d1:38:63:c3:fd:4e:01:cd: 18:63:7b:43:26:e3:0f:51:aa:64:35:b8:9e:c2:53:36:28:54: 8d:0a:99:46:53:32:bd:58:d7:89:3b:28:ce:93:00:f3:c6:be: d8:16:6e:fb:81:93:d4:3b:e3:2b:fe:80:51:bd:52:e5:bd:66: f5:ee:8d:fa:0d:1b:e6:7c:b4:17:0f:e6:f4:40:44:00:cb:db: d1:f6:c3:97:5f:99:eb:e5:8b:88:01:83:b5:2e:aa:b8:e9:fb: aa:b1:c4:61:29:d1:2b:95:87:4e:45:3a:d2:69:e2:b0:d4:fe: 63:45:86:3d:a1:cb:58:37:f2:e0:47:d4:0d:73:d7:73:32:1d: d9:7d:5e:c3:35:ac:8c:a9:49:73:94:e2:88:6c:c9:22:31:e0: 26:18:7d:17:8c:e5:69:9e:4d:2a:f7:29:b8:6e:59:5e:6c:15: 47:b4:8f:cb:2a:dd:99:79:5c:a7:91:29:27:7c:d5:d8:44:85: 06:e8:70:75:a8:db:dd:f5:7f:7f:d5:01:2e:9b:fb:54:c8:c1: d3:9d:0d:a5:da:e3:33:5f:9b:67:21:77:35:4c:9b:1a:79:5b: cc:a3:77:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/3ZVFPsoLvHWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmZkMTg3YTMtZTZmZS00NmFjLTk1NDktNmFhMDc4ZjFjZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilb47ENfc4vOreFUQnSB1M+w1O3QVt6n7f+3 7DVJLrjIyju+urXo2Q1GAT1LnnIVGFc+6ax2i2a0Zgqsuz+aFhAq624ivi/t+Ekd rSklZBVrgfxYj0ofg8DEgYBycqAiSGU3ftom+OqmOfaoPVmT2i541iDed1KnTaQb jydBBJb0VqAXBdnutBzLesAJBJDjoK/lUowiUxg89xq8ZE0zjYAtgBPXy+D/uEoN O8TH3KVLpGN/L1qL/lPIXjHZZr8Wr1O/FH92TBeexmymDloI9MqYGbPropfRnTFz Xj5DiL4YKtZjovilipuSDtbjiwBNMeE+x0rJ2poQ2vIoPflMEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8rw86rvaZtpTernmtLmxjXDBzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOWM4NTNmOGMtMTNkMC0z YmMwLTkwYjMtNDNkYzZiZWFiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgR4/RqKnlBgoYLk6Bb1j+pO6xmnl/ltnQXe1DROGPD/U4BzRhje0Mm 4w9RqmQ1uJ7CUzYoVI0KmUZTMr1Y14k7KM6TAPPGvtgWbvuBk9Q74yv+gFG9UuW9 ZvXujfoNG+Z8tBcP5vRARADL29H2w5dfmevli4gBg7Uuqrjp+6qxxGEp0SuVh05F OtJp4rDU/mNFhj2hy1g38uBH1A1z13MyHdl9XsM1rIypSXOU4ohsySIx4CYYfReM 5WmeTSr3KbhuWV5sFUe0j8sq3Zl5XKeRKSd81dhEhQbocHWo2931f3/VAS6b+1TI wdOdDaXa4zNfm2chdzVMmxp5W8yjd4g= -----END CERTIFICATE-----Generated at Tue Sep 16 04:15:31 2025 by rpki-client