$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa File: b00b53ed-db98-3d02-883b-21a1dc38e020.roa (raw, json) Hash identifier: aWZng9KvNStRMicbUbAcSPhqF2hFms31Trjy+Ns6PrI= Subject key identifier: 65:AF:8A:4D:E0:24:F3:9C:D1:FB:5F:F0:73:82:18:14:F9:01:C1:D2 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F119D12B80C4DEA0A300FCF00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 30238 IP address blocks: 68.232.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:12:b8:0c:4d:ea:0a:30:0f:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f3d3903c-ed96-4b6b-89c0-c31d07ec4002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:0c:ad:1d:d2:1b:c9:30:b1:3a:9b:d2:ae: 0c:8b:57:40:9d:2c:30:93:71:39:07:85:95:0b:5d: 2f:d1:75:14:d3:07:ec:d3:c2:14:ba:af:d7:d4:1c: 5c:74:c0:e5:84:fa:b1:38:86:7f:ef:d7:d4:1c:bd: 3f:db:bc:59:8d:69:6e:62:a3:68:f7:ce:55:89:ee: 32:79:06:df:48:1c:15:bd:e9:3e:be:d4:08:28:76: a2:11:83:9e:c0:4c:1c:8a:5f:fb:c5:d3:95:2d:c6: ed:c8:af:48:87:11:28:6f:16:18:9f:cd:5b:c4:5d: 14:6f:0b:3a:2f:6a:b2:5c:4e:6b:2c:c5:a4:cf:0b: bd:2a:e9:a4:49:c7:f2:ad:e6:ce:09:96:85:0a:2d: 89:88:7c:91:cc:d3:a9:cc:a4:ef:11:34:26:88:3b: 03:05:7a:2f:c4:85:ea:74:16:4d:03:f9:3a:65:f5: d2:fb:90:c3:cf:c9:45:d2:2d:23:4c:2c:be:da:57: 4d:1b:78:75:6f:30:e8:48:13:9b:f8:0e:74:5e:a2: 59:f5:6d:ed:b2:91:ac:29:7b:24:c9:15:06:4d:dd: 25:af:64:92:27:89:ba:5c:b5:fe:b0:5e:4a:96:78: db:96:ee:57:2a:28:c2:a8:00:87:86:bc:fb:4c:ae: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AF:8A:4D:E0:24:F3:9C:D1:FB:5F:F0:73:82:18:14:F9:01:C1:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:89:fe:03:92:57:7d:64:2d:ef:fe:a4:0a:c5:33:33:e9:47: 78:79:bd:56:dd:d5:d0:4b:a8:45:9b:3d:f7:94:03:fe:65:dd: db:0a:f3:38:60:e0:2a:39:46:62:93:31:bd:b2:14:97:67:0d: 38:22:0d:ee:75:45:a1:80:f7:ba:80:67:41:b6:29:65:53:5a: b4:44:c4:df:4b:4e:f2:66:28:56:3c:0f:c2:40:cd:9f:69:84: 43:bf:92:44:fd:6a:30:94:d6:2e:87:38:79:90:08:e8:40:5f: 0a:85:48:ec:37:4a:cf:e7:eb:8f:14:3e:6c:e7:83:0e:c1:7b: 16:78:da:92:5f:5b:e7:ff:7a:d1:d0:ca:36:cb:fe:f5:86:85: 30:49:38:38:51:a7:1a:fd:1f:b8:06:80:13:8c:2d:84:1f:4c: eb:ee:33:fa:23:b5:58:a4:af:e6:40:ee:1d:da:4b:e1:0c:38: 98:e5:71:76:0a:27:93:18:66:55:28:6f:fb:54:a3:be:49:7f: db:70:fa:12:82:30:18:72:e8:27:0d:3c:fd:09:22:30:44:d8: 92:3e:32:95:55:4a:ef:6f:cc:8c:91:a0:b7:27:81:f1:b8:21: 05:ae:d8:91:cd:09:cd:d9:b1:cd:c0:f0:10:2d:c1:44:4c:17: ba:ff:00:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRK4DE3qCjAPzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjNkMzkwM2MtZWQ5Ni00YjZiLTg5YzAtYzMxZDA3ZWM0MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS8MrR3SG8kwsTqb0q4Mi1dAnSwwk3E5B4WV C10v0XUU0wfs08IUuq/X1BxcdMDlhPqxOIZ/79fUHL0/27xZjWluYqNo985Vie4y eQbfSBwVvek+vtQIKHaiEYOewEwcil/7xdOVLcbtyK9IhxEobxYYn81bxF0Ubws6 L2qyXE5rLMWkzwu9KumkScfyrebOCZaFCi2JiHyRzNOpzKTvETQmiDsDBXovxIXq dBZNA/k6ZfXS+5DDz8lF0i0jTCy+2ldNG3h1bzDoSBOb+A50XqJZ9W3tspGsKXsk yRUGTd0lr2SSJ4m6XLX+sF5Klnjblu5XKijCqACHhrz7TK43SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWvik3gJPOc0ftf8HOCGBT5AcHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjAwYjUzZWQtZGI5OC0z ZDAyLTg4M2ItMjFhMWRjMzhlMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeJ/gOSV31kLe/+pArFMzPpR3h5vVbd1dBLqEWbPfeUA/5l3dsK8zhg 4Co5RmKTMb2yFJdnDTgiDe51RaGA97qAZ0G2KWVTWrRExN9LTvJmKFY8D8JAzZ9p hEO/kkT9ajCU1i6HOHmQCOhAXwqFSOw3Ss/n648UPmzngw7BexZ42pJfW+f/etHQ yjbL/vWGhTBJODhRpxr9H7gGgBOMLYQfTOvuM/ojtVikr+ZA7h3aS+EMOJjlcXYK J5MYZlUob/tUo75Jf9tw+hKCMBhy6CcNPP0JIjBE2JI+MpVVSu9vzIyRoLcngfG4 IQWu2JHNCc3Zsc3A8BAtwURMF7r/AMw= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:51 2026 by rpki-client