$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa File: b00b53ed-db98-3d02-883b-21a1dc38e020.roa (raw, json) Hash identifier: QgfJISRUIquwNa7sUr5nJiaCpu1IqiQzci4LXH31s2M= Subject key identifier: 7D:63:FA:E8:05:05:55:58:1C:E3:B9:3C:8E:71:63:E7:B0:A7:00:71 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E6F3A43D44AECBF15CD58D100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 30238 IP address blocks: 68.232.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:43:d4:4a:ec:bf:15:cd:58:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=78904511-7a30-4458-a9d7-42222a023da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:a2:67:d4:e3:30:2f:5c:3e:52:73:14:ce: 6f:3b:8b:5b:bc:0d:e4:9a:9c:82:c2:07:6a:aa:33: 82:0a:30:97:58:f4:74:7a:c5:7e:3d:02:77:be:11: 38:f2:57:86:bd:99:6e:8e:53:40:b8:a8:c7:3e:87: 02:ff:78:87:3d:18:d0:3c:45:62:a2:61:5f:9d:9a: c4:54:54:6a:e4:56:a6:26:fb:a0:50:7b:1f:ec:db: ec:f8:c5:66:da:9c:c7:79:62:e6:ff:74:99:47:d1: 88:e7:9a:52:63:14:50:08:14:7f:09:d6:df:4e:47: 22:7b:e4:6a:bd:a5:9c:9e:b1:03:82:12:3a:6e:c6: e1:d2:b8:1a:46:74:53:7b:fc:a1:05:4d:3b:00:8e: 9a:78:7c:cf:23:4d:d1:42:c7:21:f0:94:c4:7a:d4: 1a:84:ea:ec:8d:52:dd:88:9c:28:3b:b4:72:77:99: 9d:07:8b:9a:25:a9:70:db:f5:54:03:30:4c:ee:52: 25:be:e0:04:94:cc:d2:b9:da:db:9c:eb:f0:04:cf: d3:1a:01:22:47:70:28:df:45:f6:3e:1d:52:1d:46: e0:72:2d:28:f5:89:56:fd:77:70:c1:6b:15:fe:1d: cc:dc:d7:2b:39:cb:28:5f:97:1e:03:09:8c:97:d7: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:FA:E8:05:05:55:58:1C:E3:B9:3C:8E:71:63:E7:B0:A7:00:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:3a:c9:d4:21:a1:d3:df:d4:75:ee:36:ff:b6:45:f1:a7:28: bf:19:f6:01:5c:33:e6:07:b1:0d:75:21:16:38:b1:5a:6d:13: 44:b5:25:a2:6b:1b:52:cb:c9:4d:05:e8:ba:19:30:21:eb:e8: 9d:c9:0b:5c:1e:24:90:ef:c5:bf:3e:1f:77:a7:d2:c4:99:49: 5c:46:87:a3:8f:a7:9d:3f:e3:68:85:f6:73:be:b3:69:6f:ba: 21:b2:23:38:54:f9:0f:56:1f:0d:8d:63:b5:3b:90:c6:3c:4f: 9a:b7:c1:cf:2e:c5:f4:1f:8d:8b:22:67:fb:5a:1c:64:49:17: ed:dc:fd:7c:03:be:b2:af:52:c4:97:8f:dc:de:64:f7:a1:65: 4c:66:89:6d:2d:12:9a:af:9d:64:60:a0:10:e2:fb:88:23:4f: 0b:93:74:92:74:56:ec:71:f7:cb:96:bb:09:68:37:b7:4b:39: a4:3d:ec:ab:71:5d:eb:4d:59:04:20:f5:89:99:c1:7e:8a:05: b3:83:30:f1:86:55:cd:9d:11:ea:23:13:ff:d4:5f:7a:66:b7: 7f:37:14:a2:f4:ea:a5:b1:c5:e6:6a:1c:38:11:41:ec:f5:a4: 63:15:22:94:c1:59:29:a1:a7:c6:53:ba:26:f5:02:74:c7:a6: 67:df:64:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOkPUSuy/Fc1Y0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk Nzg5MDQ1MTEtN2EzMC00NDU4LWE5ZDctNDIyMjJhMDIzZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJqiZ9TjMC9cPlJzFM5vO4tbvA3kmpyCwgdq qjOCCjCXWPR0esV+PQJ3vhE48leGvZlujlNAuKjHPocC/3iHPRjQPEViomFfnZrE VFRq5FamJvugUHsf7Nvs+MVm2pzHeWLm/3SZR9GI55pSYxRQCBR/CdbfTkcie+Rq vaWcnrEDghI6bsbh0rgaRnRTe/yhBU07AI6aeHzPI03RQsch8JTEetQahOrsjVLd iJwoO7Ryd5mdB4uaJalw2/VUAzBM7lIlvuAElMzSudrbnOvwBM/TGgEiR3Ao30X2 Ph1SHUbgci0o9YlW/XdwwWsV/h3M3NcrOcsoX5ceAwmMl9fHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1j+ugFBVVYHOO5PI5xY+ewpwBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjAwYjUzZWQtZGI5OC0z ZDAyLTg4M2ItMjFhMWRjMzhlMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ6ydQhodPf1HXuNv+2RfGnKL8Z9gFcM+YHsQ11IRY4sVptE0S1JaJr G1LLyU0F6LoZMCHr6J3JC1weJJDvxb8+H3en0sSZSVxGh6OPp50/42iF9nO+s2lv uiGyIzhU+Q9WHw2NY7U7kMY8T5q3wc8uxfQfjYsiZ/taHGRJF+3c/XwDvrKvUsSX j9zeZPehZUxmiW0tEpqvnWRgoBDi+4gjTwuTdJJ0Vuxx98uWuwloN7dLOaQ97Ktx XetNWQQg9YmZwX6KBbODMPGGVc2dEeojE//UX3pmt383FKL06qWxxeZqHDgRQez1 pGMVIpTBWSmhp8ZTuib1AnTHpmffZHo= -----END CERTIFICATE-----Generated at Tue Jul 14 11:57:01 2026 by rpki-client