$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa File: c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa (raw, json) Hash identifier: 0bkFIegPsTcMZKkVa0XBLHr9v11yOpAzDvxK0pg4+g4= Subject key identifier: E4:89:12:C0:7D:28:87:D8:86:9B:68:8E:C5:DD:C1:9D:AC:1B:61:AD Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EC7A1D6718FF900E55AF3D380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16417 IP address blocks: 68.232.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d6:71:8f:f9:00:e5:5a:f3:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=9a6f0d9c-0e31-4654-9dd5-6aed0ec3d023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:9d:10:ab:72:18:2a:72:0a:82:fa:96:ee: 44:24:07:b7:19:11:cb:f5:64:58:0f:1f:44:58:d5: ba:e8:16:4c:c9:e2:e4:11:14:7e:f7:20:57:b8:57: a3:bb:a2:49:8e:70:60:1e:d0:f3:33:c2:92:0f:07: 5a:39:50:f7:cb:88:74:b6:5e:7a:82:ae:da:ce:f3: 9b:4e:5a:49:60:58:6b:9e:59:5d:e7:d5:a0:96:f6: 05:74:f2:4e:1e:f5:3c:e3:f3:05:f1:a8:46:df:b8: 8e:42:32:0f:0e:a2:9e:d0:ef:d1:3f:24:8c:14:13: b2:6c:8d:34:27:86:92:a6:d2:cb:99:d5:8e:0a:c3: 02:83:30:ea:41:3a:76:ae:ac:f4:c1:c5:0a:f1:d5: 11:fb:5e:88:29:12:2a:cd:e7:86:b7:3b:22:be:28: e3:a1:97:a4:11:e2:60:2e:3a:ae:c2:51:2e:72:29: f9:5b:5f:10:eb:b1:48:9e:25:f0:98:55:ad:e7:61: 47:87:81:01:04:c9:58:0e:10:e7:b1:76:23:f0:4c: 86:d8:c0:c5:a7:61:db:8a:b5:64:ff:fa:c2:75:a6: f0:c3:d0:4b:ef:a0:ed:b9:0c:17:02:83:cc:2d:7e: 3b:a9:cc:4b:34:ee:c3:63:57:7e:76:fb:61:53:2d: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:12:C0:7D:28:87:D8:86:9B:68:8E:C5:DD:C1:9D:AC:1B:61:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:45:3e:88:09:74:21:62:07:6f:15:dd:80:b7:c1:6d:b7:40: 33:47:e4:64:7b:f7:56:62:1f:d7:72:15:55:77:e2:00:1e:c5: 7c:d0:14:84:64:02:46:64:a1:41:af:53:ce:5d:bb:11:c6:c3: fb:0f:10:78:29:db:3d:ac:50:29:c7:2d:65:46:9f:12:b4:4b: a9:45:bb:4e:eb:76:6a:08:6b:dc:86:0d:b2:24:8c:59:9d:a2: b4:0a:50:ff:37:17:af:e6:d6:10:af:b4:4f:db:6c:e8:f4:eb: c8:d4:2e:e2:60:0f:80:e2:b9:97:06:53:6a:6c:78:98:56:e0: 7b:e4:4b:d4:3d:5b:73:83:c7:e5:65:14:68:1f:76:88:63:be: 40:e7:a3:4e:59:56:cd:b5:57:df:2a:36:8f:f4:06:16:ec:65: bb:0c:04:41:e7:c2:bf:d2:64:12:f5:65:0e:98:66:e1:50:c0: ba:3d:11:39:72:08:ef:4c:50:d4:c3:e9:34:c1:5f:51:3c:11: ee:f3:2b:84:b9:bd:ab:5d:73:4c:3f:bc:29:a9:76:03:cb:4c: 87:da:40:76:9a:c6:25:0c:d3:12:5c:0b:cb:cb:af:e7:34:58: da:9b:73:2b:77:b3:29:43:99:6e:40:bc:ac:9a:9b:6a:b1:dd: b2:b5:72:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodZxj/kA5Vrz04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk OWE2ZjBkOWMtMGUzMS00NjU0LTlkZDUtNmFlZDBlYzNkMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDOdEKtyGCpyCoL6lu5EJAe3GRHL9WRYDx9E WNW66BZMyeLkERR+9yBXuFeju6JJjnBgHtDzM8KSDwdaOVD3y4h0tl56gq7azvOb TlpJYFhrnlld59WglvYFdPJOHvU84/MF8ahG37iOQjIPDqKe0O/RPySMFBOybI00 J4aSptLLmdWOCsMCgzDqQTp2rqz0wcUK8dUR+16IKRIqzeeGtzsivijjoZekEeJg LjquwlEucin5W18Q67FIniXwmFWt52FHh4EBBMlYDhDnsXYj8EyG2MDFp2HbirVk //rCdabww9BL76DtuQwXAoPMLX47qcxLNO7DY1d+dvthUy2jtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSJEsB9KIfYhptojsXdwZ2sG2GtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzkwMmVhOTItZTFkZi0z ZmUwLWJmZTItOThmNjE4Nzg1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJFPogJdCFiB28V3YC3wW23QDNH5GR791ZiH9dyFVV34gAexXzQFIRk AkZkoUGvU85duxHGw/sPEHgp2z2sUCnHLWVGnxK0S6lFu07rdmoIa9yGDbIkjFmd orQKUP83F6/m1hCvtE/bbOj068jULuJgD4DiuZcGU2pseJhW4HvkS9Q9W3ODx+Vl FGgfdohjvkDno05ZVs21V98qNo/0BhbsZbsMBEHnwr/SZBL1ZQ6YZuFQwLo9ETly CO9MUNTD6TTBX1E8Ee7zK4S5vatdc0w/vCmpdgPLTIfaQHaaxiUM0xJcC8vLr+c0 WNqbcyt3sylDmW5AvKyam2qx3bK1cis= -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:38 2026 by rpki-client