$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa File: 347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa (raw, json) Hash identifier: 1qlG9egjLBoycjyDbVm2ZmvQnOqsOvJY5XK/rAZ+W1g= Subject key identifier: F1:2D:0B:1D:E4:31:FB:A1:82:09:53:14:0A:88:D3:B5:92:E0:D0:88 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC146AA669DEDDF39A33080 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 68.232.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:aa:66:9d:ed:df:39:a3:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c826b28c-c194-487c-9f35-f7d0ab4b96a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:17:0b:f7:46:88:20:7e:06:30:3f:f0:52: f2:d7:61:43:74:35:2d:35:35:f2:53:ff:0a:1e:24: d8:a4:ec:23:b7:3f:c4:e7:a0:e9:ee:08:30:77:4f: 92:26:c9:b6:1f:b4:c1:9d:81:29:e6:df:b6:de:7c: 26:ad:cf:e5:c1:2f:91:f3:b1:ec:c0:d6:46:da:30: 72:6d:60:d7:12:07:90:a5:53:7e:3a:3e:49:06:40: 30:bd:a8:d9:41:db:d9:6c:7b:94:62:4f:07:ca:d0: 61:3a:ed:fc:fa:71:5f:72:96:a9:c6:6c:6b:e1:17: 5c:92:f1:80:38:ef:ff:0c:08:c9:30:eb:f5:0c:cd: bd:20:5f:e8:55:b4:8c:be:1e:7b:10:a7:e2:fb:e3: 21:53:4b:9b:a0:84:16:e4:28:50:3d:9c:76:36:51: 0c:95:dd:52:50:d4:83:07:28:42:d0:f7:e4:73:d5: 3c:06:70:8c:e3:32:2d:7f:df:37:86:d9:10:b7:41: 77:40:28:8b:cf:f6:25:7a:9e:96:b7:c2:fc:de:a9: 3e:c2:2c:0c:87:4f:0a:42:40:44:02:ec:38:ff:b7: 48:c6:d6:c4:3e:07:94:dd:25:8b:d4:3f:04:a4:ef: c1:28:c3:7b:77:39:1a:b2:28:ab:28:15:1e:49:8b: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2D:0B:1D:E4:31:FB:A1:82:09:53:14:0A:88:D3:B5:92:E0:D0:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c4:aa:e5:65:8f:b6:45:82:ee:95:b5:9a:bf:9a:f4:2f:20: f3:63:be:1a:99:a3:6e:12:43:97:d9:b3:ce:55:e4:f0:84:30: e1:ad:32:09:50:67:41:6f:ec:f7:b8:94:2a:69:5c:ee:f0:08: b9:aa:ca:c6:11:79:a9:27:02:b3:73:4f:2c:f3:2a:73:b0:e3: 59:6d:9d:a0:d8:2c:96:63:e3:05:59:bd:cf:f4:51:68:e6:58: da:5c:52:91:3b:61:0e:fa:b6:fa:61:51:e5:f0:34:5a:51:31: 91:63:ab:30:69:65:46:3a:04:0d:14:3b:cc:81:48:fa:a5:45: 08:0b:31:7b:3c:87:b6:55:63:ac:fd:08:a0:77:8d:4a:41:d7: 7b:35:13:95:12:cc:d1:7c:2d:d2:50:1e:e2:9f:c0:20:cb:6f: 13:0c:2d:d0:31:0b:37:df:b1:5d:07:02:c2:c7:ec:8b:06:b9: 94:0b:4b:5d:3c:78:0c:e7:88:b6:48:4a:df:a7:d1:b6:43:a2: 62:6e:b9:47:15:fa:26:ed:02:39:cb:4d:3d:5c:50:14:b2:1e: 5b:29:b7:09:2e:31:d5:a0:35:56:79:03:47:17:40:78:f7:4c: b9:73:b8:be:49:33:ec:55:09:d8:15:e2:0e:7b:7c:49:4e:92: 5a:51:39:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUaqZp3t3zmjMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzgyNmIyOGMtYzE5NC00ODdjLTlmMzUtZjdkMGFiNGI5NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N0XC/dGiCB+BjA/8FLy12FDdDUtNTXyU/8K HiTYpOwjtz/E56Dp7ggwd0+SJsm2H7TBnYEp5t+23nwmrc/lwS+R87HswNZG2jBy bWDXEgeQpVN+Oj5JBkAwvajZQdvZbHuUYk8HytBhOu38+nFfcpapxmxr4RdckvGA OO//DAjJMOv1DM29IF/oVbSMvh57EKfi++MhU0uboIQW5ChQPZx2NlEMld1SUNSD ByhC0Pfkc9U8BnCM4zItf983htkQt0F3QCiLz/Ylep6Wt8L83qk+wiwMh08KQkBE Auw4/7dIxtbEPgeU3SWL1D8EpO/BKMN7dzkasiirKBUeSYsm4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEtCx3kMfuhgglTFAqI07WS4NCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ3YmQ4NWUtODZjNy0z ZDM2LWFiMzctZTFhMTAxY2NhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrEquVlj7ZFgu6VtZq/mvQvIPNjvhqZo24SQ5fZs85V5PCEMOGtMglQ Z0Fv7Pe4lCppXO7wCLmqysYReaknArNzTyzzKnOw41ltnaDYLJZj4wVZvc/0UWjm WNpcUpE7YQ76tvphUeXwNFpRMZFjqzBpZUY6BA0UO8yBSPqlRQgLMXs8h7ZVY6z9 CKB3jUpB13s1E5USzNF8LdJQHuKfwCDLbxMMLdAxCzffsV0HAsLH7IsGuZQLS108 eAzniLZISt+n0bZDomJuuUcV+ibtAjnLTT1cUBSyHlsptwkuMdWgNVZ5A0cXQHj3 TLlzuL5JM+xVCdgV4g57fElOklpROb0= -----END CERTIFICATE-----Generated at Sun Aug 24 06:13:51 2025 by rpki-client