$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa File: 3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa (raw, json) Hash identifier: mGUkDBP8dlWRlemGGMJ1kAstUmO4wCROrONIVfaCeO4= Subject key identifier: 6D:B4:FB:7A:5E:34:3F:3D:62:88:F9:0D:E8:79:63:10:F3:77:68:05 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E77E216C633251A55D5500 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 68.232.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7e:21:6c:63:32:51:a5:5d:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f176bfa8-7935-4d50-8591-2d78a3372149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:4d:48:36:ac:34:e1:a1:65:d2:1d:71:4c: 29:e4:bd:21:75:d0:22:38:da:90:5e:29:17:83:1d: 3d:2f:39:d9:0d:ff:01:c0:a5:78:bd:ab:9e:da:41: 56:37:27:81:f1:41:0b:4e:6c:bc:50:05:e5:74:95: 05:79:ae:9d:1a:cd:55:34:8d:cd:7a:9e:42:fc:ca: 70:e7:75:38:90:ae:b9:de:b9:4b:ff:69:8a:cb:64: 27:e5:3a:4c:a1:93:3a:52:9b:a0:25:24:e9:66:7b: 1c:f0:a0:c9:50:b1:cb:86:23:3a:36:35:eb:02:46: 7c:b5:3e:8f:29:73:ec:4f:f0:10:e3:e8:42:e1:02: e1:93:82:49:72:38:e0:58:0b:a6:a7:9c:eb:8a:f4: 72:4e:af:9b:a4:35:0b:49:8d:99:04:27:9d:4b:f2: 55:a2:a8:a2:df:95:6a:1f:cc:84:7d:c8:75:37:d3: 40:45:63:82:e4:f0:ee:52:e2:4e:1c:6a:ca:81:06: c2:73:cc:a5:01:ea:1a:41:c8:e0:66:a7:2f:7d:69: 88:48:7a:0d:33:35:de:b9:bd:a2:d9:d8:ac:b2:25: 97:0a:7c:22:08:dd:88:6f:35:ac:8d:03:ad:84:59: 85:18:82:af:14:83:d1:5c:58:0f:de:fd:38:7b:57: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B4:FB:7A:5E:34:3F:3D:62:88:F9:0D:E8:79:63:10:F3:77:68:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:37:0d:0b:8f:a5:1e:f4:e2:55:c4:eb:28:2d:6d:0c:92:cf: 5c:e5:a2:a9:3f:e1:94:e7:9b:a9:ee:f5:2f:61:57:bd:71:06: f4:48:82:f9:33:3e:11:64:f9:ca:0b:49:c3:66:2c:21:8c:99: a2:af:fe:b9:1a:e8:e3:2f:37:e8:f9:16:26:08:d9:7d:e5:98: ab:12:2f:94:08:a8:13:5c:aa:1d:69:f4:04:e5:bb:ad:a4:49: 40:f0:77:2a:89:56:89:3a:d2:4e:18:13:a7:0c:a8:83:e9:d1: 0d:d9:26:7c:dd:78:bc:74:54:6f:9d:c1:0b:31:4d:a8:98:ca: c9:e8:eb:68:29:56:c3:8c:43:da:a7:bf:ba:ec:bd:b5:26:f9: 5d:04:b7:a4:b6:3a:bf:69:cc:e7:a4:7f:6e:98:e8:4d:2b:de: d9:b3:7d:a1:9e:de:53:ca:79:4f:54:6a:76:b4:89:cf:ce:b3: c3:72:d7:14:ec:69:f4:b3:34:0b:db:04:be:96:4c:36:55:28: d3:b7:07:6a:b3:78:2d:f7:b2:77:2f:ba:35:c1:07:0b:73:bf: 6d:8c:a8:49:f4:be:d7:61:72:9d:f3:16:b9:96:3d:77:c6:36: a3:5c:97:0e:f2:95:5f:9f:f4:95:7e:7a:72:00:4e:72:b1:5b: a7:4f:b5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE534hbGMyUaVdVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZjE3NmJmYTgtNzkzNS00ZDUwLTg1OTEtMmQ3OGEzMzcyMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth5NSDasNOGhZdIdcUwp5L0hddAiONqQXikX gx09LznZDf8BwKV4vaue2kFWNyeB8UELTmy8UAXldJUFea6dGs1VNI3Nep5C/Mpw 53U4kK653rlL/2mKy2Qn5TpMoZM6UpugJSTpZnsc8KDJULHLhiM6NjXrAkZ8tT6P KXPsT/AQ4+hC4QLhk4JJcjjgWAump5zrivRyTq+bpDULSY2ZBCedS/JVoqii35Vq H8yEfch1N9NARWOC5PDuUuJOHGrKgQbCc8ylAeoaQcjgZqcvfWmISHoNMzXeub2i 2dissiWXCnwiCN2IbzWsjQOthFmFGIKvFIPRXFgP3v04e1e66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG20+3peND89Yoj5Deh5YxDzd2gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2EzODk2NmUtMGJlNS0z Y2MzLTlhYTItNGNiMDg4M2JiYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY3DQuPpR704lXE6ygtbQySz1zloqk/4ZTnm6nu9S9hV71xBvRIgvkz PhFk+coLScNmLCGMmaKv/rka6OMvN+j5FiYI2X3lmKsSL5QIqBNcqh1p9ATlu62k SUDwdyqJVok60k4YE6cMqIPp0Q3ZJnzdeLx0VG+dwQsxTaiYysno62gpVsOMQ9qn v7rsvbUm+V0Et6S2Or9pzOekf26Y6E0r3tmzfaGe3lPKeU9Uana0ic/Os8Ny1xTs afSzNAvbBL6WTDZVKNO3B2qzeC33sncvujXBBwtzv22MqEn0vtdhcp3zFrmWPXfG NqNclw7ylV+f9JV+enIATnKxW6dPtUQ= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:36 2025 by rpki-client