$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa File: 40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa (raw, json) Hash identifier: k8L5HoFKHjJgQEoQsOkijG8cL+yBXUWfQyur/9Z1xsU= Subject key identifier: 06:EF:84:7A:77:AD:85:93:28:29:55:4E:C3:D8:19:35:93:02:80:A9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D122F1D3A508037DFC1B80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 68.232.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:22:f1:d3:a5:08:03:7d:fc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=6d9c05d5-039d-4584-af1d-a43984caa0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:f2:11:b0:2f:6b:a0:c1:e2:8d:4b:d1:ff: 0e:05:01:10:bc:fc:c4:8b:97:71:e9:cc:5e:74:38: dd:be:b1:e9:45:fa:00:19:d3:5b:bc:d6:b8:1c:94: ec:9e:51:11:74:0c:f5:bc:d5:2a:73:b1:99:91:05: f8:28:0d:7d:11:d5:71:c1:bf:6c:26:7b:7c:4d:dd: 1f:3e:5d:8c:e1:86:cf:fc:1e:5e:50:46:9f:5f:f4: ad:41:01:f1:87:5c:bb:8a:01:2d:b8:97:17:6d:c4: 77:7f:37:0a:67:ae:f9:7c:57:ff:65:b5:14:8e:0d: d5:96:15:1b:96:af:12:0f:7a:59:cd:89:42:bc:ab: 51:59:b5:ea:e9:50:d7:2a:31:5c:e2:0a:b7:7c:17: e4:ad:93:52:aa:d4:fa:1a:91:fd:9d:5a:f6:ef:43: 91:c6:3e:d7:19:a6:32:65:5a:ed:40:0e:19:91:f2: 0f:42:07:80:1e:79:48:22:44:01:35:6d:9b:fe:67: 15:48:fe:1a:ce:9c:ba:e4:0d:d0:a5:c4:27:a4:b5: e5:3e:98:96:32:92:aa:1b:d7:3d:c4:e8:22:f2:5f: 4d:a5:83:e2:e4:fe:04:96:66:e0:e6:82:ff:32:c3: 99:c4:c2:6e:b2:69:02:55:a0:12:1c:0e:b8:6a:c0: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:84:7A:77:AD:85:93:28:29:55:4E:C3:D8:19:35:93:02:80:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7e:83:2f:ec:5b:08:c4:b9:09:dc:9c:04:13:84:c1:f5:87: 6e:2b:ba:1d:fa:74:ef:1b:20:4a:e9:b0:bc:e3:54:99:b1:62: 9e:80:d1:22:40:65:c9:2c:44:e9:17:12:7c:5b:8c:86:e5:a8: cf:02:c2:96:a2:b1:9c:4d:74:9c:df:17:5e:25:64:07:08:6e: 9b:7e:b1:5c:05:78:df:b0:81:e3:82:03:cc:80:d0:d5:11:43: 77:5e:48:d5:49:a6:2e:95:29:f4:93:2c:c2:2e:a1:b5:ec:ad: fc:89:62:62:dc:f8:96:af:7e:da:6d:38:ad:f9:10:a3:6c:e5: 61:ca:21:f9:ea:b7:6f:67:1b:e7:37:c2:5a:02:ee:0b:2f:a2: 19:74:50:8e:6f:d7:38:d9:dc:6b:d8:cb:06:b4:d2:f8:97:d2: dd:16:41:b0:7e:a5:19:8a:d2:ba:55:69:3c:81:06:05:da:51: 0b:29:e6:54:e3:37:3c:77:be:c3:a9:d3:50:2e:25:5d:58:85: ae:84:93:32:45:94:08:23:55:62:25:f5:09:52:00:09:b1:ce: 9d:00:14:9e:23:35:28:d3:26:9c:62:15:27:d3:8e:19:5c:e0: 48:46:9d:fc:ab:9d:3a:b5:1d:68:99:34:84:e3:e9:d3:4a:cd: 6a:dd:36:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SLx06UIA338G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NmQ5YzA1ZDUtMDM5ZC00NTg0LWFmMWQtYTQzOTg0Y2FhMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ryEbAva6DB4o1L0f8OBQEQvPzEi5dx6cxe dDjdvrHpRfoAGdNbvNa4HJTsnlERdAz1vNUqc7GZkQX4KA19EdVxwb9sJnt8Td0f Pl2M4YbP/B5eUEafX/StQQHxh1y7igEtuJcXbcR3fzcKZ675fFf/ZbUUjg3VlhUb lq8SD3pZzYlCvKtRWbXq6VDXKjFc4gq3fBfkrZNSqtT6GpH9nVr270ORxj7XGaYy ZVrtQA4ZkfIPQgeAHnlIIkQBNW2b/mcVSP4azpy65A3QpcQnpLXlPpiWMpKqG9c9 xOgi8l9NpYPi5P4Elmbg5oL/MsOZxMJusmkCVaASHA64asAodQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbvhHp3rYWTKClVTsPYGTWTAoCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDBjNDg2NzAtMmZmOS0z ZDZiLWEzNTgtOWJmY2RlMGY3ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ+gy/sWwjEuQncnAQThMH1h24ruh36dO8bIErpsLzjVJmxYp6A0SJA ZcksROkXEnxbjIblqM8CwpaisZxNdJzfF14lZAcIbpt+sVwFeN+wgeOCA8yA0NUR Q3deSNVJpi6VKfSTLMIuobXsrfyJYmLc+JavftptOK35EKNs5WHKIfnqt29nG+c3 wloC7gsvohl0UI5v1zjZ3GvYywa00viX0t0WQbB+pRmK0rpVaTyBBgXaUQsp5lTj Nzx3vsOp01AuJV1Yha6EkzJFlAgjVWIl9QlSAAmxzp0AFJ4jNSjTJpxiFSfTjhlc 4EhGnfyrnTq1HWiZNITj6dNKzWrdNkk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:21:55 2025 by rpki-client