$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa File: 462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa (raw, json) Hash identifier: 4P4B4bgejyFhkP8+HH5/e3ZphWQhEYdMA1njWiXmEtY= Subject key identifier: 01:63:6C:C7:6F:BD:1E:BC:9C:29:CA:07:60:5D:E9:9B:4F:F8:29:AA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E785762635CA36ECCF7860 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 68.232.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:76:26:35:ca:36:ec:cf:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5f9e703f-075e-4e5c-8875-a8af1a7b87f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:d3:11:c8:6d:c6:4f:8f:d3:fc:6f:b3:00: 53:ef:27:1e:b3:9c:de:df:ba:33:d4:c3:ee:0c:40: 5a:39:06:55:7c:59:51:c6:9c:53:e4:31:13:0b:e2: 0a:dc:bc:30:66:fc:4f:5f:4e:b1:71:d4:6e:dc:6e: 82:c2:65:e3:0e:7c:d5:48:d2:b9:38:69:ba:7b:1d: e4:b8:7b:07:fc:9d:3b:cb:c4:8e:8e:ab:b8:0c:aa: 6a:c0:4a:9d:25:8c:f7:ef:d6:bd:88:8d:ca:e4:f3: fb:ac:f4:4c:de:69:e2:43:2f:54:b8:0b:fe:8c:18: 06:6c:79:7b:36:28:c7:e7:aa:7c:45:bc:67:e6:24: 9b:6d:41:17:c6:86:b4:19:0f:69:f2:a8:c9:54:15: 6c:92:e4:78:f1:1c:df:23:b4:b8:f3:6f:cb:31:1a: 0e:81:01:86:09:aa:53:f9:35:83:76:34:69:b0:c8: 9c:a8:be:28:c3:6b:df:da:53:cd:8d:e1:a8:94:6b: 79:cc:f7:f3:f8:e6:00:4a:55:64:1a:b8:e8:91:98: 16:55:78:87:10:7a:4f:9c:67:c3:0f:84:fa:1e:f1: df:40:0a:d5:e9:69:20:c0:33:3b:d6:b2:5b:07:6d: 5d:74:de:57:69:ca:42:92:19:46:d1:00:03:ba:8f: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:63:6C:C7:6F:BD:1E:BC:9C:29:CA:07:60:5D:E9:9B:4F:F8:29:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:34:6b:38:16:42:8d:eb:5c:91:43:8f:4f:d4:fd:78:7f:28: b1:4d:e9:d3:78:4c:bd:87:49:37:27:98:c4:0a:a1:bf:9b:e2: 15:1b:c8:5c:fe:bb:5d:1b:bb:34:95:a4:02:b1:24:b8:2d:74: 4f:d0:ee:28:fb:41:50:24:79:5b:61:cf:5b:dc:2a:36:00:40: 74:0a:a8:54:58:2f:21:69:1c:87:c1:04:b2:36:cb:d6:72:fb: c6:32:99:09:93:2a:46:ff:22:ce:e5:54:28:ac:47:d3:c6:35: fb:ed:b9:fd:45:f1:73:05:56:0c:7b:1f:69:3d:fe:59:db:8e: b7:1f:60:44:8a:e6:30:dc:ee:2b:a6:b0:7d:2f:3c:75:b5:fc: ad:91:39:6c:78:97:f4:0e:bc:93:b1:57:51:6a:7a:90:18:54: 9a:15:62:98:cc:13:f8:07:92:33:33:e2:4e:62:9f:9c:34:b0: 74:37:32:ca:10:33:f0:2e:7c:17:40:71:44:ec:fd:32:4b:43: aa:d3:7b:12:49:fb:c7:3a:b2:51:2e:bd:d6:ec:3b:8c:08:48: 35:55:a7:b7:27:f7:fb:67:03:5d:59:0e:2c:2b:c6:ee:1b:d6: 7b:06:49:61:74:4c:bc:d4:ae:34:a7:cf:4c:24:d6:19:94:dd: 78:8c:97:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54V2JjXKNuzPeGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWY5ZTcwM2YtMDc1ZS00ZTVjLTg4NzUtYThhZjFhN2I4N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX7TEchtxk+P0/xvswBT7yces5ze37oz1MPu DEBaOQZVfFlRxpxT5DETC+IK3LwwZvxPX06xcdRu3G6CwmXjDnzVSNK5OGm6ex3k uHsH/J07y8SOjqu4DKpqwEqdJYz379a9iI3K5PP7rPRM3mniQy9UuAv+jBgGbHl7 NijH56p8Rbxn5iSbbUEXxoa0GQ9p8qjJVBVskuR48RzfI7S482/LMRoOgQGGCapT +TWDdjRpsMicqL4ow2vf2lPNjeGolGt5zPfz+OYASlVkGrjokZgWVXiHEHpPnGfD D4T6HvHfQArV6WkgwDM71rJbB21ddN5XacpCkhlG0QADuo+NxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFjbMdvvR68nCnKB2Bd6ZtP+CmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDYyZmYxMmMtZTFjNC0z YmI2LWEzOGItOTVjYWNlNGQzNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB40azgWQo3rXJFDj0/U/Xh/KLFN6dN4TL2HSTcnmMQKob+b4hUbyFz+ u10buzSVpAKxJLgtdE/Q7ij7QVAkeVthz1vcKjYAQHQKqFRYLyFpHIfBBLI2y9Zy +8YymQmTKkb/Is7lVCisR9PGNfvtuf1F8XMFVgx7H2k9/lnbjrcfYESK5jDc7ium sH0vPHW1/K2ROWx4l/QOvJOxV1FqepAYVJoVYpjME/gHkjMz4k5in5w0sHQ3MsoQ M/AufBdAcUTs/TJLQ6rTexJJ+8c6slEuvdbsO4wISDVVp7cn9/tnA11ZDiwrxu4b 1nsGSWF0TLzUrjSnz0wk1hmU3XiMl/o= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:08 2025 by rpki-client