$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa File: 734ca13e-dcbf-3086-8d93-d83e559240e6.roa (raw, json) Hash identifier: mTGwhKwLAv3MRJ3oRPYRjV9CMTmhpjNy5QJXRkR9wKY= Subject key identifier: 99:D8:E3:EA:2C:D4:F5:BC:8C:F1:AA:E8:26:71:5F:23:2C:57:E7:36 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA48F1F9C43830C1610F40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 68.232.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:48:f1:f9:c4:38:30:c1:61:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=6c4dd8d8-7b42-4a70-a070-ebcc1f0237c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:15:b4:d8:7c:c8:c3:14:8c:db:75:42:aa: 18:98:64:0c:7e:5a:dd:b4:4d:d4:0e:d9:8f:36:cb: c8:45:b2:65:be:6c:b4:0d:98:51:12:40:5d:a6:b4: 2a:f3:22:ce:7e:f0:92:f4:e7:86:73:e9:fb:e7:4c: e0:ac:9c:21:84:18:cd:d1:bf:9f:e2:52:e3:4e:7d: 3e:85:a0:6a:b9:6d:41:7f:dd:24:86:fe:8e:ad:ed: e4:0e:5d:3d:a3:e7:af:4c:db:8d:ae:f0:fa:44:11: 27:72:b2:f4:8d:3d:aa:f0:6a:65:1b:c7:49:f2:c9: bf:58:63:44:f3:17:1f:43:90:55:d9:2d:f5:12:ce: c4:dd:21:cf:54:69:b2:78:80:89:90:e2:53:36:47: f5:b5:04:26:1c:96:ce:22:f3:83:fd:2a:69:b1:41: 54:94:43:1e:44:06:14:8c:a4:da:79:40:57:77:85: f1:56:01:02:6d:b9:b4:34:1d:8a:0c:15:fa:bd:ee: 19:2c:1c:8c:c1:ee:18:8e:fd:02:cd:19:8b:6f:d6: 7a:f7:f3:59:13:f2:92:ae:76:86:5c:7b:34:25:91: d9:43:d4:cf:82:77:31:ca:66:16:37:9b:b6:df:22: 7c:42:70:55:47:f0:df:6d:eb:7a:07:bc:ce:3a:74: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D8:E3:EA:2C:D4:F5:BC:8C:F1:AA:E8:26:71:5F:23:2C:57:E7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b3:0c:ee:85:11:6b:b5:29:f2:df:d7:0e:ea:92:db:24:83: 43:3f:a4:77:e9:d8:be:35:32:7a:8e:4d:c5:69:c3:76:d8:e2: 98:e2:e2:f1:99:13:f6:26:0a:97:3e:e6:22:58:83:ac:5e:b8: a9:6b:0c:f4:7e:4a:e2:e0:ac:ef:36:69:38:29:de:c4:0f:7b: b0:ab:ce:38:52:e6:7d:02:ca:a3:57:54:bf:ea:46:3c:cb:1a: 9d:39:67:29:6a:11:4b:65:6e:09:fc:0c:4b:5b:fd:6c:86:f2: a6:99:4b:75:51:c1:6a:60:a7:49:93:d4:12:58:ce:3f:38:ae: 02:b1:7a:c9:34:0f:97:79:84:af:26:4c:1f:69:ff:9d:f5:a7: 58:df:f7:46:65:a9:85:7d:18:57:04:3d:f1:d2:d5:cf:c8:c8: 3a:b5:71:87:b3:11:85:53:7b:55:7a:e0:81:71:c8:93:f9:08: cc:9a:cd:29:7d:01:18:2f:76:91:60:66:79:cd:ac:c5:f4:99: 42:cc:d9:af:a2:9c:ba:8e:ac:dd:f3:ef:cc:47:2b:a2:b2:a0: 25:bb:94:b9:1e:df:d8:d2:ac:e3:1e:5c:bb:27:57:78:12:73: 6b:62:2c:42:11:66:7e:af:be:52:7b:71:2f:8c:ee:2e:63:69: c9:eb:bd:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kjx+cQ4MMFhD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NmM0ZGQ4ZDgtN2I0Mi00YTcwLWEwNzAtZWJjYzFmMDIzN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMEVtNh8yMMUjNt1QqoYmGQMflrdtE3UDtmP NsvIRbJlvmy0DZhREkBdprQq8yLOfvCS9OeGc+n750zgrJwhhBjN0b+f4lLjTn0+ haBquW1Bf90khv6Ore3kDl09o+evTNuNrvD6RBEncrL0jT2q8GplG8dJ8sm/WGNE 8xcfQ5BV2S31Es7E3SHPVGmyeICJkOJTNkf1tQQmHJbOIvOD/SppsUFUlEMeRAYU jKTaeUBXd4XxVgECbbm0NB2KDBX6ve4ZLByMwe4Yjv0CzRmLb9Z69/NZE/KSrnaG XHs0JZHZQ9TPgncxymYWN5u23yJ8QnBVR/Dfbet6B7zOOnTUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnY4+os1PW8jPGq6CZxXyMsV+c2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzM0Y2ExM2UtZGNiZi0z MDg2LThkOTMtZDgzZTU1OTI0MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFizDO6FEWu1KfLf1w7qktskg0M/pHfp2L41MnqOTcVpw3bY4pji4vGZ E/YmCpc+5iJYg6xeuKlrDPR+SuLgrO82aTgp3sQPe7CrzjhS5n0CyqNXVL/qRjzL Gp05ZylqEUtlbgn8DEtb/WyG8qaZS3VRwWpgp0mT1BJYzj84rgKxesk0D5d5hK8m TB9p/531p1jf90ZlqYV9GFcEPfHS1c/IyDq1cYezEYVTe1V64IFxyJP5CMyazSl9 ARgvdpFgZnnNrMX0mULM2a+inLqOrN3z78xHK6KyoCW7lLke39jSrOMeXLsnV3gS c2tiLEIRZn6vvlJ7cS+M7i5jacnrvZo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:01 2026 by rpki-client