$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa File: 85ead007-abb0-3f09-a8f1-e13fc5734e16.roa (raw, json) Hash identifier: 1eyAcqMZ43mj4xnnyn5qMVMFNpyi7Nlt0ZWje5D6kZs= Subject key identifier: C9:AD:BB:F6:AC:B2:CD:8A:83:27:94:E8:30:01:1C:71:8B:8B:C9:C4 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E7853DC72E82E8F9A78700 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 68.232.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:3d:c7:2e:82:e8:f9:a7:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5ff7e409-b42c-4723-824c-31dc141de431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:71:6a:1f:65:89:7c:db:bb:0a:97:f6:1e: f3:07:7f:3d:cb:74:2d:2a:e0:ba:fe:8b:13:db:d1: 69:78:43:b4:99:ec:9e:89:ad:3f:a0:2f:89:13:a9: bc:5a:6d:09:c4:ba:01:22:7d:88:c3:04:19:49:35: dd:9c:fb:48:92:5e:96:1f:1d:6d:7c:47:9f:f7:89: 75:2a:cd:ab:3b:59:a0:99:f4:82:0b:be:f9:71:88: 61:30:95:9a:26:48:71:d8:0a:c5:16:e3:06:f1:55: 39:b4:64:e0:0b:a9:b9:46:cb:31:e0:53:78:0e:31: e5:93:7b:2b:6e:38:c5:f9:48:15:3a:da:84:25:26: ad:10:50:e4:bf:7b:70:42:97:44:fb:96:fc:0e:87: 1f:52:e3:89:4c:6d:24:3b:cd:89:3f:13:07:21:05: 38:2e:d4:47:0c:42:90:3b:6c:26:92:b9:e0:76:23: 52:80:85:bf:00:88:1e:44:e0:7d:50:39:4f:6b:2d: 9a:84:f5:a8:15:3d:93:9c:2d:09:c3:91:c1:5e:ef: 4f:6a:1a:3e:4c:b3:24:e9:ab:00:e0:64:5a:c1:4b: 49:97:8d:c7:fb:4b:19:7f:4d:f5:b7:7b:dc:10:fb: e8:fb:d5:b9:c4:06:89:d1:8e:18:47:87:1f:74:bc: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:BB:F6:AC:B2:CD:8A:83:27:94:E8:30:01:1C:71:8B:8B:C9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f1:c4:54:9f:3e:b2:47:5f:ee:c6:8e:dc:93:2f:81:f9:1d: b6:8a:5f:16:31:ad:16:cd:fa:9f:fa:3f:5f:3a:88:06:67:85: 86:1e:e1:09:c8:dc:cb:9e:65:c0:75:bb:27:6f:48:da:c4:c5: 6b:3a:44:e6:87:3e:6c:22:e1:be:4f:23:dc:57:2d:28:45:01: b3:a1:16:40:0a:e9:d7:d3:1c:53:1a:fb:a7:77:9d:bb:a3:8a: b1:20:1f:a6:1d:e2:05:25:c2:a7:69:b4:fa:cb:5b:85:6e:c1: 6e:85:fa:49:05:eb:86:08:a9:85:37:8a:0e:28:c1:2a:70:4c: 65:3f:cb:40:57:89:c0:22:11:55:2b:f5:f0:c2:60:45:0d:1a: 9b:f8:27:a4:c8:3e:5b:a7:cf:48:9f:94:12:03:7f:88:68:6c: 81:53:09:2e:63:07:02:08:8a:d4:f1:7d:f9:c0:a5:ad:0f:77: 54:05:3d:53:33:3a:e6:32:ba:09:e5:70:87:dd:3a:b6:c2:f3: 12:14:40:82:01:7e:71:7e:89:b9:4d:f7:2e:3c:e3:a2:e7:23: 80:68:a6:37:80:3b:89:b6:f9:fc:f2:70:fa:c4:57:63:90:73: 75:87:0c:4c:51:25:d9:9b:52:27:fc:c3:47:d5:4d:7f:b9:61: d2:7f:5e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54U9xy6C6PmnhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWZmN2U0MDktYjQyYy00NzIzLTgyNGMtMzFkYzE0MWRlNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikpxah9liXzbuwqX9h7zB389y3QtKuC6/osT 29FpeEO0meyeia0/oC+JE6m8Wm0JxLoBIn2IwwQZSTXdnPtIkl6WHx1tfEef94l1 Ks2rO1mgmfSCC775cYhhMJWaJkhx2ArFFuMG8VU5tGTgC6m5Rssx4FN4DjHlk3sr bjjF+UgVOtqEJSatEFDkv3twQpdE+5b8DocfUuOJTG0kO82JPxMHIQU4LtRHDEKQ O2wmkrngdiNSgIW/AIgeROB9UDlPay2ahPWoFT2TnC0Jw5HBXu9Paho+TLMk6asA 4GRawUtJl43H+0sZf031t3vcEPvo+9W5xAaJ0Y4YR4cfdLxCHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmtu/asss2KgyeU6DABHHGLi8nEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODVlYWQwMDctYWJiMC0z ZjA5LWE4ZjEtZTEzZmM1NzM0ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHxxFSfPrJHX+7GjtyTL4H5HbaKXxYxrRbN+p/6P186iAZnhYYe4QnI 3MueZcB1uydvSNrExWs6ROaHPmwi4b5PI9xXLShFAbOhFkAK6dfTHFMa+6d3nbuj irEgH6Yd4gUlwqdptPrLW4VuwW6F+kkF64YIqYU3ig4owSpwTGU/y0BXicAiEVUr 9fDCYEUNGpv4J6TIPlunz0iflBIDf4hobIFTCS5jBwIIitTxffnApa0Pd1QFPVMz OuYyugnlcIfdOrbC8xIUQIIBfnF+iblN9y4846LnI4BopjeAO4m2+fzycPrEV2OQ c3WHDExRJdmbUif8w0fVTX+5YdJ/Xjs= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:39 2025 by rpki-client