$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/94462847-6c1b-3c6f-8386-790798c7f0a6.roa File: 94462847-6c1b-3c6f-8386-790798c7f0a6.roa (raw, json) Hash identifier: 2Y1tv/Ovd+lwfXVaZ8tycTsi3XQo+7aB9ylz0OIXsqY= Subject key identifier: 48:C6:53:94:56:C1:2A:E8:D3:8F:F0:4B:93:0B:CE:4F:BD:B2:C8:8B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B5B0763F70188313650BF4BC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/94462847-6c1b-3c6f-8386-790798c7f0a6.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16417 IP address blocks: 68.232.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:63:f7:01:88:31:36:50:bf:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=de67cc37-c215-41c1-a1be-4179683b6e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:ba:c0:e7:38:c5:ee:4c:8b:b1:a6:d7:25: 33:c7:1c:9d:4a:5a:53:1a:f4:b8:7f:1b:60:10:99: 7e:c8:49:21:2a:2a:dd:72:89:3c:89:89:bc:78:fc: f2:15:ed:2e:14:a4:90:9c:d4:82:2c:5a:8f:b0:fe: 4b:14:6a:c8:b4:ea:68:b2:46:fb:df:58:8b:1a:1d: 3a:3c:29:7d:1f:98:42:69:a8:77:52:1e:1f:18:a4: fe:35:2b:ee:0d:16:dd:1a:af:79:ac:bc:a1:e7:a2: 1d:68:f7:33:4a:1c:49:1e:f0:37:8c:f4:2b:5f:38: df:59:17:59:6b:9b:ea:1d:ea:ab:2b:bc:50:0f:2f: 63:db:45:3c:79:ac:76:45:7d:06:60:b0:67:bd:26: 6b:29:50:50:16:fe:26:6d:94:19:0a:69:c6:c2:bf: 2f:67:c4:86:47:85:61:70:2e:eb:fe:fd:17:7c:2a: eb:9f:d0:26:46:37:84:b9:88:2f:9c:11:27:0d:f9: 1d:10:a9:b0:64:4d:fb:76:aa:24:09:ee:2d:47:14: 12:59:f0:ff:21:e1:2c:e8:fe:93:31:2b:c5:de:77: 24:7f:8f:89:64:a3:18:11:28:97:9e:e7:0a:79:60: 1e:18:be:a4:da:3d:36:91:63:d1:7b:a6:99:b4:1f: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:53:94:56:C1:2A:E8:D3:8F:F0:4B:93:0B:CE:4F:BD:B2:C8:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/94462847-6c1b-3c6f-8386-790798c7f0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a5:74:da:0e:71:3b:1f:8b:dc:00:7f:b0:89:40:57:84:fe: 22:ac:b8:e9:fa:cb:0e:7e:b4:6f:d7:39:cc:d4:fd:98:f9:81: 86:b2:d8:39:0e:81:b6:8d:37:d0:97:3a:d6:ec:f2:b0:78:78: 4e:4f:1c:8b:47:aa:15:79:4f:92:7e:93:2b:b1:83:d5:74:c0: 34:5c:dd:6b:e2:5c:ea:b1:51:4d:6f:20:7c:ba:55:35:57:0c: 60:d7:cb:93:59:99:1b:a2:2d:9a:79:42:0a:52:12:6b:08:79: 37:18:55:c7:ac:58:4b:b8:cd:e4:54:bb:27:bc:15:3a:a3:9f: db:93:9e:e1:be:02:fd:8b:c1:3f:d8:13:14:87:64:f8:3e:45: b8:59:af:94:87:5a:ef:d5:34:38:16:53:5a:21:5f:bb:c6:61: 68:6e:17:5b:a6:a0:a1:60:7d:7b:71:14:0e:be:a1:5d:97:aa: e8:60:98:b3:ba:0d:af:92:c4:09:ac:96:d9:a2:50:f1:38:77: 47:79:69:1a:6d:d3:1e:3f:53:3a:69:58:a6:7d:64:c0:bd:e9: 98:fd:ac:e4:7e:c9:04:79:24:cf:34:d2:8e:af:00:c5:a0:be: d8:bb:bd:6f:43:1d:8b:9d:57:8b:f7:03:16:b3:d0:5e:f0:58: a9:9f:f8:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2P3AYgxNlC/S8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZGU2N2NjMzctYzIxNS00MWMxLWExYmUtNDE3OTY4M2I2ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XK6wOc4xe5Mi7Gm1yUzxxydSlpTGvS4fxtg EJl+yEkhKirdcok8iYm8ePzyFe0uFKSQnNSCLFqPsP5LFGrItOposkb731iLGh06 PCl9H5hCaah3Uh4fGKT+NSvuDRbdGq95rLyh56IdaPczShxJHvA3jPQrXzjfWRdZ a5vqHeqrK7xQDy9j20U8eax2RX0GYLBnvSZrKVBQFv4mbZQZCmnGwr8vZ8SGR4Vh cC7r/v0XfCrrn9AmRjeEuYgvnBEnDfkdEKmwZE37dqokCe4tRxQSWfD/IeEs6P6T MSvF3nckf4+JZKMYESiXnucKeWAeGL6k2j02kWPRe6aZtB/gHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjGU5RWwSro04/wS5MLzk+9ssiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOTQ0NjI4NDctNmMxYi0z YzZmLTgzODYtNzkwNzk4YzdmMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKldNoOcTsfi9wAf7CJQFeE/iKsuOn6yw5+tG/XOczU/Zj5gYay2DkO gbaNN9CXOtbs8rB4eE5PHItHqhV5T5J+kyuxg9V0wDRc3WviXOqxUU1vIHy6VTVX DGDXy5NZmRuiLZp5QgpSEmsIeTcYVcesWEu4zeRUuye8FTqjn9uTnuG+Av2LwT/Y ExSHZPg+RbhZr5SHWu/VNDgWU1ohX7vGYWhuF1umoKFgfXtxFA6+oV2XquhgmLO6 Da+SxAmsltmiUPE4d0d5aRpt0x4/UzppWKZ9ZMC96Zj9rOR+yQR5JM800o6vAMWg vti7vW9DHYudV4v3Axaz0F7wWKmf+O8= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:11 2025 by rpki-client