$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa File: 9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa (raw, json) Hash identifier: N+v6g2ikFX1kI5wWWOua9Dxv5kIaFcgpoWScKuXHXoY= Subject key identifier: EE:AF:EC:43:A0:A0:43:A3:B2:08:08:0B:47:1E:95:90:2C:64:89:24 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D9E500FDE7DDAFC52BDF7A200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 30238 IP address blocks: 68.232.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0f:de:7d:da:fc:52:bd:f7:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=61d96038-2b16-427e-a274-c58e445e3d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:e3:4b:ba:07:a5:91:0b:ab:92:5b:91:fc: ac:db:25:1a:1e:6b:bf:1f:c7:0e:a8:cf:e0:63:f4: f2:55:e2:72:df:50:e4:8f:84:61:78:79:ab:20:10: d3:cd:08:3e:f3:75:03:ff:de:8c:d7:32:ce:5e:5f: d9:fc:e1:91:8a:b6:58:c8:8c:86:bc:2f:ca:d4:1e: 8d:8a:2e:5f:ad:97:71:7c:5b:ed:3b:d8:66:96:30: 68:30:da:17:96:b9:73:e3:3d:81:87:cd:9e:59:73: 94:cc:85:ff:dc:b0:67:99:b5:d6:3e:c0:c8:7c:67: 58:27:3e:e3:da:e2:12:a6:67:63:b1:0b:f3:d2:e4: 32:0d:4b:b7:a8:77:8f:03:04:5b:88:7c:fd:c6:28: a8:62:0b:36:1b:b7:83:a1:62:a3:c6:4f:53:62:80: 52:5b:9d:3b:3b:a6:d0:c0:9c:18:69:e8:ba:bd:bd: 78:d0:ab:6b:4a:4d:a2:5f:9e:2a:04:59:96:6b:85: f0:7e:a4:74:9a:06:dc:f4:19:d2:13:ed:2c:19:71: 5e:9e:c5:e3:f5:25:01:a0:b5:00:a9:09:56:50:3f: 80:7e:19:d8:59:78:0a:e0:cf:c4:d5:86:ea:fc:6f: d6:c8:29:2b:04:b9:d3:ea:3f:e0:10:20:42:1b:9c: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AF:EC:43:A0:A0:43:A3:B2:08:08:0B:47:1E:95:90:2C:64:89:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:fa:84:75:a9:7e:5a:c4:58:7c:98:4f:d6:75:24:3d:66:b1: b3:73:d1:4d:f8:4b:68:c4:1d:75:3f:9e:ca:6e:9d:83:64:4c: 60:97:a1:69:5e:4b:70:50:ad:b7:eb:83:2b:07:a6:50:a9:5f: 59:40:78:77:2d:ec:81:54:7d:8b:44:49:29:f6:c0:b1:69:fa: f2:d1:1e:d5:b8:87:9b:df:20:1b:a9:47:20:65:bd:24:fa:a8: c9:01:5f:b1:46:d6:b3:59:f2:3e:97:2f:56:40:73:fb:8a:53: 62:df:26:16:38:e9:c0:14:7b:a9:97:4b:aa:e1:9a:09:9d:0f: f1:49:56:10:b7:a6:76:1c:07:0b:af:be:c5:ca:18:96:f2:83: 01:99:df:e9:b2:fe:e3:9a:a6:64:98:eb:85:44:ab:58:03:89: 21:ce:ff:18:58:3d:1e:2d:59:81:36:63:01:6a:3f:e6:c1:2a: 76:62:4e:aa:ee:6e:ba:6c:04:cd:0c:25:de:8a:a8:24:a0:0b: c0:50:d4:78:71:9b:20:2e:36:b1:4f:12:30:eb:22:35:a9:41: ec:80:df:40:d5:56:2f:0c:f6:99:dd:dd:11:f1:54:f2:c7:eb: 6b:d9:7d:ff:71:db:44:bf:75:bd:03:35:86:b3:3a:84:14:c8: 33:b3:e1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA/efdr8Ur33ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjFkOTYwMzgtMmIxNi00MjdlLWEyNzQtYzU4ZTQ0NWUzZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjXjS7oHpZELq5Jbkfys2yUaHmu/H8cOqM/g Y/TyVeJy31Dkj4RheHmrIBDTzQg+83UD/96M1zLOXl/Z/OGRirZYyIyGvC/K1B6N ii5frZdxfFvtO9hmljBoMNoXlrlz4z2Bh82eWXOUzIX/3LBnmbXWPsDIfGdYJz7j 2uISpmdjsQvz0uQyDUu3qHePAwRbiHz9xiioYgs2G7eDoWKjxk9TYoBSW507O6bQ wJwYaei6vb140KtrSk2iX54qBFmWa4XwfqR0mgbc9BnSE+0sGXFensXj9SUBoLUA qQlWUD+AfhnYWXgK4M/E1Ybq/G/WyCkrBLnT6j/gECBCG5wMOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6v7EOgoEOjsggIC0celZAsZIkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOWM4NTNmOGMtMTNkMC0z YmMwLTkwYjMtNDNkYzZiZWFiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMD6hHWpflrEWHyYT9Z1JD1msbNz0U34S2jEHXU/nspunYNkTGCXoWle S3BQrbfrgysHplCpX1lAeHct7IFUfYtESSn2wLFp+vLRHtW4h5vfIBupRyBlvST6 qMkBX7FG1rNZ8j6XL1ZAc/uKU2LfJhY46cAUe6mXS6rhmgmdD/FJVhC3pnYcBwuv vsXKGJbygwGZ3+my/uOapmSY64VEq1gDiSHO/xhYPR4tWYE2YwFqP+bBKnZiTqru brpsBM0MJd6KqCSgC8BQ1HhxmyAuNrFPEjDrIjWpQeyA30DVVi8M9pnd3RHxVPLH 62vZff9x20S/db0DNYazOoQUyDOz4bo= -----END CERTIFICATE-----Generated at Wed May 13 11:11:48 2026 by rpki-client