$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa File: a3de630d-0204-3526-b6ce-a52f3bdce272.roa (raw, json) Hash identifier: qVsIUjz+sMtXM3UnBQW8EUqHcTWOL0WxMwswNr9u/0I= Subject key identifier: 5B:BA:72:CD:E1:CF:98:D4:B3:49:80:79:75:E8:CE:2F:7C:AF:B7:B7 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B24957FCA35D420A16800 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 68.232.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:24:95:7f:ca:35:d4:20:a1:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=7c4904fc-908c-4061-b4fe-cec7be0b35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:6b:ca:3b:70:d4:82:5f:18:8d:8d:1e:aa: 18:7e:66:8e:a9:21:b1:14:2b:3f:db:31:a4:9f:7f: bb:6a:b2:01:0d:10:98:11:ca:60:a1:16:ac:b6:2a: f2:36:d6:5d:f2:13:23:f2:5a:55:5f:a6:ad:f9:e5: d5:90:ef:2c:84:9e:c8:fb:85:bf:ab:a8:00:8d:c2: fb:78:49:fd:17:05:ef:e5:ab:44:48:8e:91:d9:7f: ec:5d:dc:c5:98:7f:11:41:56:6e:3f:d3:2f:f7:bb: 3c:32:63:61:24:d5:91:47:37:d5:88:c9:0d:2a:14: 9b:da:d5:28:20:0a:36:8d:cc:9f:fd:00:4b:94:91: 90:29:02:77:d9:d9:36:1c:81:36:29:a3:16:d4:ca: 30:a0:7c:c7:53:74:a6:22:5f:d8:e0:f5:78:89:50: 53:61:3f:ef:e0:6a:4a:e4:6e:7f:ec:1a:03:21:49: 39:5b:9c:27:18:e0:9b:96:be:9b:bf:6f:c2:1b:47: a7:43:60:61:0d:ea:2f:a8:5b:83:50:99:a6:7a:61: 52:50:9a:83:32:11:9d:70:ee:74:50:7a:da:7b:05: 54:6d:59:c7:21:a8:df:dd:ef:e7:2d:c8:10:92:e7: b2:1f:7e:5d:63:a8:9b:83:9e:24:b6:ee:4f:6d:ae: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:72:CD:E1:CF:98:D4:B3:49:80:79:75:E8:CE:2F:7C:AF:B7:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:8f:e2:8d:6c:a8:9b:24:71:38:15:b5:0c:45:ac:e8:8e:bb: 8a:83:49:35:76:40:30:bf:de:65:79:0c:aa:35:0a:90:59:b6: cd:03:9c:d8:b6:7a:e7:b6:13:8a:af:6f:20:3f:f1:25:70:67: be:7c:47:b5:fb:e0:ae:58:62:05:9f:2d:c4:d3:43:86:2b:fa: 4a:54:da:ab:98:77:a5:99:b4:02:c6:df:d0:fd:a6:b9:65:64: 6d:15:2b:a2:48:57:cf:c5:8a:83:4c:7d:53:62:2c:e2:bc:07: 75:83:79:ef:65:72:90:df:6c:b8:7b:a2:1d:71:56:6e:c1:01: 0a:75:e1:60:ed:41:0d:46:ed:74:90:5d:9d:9c:a1:28:dc:81: ef:0d:c3:22:b1:31:55:62:a4:21:eb:9f:97:1e:91:c4:31:ba: d1:74:bd:d1:47:7d:5c:d1:78:98:a0:34:44:08:e1:08:81:f0: c1:a2:e2:de:29:b2:f9:cf:b1:4a:4b:06:20:f8:0e:86:11:0f: 63:68:8a:42:52:e7:62:55:0c:ca:b9:dc:63:68:6e:c9:bd:a8: e4:ea:ee:18:d0:17:33:ba:57:81:70:0b:0b:6c:2b:7b:5a:2c: 9e:71:77:49:a4:e9:ba:79:bc:7e:41:24:80:51:94:31:06:e0: 42:1b:77:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmySVf8o11CChaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk N2M0OTA0ZmMtOTA4Yy00MDYxLWI0ZmUtY2VjN2JlMGIzNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngRryjtw1IJfGI2NHqoYfmaOqSGxFCs/2zGk n3+7arIBDRCYEcpgoRastiryNtZd8hMj8lpVX6at+eXVkO8shJ7I+4W/q6gAjcL7 eEn9FwXv5atESI6R2X/sXdzFmH8RQVZuP9Mv97s8MmNhJNWRRzfViMkNKhSb2tUo IAo2jcyf/QBLlJGQKQJ32dk2HIE2KaMW1MowoHzHU3SmIl/Y4PV4iVBTYT/v4GpK 5G5/7BoDIUk5W5wnGOCblr6bv2/CG0enQ2BhDeovqFuDUJmmemFSUJqDMhGdcO50 UHraewVUbVnHIajf3e/nLcgQkueyH35dY6ibg54ktu5Pba6YAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu6cs3hz5jUs0mAeXXozi98r7e3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTNkZTYzMGQtMDIwNC0z NTI2LWI2Y2UtYTUyZjNiZGNlMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaP4o1sqJskcTgVtQxFrOiOu4qDSTV2QDC/3mV5DKo1CpBZts0DnNi2 eue2E4qvbyA/8SVwZ758R7X74K5YYgWfLcTTQ4Yr+kpU2quYd6WZtALG39D9prll ZG0VK6JIV8/FioNMfVNiLOK8B3WDee9lcpDfbLh7oh1xVm7BAQp14WDtQQ1G7XSQ XZ2coSjcge8NwyKxMVVipCHrn5cekcQxutF0vdFHfVzReJigNEQI4QiB8MGi4t4p svnPsUpLBiD4DoYRD2NoikJS52JVDMq53GNobsm9qOTq7hjQFzO6V4FwCwtsK3ta LJ5xd0mk6bp5vH5BJIBRlDEG4EIbd0U= -----END CERTIFICATE-----Generated at Mon Jun 30 04:32:46 2025 by rpki-client