$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa File: a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa (raw, json) Hash identifier: LbBKVkGXHaQjZHQYj6VVcANCslRczk5F2f0q4F3Q5p4= Subject key identifier: 1A:9D:B2:57:3B:6F:0A:54:39:C2:45:D8:AA:FD:13:22:B1:08:36:7C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC146D16C56DAFB88235F80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 68.232.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:d1:6c:56:da:fb:88:23:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=967110c8-56b1-438d-9674-b017684388c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:5b:92:41:10:66:01:4f:98:72:df:2a:59: f1:5a:d5:d7:78:b0:ff:d1:bc:21:b0:3c:1d:82:0d: 13:68:09:29:91:0a:3b:f1:13:c2:21:96:a3:a3:19: d8:03:ab:be:9e:e7:c9:1a:e5:7e:ad:d5:b3:d4:85: cd:e8:71:db:0e:68:ed:ca:2b:f7:27:e1:68:b0:6e: 9c:45:eb:25:16:5d:cf:3f:e4:72:b6:af:9a:0f:7f: 0d:ac:8c:5d:fa:47:12:c7:3a:b4:d3:c5:72:78:00: 74:83:9c:18:96:42:1f:28:1b:c5:23:37:d2:70:0b: 0b:53:24:33:61:32:c0:c0:f7:8b:11:7d:7b:9e:c1: 69:68:a9:0b:42:d4:2c:40:0d:53:a1:04:fa:35:d8: f1:dc:68:ec:db:a5:18:5e:2f:bb:98:c0:ef:76:89: 80:39:6c:56:d5:d9:c2:6e:a4:37:db:9c:15:71:97: f6:21:aa:54:ff:63:4f:90:8b:2d:6e:6d:59:33:58: 8d:a2:38:6d:eb:90:96:7a:df:e4:12:2b:3f:fc:74: d0:40:e6:80:ad:e3:89:8c:a5:3c:45:a4:4f:78:a9: 7b:c6:28:97:00:2a:18:1b:97:48:46:b2:ce:f2:a5: 6b:d3:f4:d0:fd:80:d0:e7:1e:3c:3a:d3:68:fb:90: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:B2:57:3B:6F:0A:54:39:C2:45:D8:AA:FD:13:22:B1:08:36:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:06:e4:36:6a:76:53:d6:17:23:78:3e:52:dd:fe:78:20:6f: bf:01:53:f3:32:84:7a:3f:ea:bf:68:c1:4c:7f:c5:c4:65:5b: f2:eb:73:12:e3:cd:61:e1:83:76:e0:20:ae:4f:34:02:bd:3c: 9e:14:34:02:34:45:04:80:6e:db:d8:43:5c:92:84:90:b4:a5: 1a:bd:a0:49:4b:91:01:a4:44:9a:6f:49:84:ea:0b:37:b2:5b: 87:a3:4b:de:8f:6c:25:3a:54:83:11:5a:70:fa:f3:26:01:8c: 81:43:ea:08:62:48:52:81:0d:05:44:1e:0a:19:0a:fc:f3:c0: e5:cf:7e:cc:8a:a6:d1:39:e7:22:09:8f:34:31:93:3c:90:5a: 82:a3:23:61:8d:58:4a:0e:b6:d1:86:a9:6c:77:b7:29:4e:25: b5:e4:e8:e4:1d:94:b4:5f:88:0f:8e:6e:ff:38:b7:94:3b:bf: 8f:e0:dc:87:f0:39:33:a6:31:24:b8:5c:2c:c9:ca:fd:76:77: 08:27:22:e5:ad:ea:de:b4:0a:91:1b:00:2e:92:b6:12:e7:1f: 05:1f:a6:79:59:32:b8:58:21:1b:08:39:36:5c:d0:53:83:e4: 95:68:84:67:2c:05:df:41:6c:59:c6:1e:28:23:be:fb:8f:cb: d7:23:56:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUbRbFba+4gjX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTY3MTEwYzgtNTZiMS00MzhkLTk2NzQtYjAxNzY4NDM4OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4hbkkEQZgFPmHLfKlnxWtXXeLD/0bwhsDwd gg0TaAkpkQo78RPCIZajoxnYA6u+nufJGuV+rdWz1IXN6HHbDmjtyiv3J+FosG6c ReslFl3PP+Rytq+aD38NrIxd+kcSxzq008VyeAB0g5wYlkIfKBvFIzfScAsLUyQz YTLAwPeLEX17nsFpaKkLQtQsQA1ToQT6Ndjx3Gjs26UYXi+7mMDvdomAOWxW1dnC bqQ325wVcZf2IapU/2NPkIstbm1ZM1iNojht65CWet/kEis//HTQQOaAreOJjKU8 RaRPeKl7xiiXACoYG5dIRrLO8qVr0/TQ/YDQ5x48OtNo+5BFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqdslc7bwpUOcJF2Kr9EyKxCDZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTZhYTdjM2UtZjE5Ni0z ZmQ0LWIzNmYtYzUwMTIyYzZjNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROifMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoG5DZqdlPWFyN4PlLd/nggb78BU/MyhHo/6r9owUx/xcRlW/LrcxLj zWHhg3bgIK5PNAK9PJ4UNAI0RQSAbtvYQ1yShJC0pRq9oElLkQGkRJpvSYTqCzey W4ejS96PbCU6VIMRWnD68yYBjIFD6ghiSFKBDQVEHgoZCvzzwOXPfsyKptE55yIJ jzQxkzyQWoKjI2GNWEoOttGGqWx3tylOJbXk6OQdlLRfiA+Obv84t5Q7v4/g3Ifw OTOmMSS4XCzJyv12dwgnIuWt6t60CpEbAC6SthLnHwUfpnlZMrhYIRsIOTZc0FOD 5JVohGcsBd9BbFnGHigjvvuPy9cjVig= -----END CERTIFICATE-----Generated at Sun Aug 24 06:00:44 2025 by rpki-client