$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa File: c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa (raw, json) Hash identifier: IKaijqW11mp8LIpZQNLBcc873yVqhydAYPMWx1U/cRs= Subject key identifier: CC:2F:C9:87:B8:AE:46:23:0C:A1:7E:4E:0F:2D:B4:2F:9D:FC:45:12 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E78599F3AE6735740D9D80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 68.232.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:99:f3:ae:67:35:74:0d:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=09a3676d-e66c-409e-88b3-d24a8d2a44ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:a2:bf:5d:13:c6:13:a5:be:2f:d7:31:4c: e3:07:2b:d5:4b:a6:a7:e4:e7:f8:03:38:16:39:39: 4c:6c:d9:3b:0a:51:0e:6b:9c:ea:a6:2a:ab:b1:c0: c5:f3:de:57:b1:2d:59:57:f2:67:32:32:bb:a6:c4: 44:6a:e0:0a:3a:20:84:59:fe:e0:75:42:74:88:cd: e8:3b:a0:91:f0:dc:67:e4:ac:1e:5e:df:5e:0b:0f: a6:f3:c3:be:b2:83:d1:55:9e:ad:36:3e:05:16:c9: f5:a4:90:49:36:29:c3:03:a1:6d:77:cb:7b:96:4d: 8d:2b:4f:37:17:5c:e2:e1:cd:3a:ab:7f:67:98:f4: 62:d2:1a:21:f1:41:20:46:61:2c:60:7a:a8:91:af: 3f:a9:9e:d7:47:72:cf:27:a9:74:95:18:8d:0f:22: 05:99:b7:9c:02:a1:cb:20:0f:6f:de:e0:81:95:cc: ef:45:b5:f7:9d:72:62:ff:b9:35:b7:94:de:bd:5e: 97:bc:6c:08:97:11:f3:66:1d:17:35:79:89:fe:32: c5:24:52:7d:6b:64:7e:f4:d8:0b:c8:11:14:ec:20: 1d:91:04:bd:18:d5:87:b0:41:ef:84:ad:59:33:1d: df:65:e9:ea:f5:26:20:82:60:54:67:b8:c3:a8:f1: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2F:C9:87:B8:AE:46:23:0C:A1:7E:4E:0F:2D:B4:2F:9D:FC:45:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:88:02:c7:ec:16:ea:bc:48:ec:2b:b7:8e:66:2d:f4:d0:77: 62:53:22:c2:30:be:8f:26:60:ee:ad:35:d1:d4:bf:54:13:50: d6:08:b0:b8:86:69:04:72:e0:22:7e:41:65:46:fb:c7:50:8b: 88:ab:e3:f3:ed:38:51:8a:08:d1:19:28:57:b0:70:fa:5a:96: 37:9b:e2:ad:47:17:76:41:7c:7c:56:b5:66:76:cb:3b:65:e9: 1e:e4:31:f5:c3:13:00:57:71:f2:07:45:58:15:25:6e:2e:17: 4d:49:c6:7f:46:2c:52:7f:5e:cc:35:14:56:79:a6:bb:02:20: e5:8d:04:54:31:36:4b:7c:d9:6b:f5:c9:1a:2f:96:aa:24:7d: 7d:b3:24:da:f4:25:0e:88:00:23:f6:8c:dd:ac:b1:e9:aa:f9: 58:46:87:1f:01:12:6b:00:cb:9f:1a:0e:23:59:28:74:4b:c8: 73:c6:5e:e5:b0:f5:83:06:d5:ae:fc:37:05:ec:38:20:25:ea: 0e:e3:99:79:94:53:1a:12:e5:10:a0:44:1f:0e:37:c3:e7:6f: e1:7c:16:95:70:21:ef:cd:eb:23:2a:f6:20:13:3f:6f:10:3c: 81:e8:dc:12:d3:7e:fb:ac:c5:28:bc:64:8f:0d:16:b9:c6:f5: b9:41:31:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54WZ865nNXQNnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDlhMzY3NmQtZTY2Yy00MDllLTg4YjMtZDI0YThkMmE0NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNKiv10TxhOlvi/XMUzjByvVS6an5Of4AzgW OTlMbNk7ClEOa5zqpiqrscDF895XsS1ZV/JnMjK7psREauAKOiCEWf7gdUJ0iM3o O6CR8Nxn5KweXt9eCw+m88O+soPRVZ6tNj4FFsn1pJBJNinDA6Ftd8t7lk2NK083 F1zi4c06q39nmPRi0hoh8UEgRmEsYHqoka8/qZ7XR3LPJ6l0lRiNDyIFmbecAqHL IA9v3uCBlczvRbX3nXJi/7k1t5TevV6XvGwIlxHzZh0XNXmJ/jLFJFJ9a2R+9NgL yBEU7CAdkQS9GNWHsEHvhK1ZMx3fZenq9SYggmBUZ7jDqPHpJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwvyYe4rkYjDKF+Tg8ttC+d/EUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzkwMmVhOTItZTFkZi0z ZmUwLWJmZTItOThmNjE4Nzg1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2IAsfsFuq8SOwrt45mLfTQd2JTIsIwvo8mYO6tNdHUv1QTUNYIsLiG aQRy4CJ+QWVG+8dQi4ir4/PtOFGKCNEZKFewcPpaljeb4q1HF3ZBfHxWtWZ2yztl 6R7kMfXDEwBXcfIHRVgVJW4uF01Jxn9GLFJ/Xsw1FFZ5prsCIOWNBFQxNkt82Wv1 yRovlqokfX2zJNr0JQ6IACP2jN2ssemq+VhGhx8BEmsAy58aDiNZKHRLyHPGXuWw 9YMG1a78NwXsOCAl6g7jmXmUUxoS5RCgRB8ON8Pnb+F8FpVwIe/N6yMq9iATP28Q PIHo3BLTfvusxSi8ZI8NFrnG9blBMZo= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:41 2025 by rpki-client