$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa File: c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa (raw, json) Hash identifier: qQ1pi4HJnUkH6R96yQGL+5lcsDdCAdWKR9qtKE/SN1M= Subject key identifier: CA:AC:3E:10:F0:2D:19:72:65:97:B4:E1:0D:63:A1:78:BD:47:27:0C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA49304CFC1B60022255A0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 68.232.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:49:30:4c:fc:1b:60:02:22:55:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=36dba2ed-2d4d-4c80-bcbf-74119b6224fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:ce:e2:be:98:9a:97:7d:53:62:b5:eb:65: 68:f9:27:c0:81:a1:ec:1c:0e:41:72:cc:34:ed:e9: 93:ec:cd:69:ec:17:92:c6:f0:8e:c9:af:fe:7c:b5: 4b:b6:44:6d:d6:84:aa:a4:32:ec:2a:7a:37:b0:14: 36:63:92:fe:a7:59:86:7b:47:40:7a:56:ac:6f:c4: 20:fb:2d:42:80:74:15:94:72:41:6e:d7:c3:9a:06: 6e:bc:9e:5c:8d:d2:91:45:d9:45:5d:89:ed:ed:c3: 1f:92:ae:cb:64:33:77:1d:74:3e:e8:c8:cd:a0:00: 83:46:14:71:f1:38:7c:af:86:05:57:e2:46:79:46: 67:c1:6f:e4:06:4f:4c:50:f7:30:6e:32:47:1b:24: a5:75:02:1c:e1:19:dd:9f:35:b5:ba:a9:52:ae:45: af:3d:5b:13:16:66:79:ca:32:c2:73:1c:9c:c7:52: 5d:ed:c3:17:41:61:96:c1:6c:29:ff:88:3f:fa:08: 47:55:85:26:f1:77:e3:78:95:2d:96:16:aa:0a:6d: 90:7b:e4:56:46:50:da:ee:f3:e2:d9:61:cb:86:90: 1d:48:41:68:fb:6a:af:af:90:5c:bc:17:a3:8c:6c: 95:f7:cc:1f:da:e2:45:93:75:27:b7:96:f2:6e:c8: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:3E:10:F0:2D:19:72:65:97:B4:E1:0D:63:A1:78:BD:47:27:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:86:65:55:eb:85:35:a6:82:ff:69:e7:f2:44:59:a3:ce:60: a5:85:ad:b2:26:02:4b:b0:04:ac:d2:7c:4f:bd:71:ea:0e:0b: a9:88:07:83:1f:4f:63:12:6d:f5:92:a3:fe:59:90:c0:c9:8e: 62:54:c1:3d:b1:dd:58:00:91:6d:7a:bc:4c:08:e4:8d:1c:97: 0a:64:e0:b9:2e:39:1a:9d:53:df:6b:a5:50:13:19:65:8d:d3: 27:30:b1:14:3c:89:a7:ea:e5:7d:96:59:e9:b0:ef:ed:ca:d0: a3:9d:ff:3e:cc:9d:cd:b1:23:21:8d:80:96:3d:a8:11:2d:b7: cb:29:fc:fd:0d:e8:2a:4c:bb:b2:e0:11:cb:bf:ef:10:ab:ba: 35:4a:b3:86:a5:cd:69:b1:4c:8b:b3:85:3f:96:9f:0c:29:57: 79:fc:ed:8c:8b:a4:26:5a:db:76:89:5e:2d:25:9a:6a:9e:b1: 9c:23:96:ea:96:7f:21:a8:80:f1:c0:c6:4d:1b:9e:1f:c1:66: 20:cb:94:b2:dd:4a:f1:9d:f4:b4:70:61:c9:98:42:74:d5:d0: 8d:bd:bd:69:c7:bd:ee:01:c9:35:bc:5d:84:1c:83:23:ce:55: 3c:59:00:01:ce:06:07:b6:99:d9:ab:ee:e9:2b:44:29:ed:6e: d1:86:bd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kkwTPwbYAIiVaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzZkYmEyZWQtMmQ0ZC00YzgwLWJjYmYtNzQxMTliNjIyNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv27O4r6Ympd9U2K162Vo+SfAgaHsHA5Bcsw0 7emT7M1p7BeSxvCOya/+fLVLtkRt1oSqpDLsKno3sBQ2Y5L+p1mGe0dAelasb8Qg +y1CgHQVlHJBbtfDmgZuvJ5cjdKRRdlFXYnt7cMfkq7LZDN3HXQ+6MjNoACDRhRx 8Th8r4YFV+JGeUZnwW/kBk9MUPcwbjJHGySldQIc4RndnzW1uqlSrkWvPVsTFmZ5 yjLCcxycx1Jd7cMXQWGWwWwp/4g/+ghHVYUm8XfjeJUtlhaqCm2Qe+RWRlDa7vPi 2WHLhpAdSEFo+2qvr5BcvBejjGyV98wf2uJFk3Unt5bybshgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqsPhDwLRlyZZe04Q1joXi9RycMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzkwMmVhOTItZTFkZi0z ZmUwLWJmZTItOThmNjE4Nzg1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyGZVXrhTWmgv9p5/JEWaPOYKWFrbImAkuwBKzSfE+9ceoOC6mIB4Mf T2MSbfWSo/5ZkMDJjmJUwT2x3VgAkW16vEwI5I0clwpk4LkuORqdU99rpVATGWWN 0ycwsRQ8iafq5X2WWemw7+3K0KOd/z7Mnc2xIyGNgJY9qBEtt8sp/P0N6CpMu7Lg Ecu/7xCrujVKs4alzWmxTIuzhT+WnwwpV3n87YyLpCZa23aJXi0lmmqesZwjluqW fyGogPHAxk0bnh/BZiDLlLLdSvGd9LRwYcmYQnTV0I29vWnHve4ByTW8XYQcgyPO VTxZAAHOBge2mdmr7ukrRCntbtGGvTI= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:21 2026 by rpki-client