$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cc7e0370-8f2b-3e65-8b39-e2dc56681ea3.roa File: cc7e0370-8f2b-3e65-8b39-e2dc56681ea3.roa (raw, json) Hash identifier: jjefs6Zegl6w6eMi26DR9elsjgLQS2AMHwWQUy2HtiM= Subject key identifier: 5E:32:00:36:23:04:3D:31:D4:61:FD:E7:5D:2C:08:45:75:D7:20:CB Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA48B5C88420DD57AC6020 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cc7e0370-8f2b-3e65-8b39-e2dc56681ea3.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 68.232.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:48:b5:c8:84:20:dd:57:ac:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3ca1db13-26ff-4561-aaf8-cafed04828d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:c8:7b:e4:4c:c8:a2:bc:a7:fe:65:f5:93: 1b:d3:31:c9:62:19:3c:c3:a2:bf:ff:28:67:0e:82: 7f:8b:6f:5d:44:1c:c9:ec:22:ee:3a:1a:70:00:dc: a9:e1:47:e5:da:aa:7e:d4:a3:0b:b6:ad:bd:21:91: b5:be:cf:44:51:1f:0e:c9:ef:61:b1:0c:0c:d4:02: 3c:de:6f:eb:cb:af:b1:f6:d7:80:b2:82:64:bc:f9: b6:72:ac:7a:04:ff:c6:09:ac:dd:f1:c0:ac:3f:d9: a5:f8:f4:03:ba:19:d4:0e:fd:3e:d0:ec:f8:c7:35: 51:cd:53:41:c3:72:dd:be:71:e9:c4:a0:87:e6:f5: 2b:d7:8f:20:b8:e3:cb:d0:1c:09:4e:dd:f5:d0:00: 05:1b:64:f9:44:92:2a:cf:d8:ab:00:b0:2d:18:1f: ca:b6:b1:09:8a:0f:f0:e3:38:4c:24:ba:6f:e3:ff: 3f:df:e5:b7:54:8b:27:e0:b6:11:26:ec:da:fe:b4: b3:5e:2c:64:f7:00:dd:7e:aa:9b:6d:3a:04:b3:53: 2b:3e:19:78:ca:83:21:5a:5a:f5:ff:5e:38:e0:f1: b0:21:cd:43:7b:b7:a9:29:ec:25:d3:17:58:fb:a8: 68:dc:f6:2e:ba:a7:1b:7a:7a:01:52:14:60:ff:12: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:00:36:23:04:3D:31:D4:61:FD:E7:5D:2C:08:45:75:D7:20:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cc7e0370-8f2b-3e65-8b39-e2dc56681ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:60:db:8c:80:9e:ae:4c:e9:73:43:d1:89:98:5c:06:ca:a3: 78:2e:f9:d6:53:96:b9:d5:48:2c:bc:5c:8d:ac:49:9f:18:6e: 2b:ec:e2:d5:2e:fb:97:f2:27:04:ea:34:9f:79:01:8f:69:d3: 44:75:f3:d6:36:8a:c2:2a:d3:52:2a:10:f1:70:cc:93:28:47: 2a:53:90:9d:4f:76:b4:80:7a:3f:4b:36:5f:20:2f:b4:f7:dd: 84:4c:08:c7:2f:c3:fb:cb:59:d5:1f:12:69:3e:e4:04:c7:44: f7:e1:08:c6:51:0a:43:4c:2a:b6:cc:56:e9:72:87:e9:87:a8: cf:70:f7:22:63:69:0a:b1:39:d0:a3:c9:d3:80:d8:01:a6:03: bf:ba:5d:54:57:f1:d6:d7:f5:8c:0e:d5:ba:20:c0:58:fb:20: b4:97:30:5c:0e:95:14:49:9d:b4:f5:8a:26:99:58:5f:06:85: 59:29:85:2e:6d:a4:3a:0c:ea:df:83:2f:b9:a8:1b:b9:84:41: a1:6d:6a:0d:65:6a:71:5b:95:aa:65:b3:7d:94:9a:61:ee:05: 50:78:85:da:5d:a5:df:04:d7:53:a4:52:b2:8d:af:35:7a:83: d2:34:1e:ad:43:44:1c:8a:77:8a:26:23:f4:b7:3f:b4:29:94: 2b:47:d9:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+ki1yIQg3VesYCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk M2NhMWRiMTMtMjZmZi00NTYxLWFhZjgtY2FmZWQwNDgyOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3jIe+RMyKK8p/5l9ZMb0zHJYhk8w6K//yhn DoJ/i29dRBzJ7CLuOhpwANyp4Ufl2qp+1KMLtq29IZG1vs9EUR8Oye9hsQwM1AI8 3m/ry6+x9teAsoJkvPm2cqx6BP/GCazd8cCsP9ml+PQDuhnUDv0+0Oz4xzVRzVNB w3LdvnHpxKCH5vUr148guOPL0BwJTt310AAFG2T5RJIqz9irALAtGB/KtrEJig/w 4zhMJLpv4/8/3+W3VIsn4LYRJuza/rSzXixk9wDdfqqbbToEs1MrPhl4yoMhWlr1 /1444PGwIc1De7epKewl0xdY+6ho3PYuuqcbenoBUhRg/xItuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4yADYjBD0x1GH9510sCEV11yDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2M3ZTAzNzAtOGYyYi0z ZTY1LThiMzktZTJkYzU2NjgxZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVg24yAnq5M6XND0YmYXAbKo3gu+dZTlrnVSCy8XI2sSZ8Ybivs4tUu +5fyJwTqNJ95AY9p00R189Y2isIq01IqEPFwzJMoRypTkJ1PdrSAej9LNl8gL7T3 3YRMCMcvw/vLWdUfEmk+5ATHRPfhCMZRCkNMKrbMVulyh+mHqM9w9yJjaQqxOdCj ydOA2AGmA7+6XVRX8dbX9YwO1bogwFj7ILSXMFwOlRRJnbT1iiaZWF8GhVkphS5t pDoM6t+DL7moG7mEQaFtag1lanFblapls32UmmHuBVB4hdpdpd8E11OkUrKNrzV6 g9I0Hq1DRByKd4omI/S3P7QplCtH2R8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:18 2026 by rpki-client