$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ecfbe68b-eda9-3658-92ed-1508f14f297d.roa File: ecfbe68b-eda9-3658-92ed-1508f14f297d.roa (raw, json) Hash identifier: qggrLrxCyFbraKnRfRQRxkVSMBzB1mVi7T+PIovFUSQ= Subject key identifier: 3A:67:FB:D0:FA:E8:D0:21:1C:38:2B:08:E5:1F:7F:01:58:F4:5B:EE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D122DEE084FD7E3F280B00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ecfbe68b-eda9-3658-92ed-1508f14f297d.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 68.232.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:22:de:e0:84:fd:7e:3f:28:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=41772a07-43e3-4d2c-a68b-9f35c0cf4c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:55:cb:f3:06:0e:63:1c:f0:88:23:0f:9f:aa: 9a:ed:75:bf:dd:f2:f8:3b:23:d9:51:3b:7f:b0:67: e1:9c:ef:38:81:2e:07:9c:0d:79:b4:aa:5b:fd:fa: 15:44:b9:c5:23:4b:d6:4f:03:5c:66:d1:9f:55:f8: 02:f7:37:3a:7a:00:53:ad:b7:93:5c:7c:50:57:ff: 0c:6f:16:3c:45:f5:1a:0f:3c:fd:25:75:bc:85:62: 63:7e:ea:c3:15:2b:5b:cf:c3:27:3d:64:9e:fd:37: 3b:9d:84:f5:d5:e2:80:28:03:63:86:41:86:69:6f: 52:7d:d8:40:3b:e6:ef:e6:3f:f2:e4:64:6f:7f:c5: 77:53:9c:e6:9e:0e:62:be:30:3e:70:d8:3f:df:a5: b3:ef:89:f3:3f:43:70:0a:fa:54:6a:72:9e:01:81: 6f:ef:33:8c:44:de:85:30:9d:58:ea:fe:a0:ec:0b: 97:b8:bb:00:d4:f9:28:34:48:ee:04:23:c2:7f:df: 50:0e:a2:1c:c2:bf:90:f6:74:9a:3e:24:db:ee:69: 21:6c:99:b9:01:c1:d7:89:bf:78:0e:3f:0a:cd:cc: 62:00:8a:71:85:8e:a0:89:24:15:e2:76:dc:86:0e: b9:5e:50:23:1a:fe:02:ed:68:35:f8:b8:b5:32:80: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:FB:D0:FA:E8:D0:21:1C:38:2B:08:E5:1F:7F:01:58:F4:5B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ecfbe68b-eda9-3658-92ed-1508f14f297d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:99:b7:d5:75:8b:f5:9d:4d:79:5b:80:ca:85:53:7d:dc:f0: 70:f0:da:4c:0f:73:8d:66:50:78:78:a2:88:c2:ba:ce:dc:fa: d7:bc:7a:04:28:9a:b0:cd:11:81:a4:41:da:f9:df:e2:80:17: ea:be:b2:91:a4:78:04:f7:8c:ee:d7:59:d5:9c:d1:30:8c:92: a9:60:c2:ce:bf:f4:24:67:65:c6:4c:c8:82:9a:e7:9c:c9:d4: 23:65:e8:e7:b3:52:05:d2:45:be:db:f0:b2:dc:ad:4d:a2:41: 50:38:77:67:43:42:33:31:65:d3:c8:f6:08:8f:0c:43:42:b5: 6e:2b:c6:3c:b4:89:01:fa:5b:87:64:4f:4d:3e:32:bd:d1:a7: eb:0a:8c:45:fd:82:57:38:6d:3a:21:50:e6:0c:10:5a:58:95: 0e:23:36:64:52:da:07:e0:aa:7b:aa:51:24:2e:e0:9b:a9:63: 43:03:e9:00:f8:5c:26:75:db:7a:25:bd:af:7c:4a:44:06:b1: 58:f0:ed:78:02:9f:f7:46:e3:6a:8c:a4:3f:93:6c:f4:47:c5: 91:e3:6d:bd:15:cc:e8:6c:75:1b:52:3b:d0:c4:5f:4a:9d:e1: eb:6f:5f:b6:7c:3f:95:60:9d:16:3d:d2:d5:b7:49:b2:4d:86: 53:c6:b7:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SLe4IT9fj8oCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NDE3NzJhMDctNDNlMy00ZDJjLWE2OGItOWYzNWMwY2Y0YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVXL8wYOYxzwiCMPn6qa7XW/3fL4OyPZUTt/ sGfhnO84gS4HnA15tKpb/foVRLnFI0vWTwNcZtGfVfgC9zc6egBTrbeTXHxQV/8M bxY8RfUaDzz9JXW8hWJjfurDFStbz8MnPWSe/Tc7nYT11eKAKANjhkGGaW9SfdhA O+bv5j/y5GRvf8V3U5zmng5ivjA+cNg/36Wz74nzP0NwCvpUanKeAYFv7zOMRN6F MJ1Y6v6g7AuXuLsA1PkoNEjuBCPCf99QDqIcwr+Q9nSaPiTb7mkhbJm5AcHXib94 Dj8KzcxiAIpxhY6giSQV4nbchg65XlAjGv4C7Wg1+Li1MoCoxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpn+9D66NAhHDgrCOUffwFY9FvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZWNmYmU2OGItZWRhOS0z NjU4LTkyZWQtMTUwOGYxNGYyOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWZt9V1i/WdTXlbgMqFU33c8HDw2kwPc41mUHh4oojCus7c+te8egQo mrDNEYGkQdr53+KAF+q+spGkeAT3jO7XWdWc0TCMkqlgws6/9CRnZcZMyIKa55zJ 1CNl6OezUgXSRb7b8LLcrU2iQVA4d2dDQjMxZdPI9giPDENCtW4rxjy0iQH6W4dk T00+Mr3Rp+sKjEX9glc4bTohUOYMEFpYlQ4jNmRS2gfgqnuqUSQu4JupY0MD6QD4 XCZ123olva98SkQGsVjw7XgCn/dG42qMpD+TbPRHxZHjbb0VzOhsdRtSO9DEX0qd 4etvX7Z8P5VgnRY90tW3SbJNhlPGt5Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:27 2025 by rpki-client