$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa File: f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa (raw, json) Hash identifier: NW3yEJIVQ+J+9ukSQGQwxQ8rovng7NeDvgRS/OUyJ+0= Subject key identifier: AD:37:C9:4A:02:6E:39:A0:14:14:CC:30:DD:F5:35:30:B1:57:68:7B Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E78550C8D007E974749C80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 68.232.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:50:c8:d0:07:e9:74:74:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=827542ff-5170-41f1-96e6-84e8afaf971c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:0e:5f:87:40:c4:4a:f3:e9:95:07:f7:06: 8d:cf:0c:cc:5b:fd:59:5e:65:f7:be:4d:a6:a9:92: 27:95:18:e3:0c:a6:a8:ac:b2:8a:cc:8d:2f:85:fb: ee:0f:0b:df:5a:c0:3d:b2:9a:02:d4:a0:93:b7:a0: 3d:85:d4:01:5b:ec:42:62:f0:f1:3c:50:7d:54:4a: 95:98:d1:67:cc:1a:61:67:4d:3e:9a:36:ab:00:42: 6b:5b:f7:71:85:cb:22:5a:b1:34:f3:5f:8c:1d:8d: 19:bc:37:7a:93:3f:d8:00:94:37:98:57:6a:67:3c: a5:29:a3:14:45:48:07:39:10:d9:01:b2:dd:29:15: f1:0f:da:33:31:ac:cf:10:1f:86:ec:a8:aa:0b:f5: d2:3e:6f:f1:f4:b3:aa:f9:df:67:70:63:cd:fb:66: 6f:42:97:88:c0:e7:29:53:f3:e7:93:de:d6:43:a0: af:77:35:13:53:c1:e7:35:86:58:f7:14:80:7a:c0: 0a:30:a6:71:e1:e1:c7:08:25:54:bb:11:68:1d:70: 78:0f:9e:a2:33:1c:11:71:02:05:c3:22:9a:f2:fc: 94:c7:5a:0d:4f:d4:4e:ee:5b:38:9f:cf:8b:c2:9d: 0d:81:26:fe:97:4a:2c:79:5b:11:47:29:87:b9:62: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:C9:4A:02:6E:39:A0:14:14:CC:30:DD:F5:35:30:B1:57:68:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f62ed1ac-6d22-33ee-b46b-077e1d87adaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:af:0e:54:47:43:41:46:4d:50:36:f8:02:e3:37:24:0e:73: 70:08:01:71:9f:06:b0:e3:66:98:c3:d2:d3:97:83:d4:d6:c5: cc:c3:33:75:b1:0c:a5:55:d4:4f:b8:dd:94:10:50:b6:8d:45: 0d:24:5e:20:6c:6c:7e:68:44:22:22:b2:85:60:ac:d7:7c:95: 88:5e:45:5f:bf:67:ae:74:59:fd:39:4d:b4:17:55:f5:9f:f2: ef:59:b9:54:b2:a4:77:b3:b3:7b:43:84:61:21:2f:db:36:ed: 17:0a:6e:28:d6:d5:16:b6:9b:bf:bb:b0:ec:4b:5e:91:7c:8c: 80:1a:5e:e3:11:12:40:19:f3:87:1d:fe:ec:c6:ea:43:e8:8f: 41:c8:63:4d:71:aa:dd:d9:56:35:bd:06:64:16:60:0b:af:12: 70:9f:eb:67:a7:96:d6:30:4f:ca:65:ea:ea:69:4a:40:5d:9e: 19:cc:b5:20:21:2e:65:c1:70:8d:ae:6c:9a:dc:15:97:84:31: 01:eb:cc:83:4d:2a:f7:0d:0d:3f:64:08:c1:1d:da:30:b2:03: e4:40:6e:20:63:af:24:3c:38:2d:6a:9e:c2:00:65:1b:17:e4: 67:98:cb:aa:95:f8:59:1b:64:12:68:52:5a:8b:94:68:25:9e: 74:e6:a1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54VQyNAH6XR0nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODI3NTQyZmYtNTE3MC00MWYxLTk2ZTYtODRlOGFmYWY5NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUgOX4dAxErz6ZUH9waNzwzMW/1ZXmX3vk2m qZInlRjjDKaorLKKzI0vhfvuDwvfWsA9spoC1KCTt6A9hdQBW+xCYvDxPFB9VEqV mNFnzBphZ00+mjarAEJrW/dxhcsiWrE081+MHY0ZvDd6kz/YAJQ3mFdqZzylKaMU RUgHORDZAbLdKRXxD9ozMazPEB+G7KiqC/XSPm/x9LOq+d9ncGPN+2ZvQpeIwOcp U/Pnk97WQ6CvdzUTU8HnNYZY9xSAesAKMKZx4eHHCCVUuxFoHXB4D56iMxwRcQIF wyKa8vyUx1oNT9RO7ls4n8+Lwp0NgSb+l0oseVsRRymHuWJJaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK03yUoCbjmgFBTMMN31NTCxV2h7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZjYyZWQxYWMtNmQyMi0z M2VlLWI0NmItMDc3ZTFkODdhZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOvDlRHQ0FGTVA2+ALjNyQOc3AIAXGfBrDjZpjD0tOXg9TWxczDM3Wx DKVV1E+43ZQQULaNRQ0kXiBsbH5oRCIisoVgrNd8lYheRV+/Z650Wf05TbQXVfWf 8u9ZuVSypHezs3tDhGEhL9s27RcKbijW1Ra2m7+7sOxLXpF8jIAaXuMREkAZ84cd /uzG6kPoj0HIY01xqt3ZVjW9BmQWYAuvEnCf62enltYwT8pl6uppSkBdnhnMtSAh LmXBcI2ubJrcFZeEMQHrzINNKvcNDT9kCMEd2jCyA+RAbiBjryQ8OC1qnsIAZRsX 5GeYy6qV+FkbZBJoUlqLlGglnnTmoco= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:04 2025 by rpki-client