$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa File: 11afab10-f59c-313b-b25b-4dc592a25c6e.roa (raw, json) Hash identifier: HwoV56l/Ez9TUyBVFWztI+V2cZSh/Uf4bxAxA9Xv1go= Subject key identifier: A3:AA:CC:90:82:71:80:5D:8A:7D:3C:C3:20:2C:0E:D6:8B:6D:AE:0F Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CBDB2125D98840A23DD8FCC00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 30238 IP address blocks: 68.232.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:12:5d:98:84:0a:23:dd:8f:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=cb14cf84-1803-485d-ba0c-e9e049b8ce38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:2b:62:49:0f:55:66:14:27:56:a9:19:56: 72:48:9b:bb:2c:41:f9:8e:00:32:8a:ba:96:0c:d2: 6a:2b:3d:05:c8:22:76:06:f2:56:58:29:ca:22:60: 79:18:3d:3a:92:25:cc:e6:28:3e:c4:5e:fb:9a:e3: f8:c6:63:64:6f:fa:55:03:a8:d2:a9:ec:b8:50:47: 57:8e:ff:4c:a8:82:eb:e6:a1:4a:3c:62:0d:b8:c9: f9:c5:7f:4b:9e:15:7a:86:17:d7:25:52:0c:0b:84: 09:a4:05:16:9c:7e:24:05:1b:47:2e:46:f7:d2:b0: 53:5f:2e:ad:df:6b:d9:cf:a6:4d:48:2e:cb:99:fb: 5a:e5:59:a7:7d:d1:d3:7e:8c:5c:76:67:a0:9b:7f: 2c:fa:01:eb:ce:7b:c4:7a:0a:e8:e5:ca:7b:cd:a2: c2:7e:3a:6e:2b:1c:2b:97:fe:3e:a5:f7:25:1f:50: d3:32:da:67:df:03:21:3f:39:f6:57:83:eb:60:5d: 05:c1:cc:bf:7d:fe:22:c2:db:88:9f:c8:46:b4:b2: 6f:82:f8:d8:0f:9a:a7:f6:de:0c:aa:a5:bc:97:2e: c0:72:77:52:74:8e:12:bd:1e:1f:60:b6:27:df:03: af:2e:79:ff:22:01:cb:c8:ce:ba:4f:ac:04:9e:64: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AA:CC:90:82:71:80:5D:8A:7D:3C:C3:20:2C:0E:D6:8B:6D:AE:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/11afab10-f59c-313b-b25b-4dc592a25c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e1:00:b4:c2:4d:f3:6b:87:bc:67:4c:b1:2e:19:a3:65:01: 2a:7f:da:77:54:ad:1c:30:cc:6d:27:61:8d:09:f9:ad:24:d0: 50:47:7a:87:69:4c:28:e3:8c:fb:cd:c2:a4:25:30:b8:1b:78: d5:ac:05:e9:a5:df:c2:75:05:75:ab:ca:48:8e:f8:69:c4:7a: 04:52:82:a4:74:5d:dc:37:73:77:89:14:68:f8:df:fd:e1:f5: 36:7e:d0:fc:1f:ea:67:79:c2:c1:a8:47:3d:ba:8f:71:3b:10: a0:06:cf:bf:74:f6:e7:e8:d6:34:90:ef:09:2f:03:d6:5d:29: e3:08:91:50:ef:a9:33:73:b1:18:b2:15:ce:6a:e5:30:f0:ee: 7d:3f:3c:d5:65:26:42:30:ed:5a:df:dd:33:b3:a9:2a:4c:cf: e8:19:a8:18:f8:01:b0:b1:b3:ea:d5:77:1e:58:64:85:f9:4f: 20:d8:16:5d:6a:58:3d:41:06:bb:36:ea:ca:51:2c:0f:30:08: ae:83:86:cb:e0:2d:24:2d:e2:f2:27:58:8e:67:ca:d7:eb:45: 4a:f2:b1:9d:d2:93:68:a3:cf:74:fe:7e:e4:2f:9d:4b:11:7d: 74:2f:a3:01:3c:c3:4a:ee:7c:db:d4:ea:f4:3a:7d:1f:04:ca: 5d:57:f7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shJdmIQKI92PzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk Y2IxNGNmODQtMTgwMy00ODVkLWJhMGMtZTllMDQ5YjhjZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomorYkkPVWYUJ1apGVZySJu7LEH5jgAyirqW DNJqKz0FyCJ2BvJWWCnKImB5GD06kiXM5ig+xF77muP4xmNkb/pVA6jSqey4UEdX jv9MqILr5qFKPGINuMn5xX9LnhV6hhfXJVIMC4QJpAUWnH4kBRtHLkb30rBTXy6t 32vZz6ZNSC7Lmfta5VmnfdHTfoxcdmegm38s+gHrznvEegro5cp7zaLCfjpuKxwr l/4+pfclH1DTMtpn3wMhPzn2V4PrYF0Fwcy/ff4iwtuIn8hGtLJvgvjYD5qn9t4M qqW8ly7AcndSdI4SvR4fYLYn3wOvLnn/IgHLyM66T6wEnmR76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOqzJCCcYBdin08wyAsDtaLba4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTFhZmFiMTAtZjU5Yy0z MTNiLWIyNWItNGRjNTkyYTI1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACThALTCTfNrh7xnTLEuGaNlASp/2ndUrRwwzG0nYY0J+a0k0FBHeodp TCjjjPvNwqQlMLgbeNWsBeml38J1BXWrykiO+GnEegRSgqR0Xdw3c3eJFGj43/3h 9TZ+0Pwf6md5wsGoRz26j3E7EKAGz7909ufo1jSQ7wkvA9ZdKeMIkVDvqTNzsRiy Fc5q5TDw7n0/PNVlJkIw7Vrf3TOzqSpMz+gZqBj4AbCxs+rVdx5YZIX5TyDYFl1q WD1BBrs26spRLA8wCK6DhsvgLSQt4vInWI5nytfrRUrysZ3Sk2ijz3T+fuQvnUsR fXQvowE8w0rufNvU6vQ6fR8Eyl1X92c= -----END CERTIFICATE-----Generated at Mon Mar 2 18:29:35 2026 by rpki-client