$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa File: 2facff71-9840-3679-b83b-43e50bddf021.roa (raw, json) Hash identifier: +cNAoI2GkRW5RQ1EHehMIfSReUvHZjTXL2kzLnM/cAA= Subject key identifier: 71:08:87:75:0A:C9:AA:DC:86:27:52:B1:6E:88:A4:D6:47:CF:08:B2 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF587A0000C5C770A97A64480 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 68.232.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:a0:00:0c:5c:77:0a:97:a6:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=0c8620f4-ed86-42f6-97f7-3dfcd66bd71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:05:6c:a1:a2:67:63:ed:05:0b:42:5b:06: 2f:25:30:f8:2b:ac:d3:88:19:3d:82:34:79:d9:5d: 82:be:7f:85:20:38:fd:97:89:52:a3:ce:fb:73:4c: e6:bc:05:ef:29:5b:87:7b:e0:fb:6c:41:d3:ff:6a: c2:51:f1:1b:02:3d:6f:ec:70:cc:6f:0f:7e:a8:74: 29:f9:76:71:bf:8d:89:af:dc:53:0a:0d:da:26:86: 86:53:0b:ec:9c:d1:9f:73:f7:53:ab:a6:76:28:92: 7c:85:0b:17:63:ea:70:f7:b3:46:03:c4:93:79:cc: de:81:54:4b:52:6c:4f:ac:37:65:2a:f1:84:13:ce: e8:a9:25:2c:cd:2d:9b:a3:44:4a:c8:2a:c6:5f:f8: 53:79:b7:64:da:1b:66:52:fc:3d:9b:ff:cc:01:f6: bb:e0:f0:69:08:06:55:b6:28:b1:c3:64:f9:5c:97: ee:ad:c1:e3:eb:d5:f6:f5:61:fb:88:89:16:11:a9: f9:1a:71:75:81:7e:2f:bd:cc:b1:a4:a3:52:ae:2e: af:a6:f6:a9:30:82:c0:f6:95:db:e3:86:13:eb:7c: a0:fe:81:73:60:ec:0c:fd:9f:6f:4c:48:36:31:c6: 49:93:31:04:44:4f:f9:88:54:d1:70:de:85:61:4e: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:08:87:75:0A:C9:AA:DC:86:27:52:B1:6E:88:A4:D6:47:CF:08:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/2facff71-9840-3679-b83b-43e50bddf021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b2:00:d2:c3:04:b4:cd:0d:06:66:15:e4:3c:37:0a:7e:0a: 96:40:34:13:4a:24:3c:e7:3b:ed:62:e9:79:7b:e2:84:50:d2: 81:1f:5a:f2:dd:17:30:0b:6e:46:06:34:4f:cf:79:a2:51:df: dd:f1:df:73:4d:d8:c8:9a:47:97:98:5e:9c:9c:d2:52:43:fb: 2a:3b:89:5d:db:6b:8d:a7:f3:c5:41:b4:3d:ce:9b:86:63:42: 6d:b1:41:61:9e:2f:40:73:cf:93:dc:fb:5d:ba:9c:95:ba:6b: c6:ed:f0:e6:5c:df:db:01:60:77:f9:92:50:84:7a:bf:01:f3: 3a:f7:ab:4a:ca:48:91:b0:77:b2:1c:2f:39:63:8b:bd:04:a8: 31:e1:dc:2d:a4:f5:0d:66:4b:a9:47:e8:03:25:28:d5:0a:67: 57:bb:ca:ec:af:63:93:17:cb:5c:48:fc:a1:75:4f:b7:95:07: d0:a6:bd:67:a9:5f:6c:c2:ec:9f:10:c5:ca:1a:34:6c:b3:71: 8f:52:e8:df:16:2f:37:19:bb:a3:41:54:50:b4:46:7b:ba:36: 86:50:ba:aa:79:0b:c2:82:23:90:71:e3:4e:98:a1:50:32:d0: bf:8d:72:67:92:97:0e:17:a9:f7:06:48:7d:24:20:14:89:7f: 88:79:3e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h6AADFx3CpemRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MGM4NjIwZjQtZWQ4Ni00MmY2LTk3ZjctM2RmY2Q2NmJkNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt8FbKGiZ2PtBQtCWwYvJTD4K6zTiBk9gjR5 2V2Cvn+FIDj9l4lSo877c0zmvAXvKVuHe+D7bEHT/2rCUfEbAj1v7HDMbw9+qHQp +XZxv42Jr9xTCg3aJoaGUwvsnNGfc/dTq6Z2KJJ8hQsXY+pw97NGA8STeczegVRL UmxPrDdlKvGEE87oqSUszS2bo0RKyCrGX/hTebdk2htmUvw9m//MAfa74PBpCAZV tiixw2T5XJfurcHj69X29WH7iIkWEan5GnF1gX4vvcyxpKNSri6vpvapMILA9pXb 44YT63yg/oFzYOwM/Z9vTEg2McZJkzEERE/5iFTRcN6FYU49NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEIh3UKyarchidSsW6IpNZHzwiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMmZhY2ZmNzEtOTg0MC0z Njc5LWI4M2ItNDNlNTBiZGRmMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6yANLDBLTNDQZmFeQ8Nwp+CpZANBNKJDznO+1i6Xl74oRQ0oEfWvLd FzALbkYGNE/PeaJR393x33NN2MiaR5eYXpyc0lJD+yo7iV3ba42n88VBtD3Om4Zj Qm2xQWGeL0Bzz5Pc+126nJW6a8bt8OZc39sBYHf5klCEer8B8zr3q0rKSJGwd7Ic Lzlji70EqDHh3C2k9Q1mS6lH6AMlKNUKZ1e7yuyvY5MXy1xI/KF1T7eVB9CmvWep X2zC7J8QxcoaNGyzcY9S6N8WLzcZu6NBVFC0Rnu6NoZQuqp5C8KCI5Bx406YoVAy 0L+NcmeSlw4XqfcGSH0kIBSJf4h5PlA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:05 2026 by rpki-client