$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa File: 38cab474-b5b6-3345-8e24-1fb8e962b03e.roa (raw, json) Hash identifier: jL+b09XF3QyB3B9ARQo7/CqYK5+864aXwVNQkDR5x/g= Subject key identifier: BB:B4:74:A5:48:FD:90:F6:A7:1A:0D:C2:CD:31:D3:B8:7B:0A:F6:37 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F49733CDFDDBA42631894C540 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16417 IP address blocks: 68.232.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3c:df:dd:ba:42:63:18:94:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=088b67ea-9565-43e7-9217-a57f731a3d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:75:8f:cb:41:1a:d8:50:9b:50:10:43:6f: ab:5c:d2:32:56:a3:99:96:09:9e:45:5d:c7:06:8b: 13:72:3a:30:6c:b0:37:b8:d6:9d:df:40:34:60:b8: 71:46:53:fa:ad:a7:54:24:09:e4:b5:ce:08:0b:05: 41:9e:36:9d:99:91:39:7f:62:8d:c6:47:04:ad:0c: de:8e:cc:0a:1a:99:d3:d8:d5:13:ab:fd:72:a6:6a: 03:d9:64:06:fd:34:7e:f5:68:fc:41:5c:7c:e7:86: 65:32:c3:0e:f2:aa:7a:10:c4:69:c9:b8:6b:30:ed: 3d:cf:29:bd:cd:a2:c9:d7:54:8f:6a:bc:ac:5a:02: f0:4f:9a:3e:82:88:7c:de:11:59:65:f0:dc:ef:10: d7:7c:02:00:29:49:7f:e3:c5:0e:96:eb:74:e8:16: 64:49:6d:d0:a7:a2:74:47:66:ab:4b:c0:16:03:a6: 04:b9:96:5f:8f:4b:67:b0:42:45:2d:a6:98:6d:6c: 5f:4c:4e:20:ab:bb:15:5d:f1:a2:aa:90:c2:51:1a: 47:ad:31:92:61:ec:a7:62:13:00:ba:b1:14:21:85: 3d:59:87:d3:3f:cf:ca:1b:9f:66:35:0d:74:a1:d5: 7e:31:a0:84:72:a7:0d:95:fa:53:fc:44:0c:4a:e4: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:74:A5:48:FD:90:F6:A7:1A:0D:C2:CD:31:D3:B8:7B:0A:F6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:39:96:13:e1:47:5a:93:a0:15:44:ba:8e:1f:7c:09:51:98: 67:35:2b:e8:35:6d:ed:67:02:b7:9b:b4:cf:cd:14:19:0c:13: 54:7a:4c:85:ca:74:62:16:28:93:e5:5f:16:50:0e:1e:0e:fb: c7:c4:2f:15:54:ae:d7:e0:13:55:ea:d6:eb:18:4b:29:5a:23: 5f:bf:22:a7:21:f2:80:f0:91:be:a3:f1:c3:6a:cd:ad:ec:31: 30:dd:14:6e:e7:05:c6:7d:1a:eb:db:4f:6f:06:84:4f:88:43: 3a:d8:5b:f8:38:6b:3e:2f:f6:e8:22:90:f0:58:b2:34:eb:56: 58:b5:5b:27:0e:c6:19:6f:7a:84:e4:a6:ee:61:51:03:13:f5: 39:87:d5:c6:b0:9d:0e:2d:5c:4e:ac:92:f7:b2:ad:1c:ca:2e: d5:03:91:38:04:0e:d5:d4:db:83:00:8e:d0:f4:f8:04:84:c3: a5:fe:39:11:0b:7e:ef:4d:79:57:06:37:3b:c3:8d:ce:0f:4f: 95:72:ac:e4:80:7d:c1:80:e1:b4:0b:28:1e:78:fa:4f:b7:c6: e6:4c:e6:4f:e8:75:71:d1:63:a4:7c:52:50:ef:84:30:e1:a8: ad:fe:04:09:84:44:77:43:47:fa:dc:92:fc:6a:84:44:22:f8: 31:4d:76:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jczzf3bpCYxiUxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDg4YjY3ZWEtOTU2NS00M2U3LTkyMTctYTU3ZjczMWEzZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFt1j8tBGthQm1AQQ2+rXNIyVqOZlgmeRV3H BosTcjowbLA3uNad30A0YLhxRlP6radUJAnktc4ICwVBnjadmZE5f2KNxkcErQze jswKGpnT2NUTq/1ypmoD2WQG/TR+9Wj8QVx854ZlMsMO8qp6EMRpybhrMO09zym9 zaLJ11SParysWgLwT5o+goh83hFZZfDc7xDXfAIAKUl/48UOlut06BZkSW3Qp6J0 R2arS8AWA6YEuZZfj0tnsEJFLaaYbWxfTE4gq7sVXfGiqpDCURpHrTGSYeynYhMA urEUIYU9WYfTP8/KG59mNQ10odV+MaCEcqcNlfpT/EQMSuSROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu0dKVI/ZD2pxoNws0x07h7CvY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzhjYWI0NzQtYjViNi0z MzQ1LThlMjQtMWZiOGU5NjJiMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE5lhPhR1qToBVEuo4ffAlRmGc1K+g1be1nArebtM/NFBkME1R6TIXK dGIWKJPlXxZQDh4O+8fELxVUrtfgE1Xq1usYSylaI1+/Iqch8oDwkb6j8cNqza3s MTDdFG7nBcZ9GuvbT28GhE+IQzrYW/g4az4v9ugikPBYsjTrVli1WycOxhlveoTk pu5hUQMT9TmH1cawnQ4tXE6skveyrRzKLtUDkTgEDtXU24MAjtD0+ASEw6X+OREL fu9NeVcGNzvDjc4PT5VyrOSAfcGA4bQLKB54+k+3xuZM5k/odXHRY6R8UlDvhDDh qK3+BAmERHdDR/rckvxqhEQi+DFNdvM= -----END CERTIFICATE-----Generated at Tue Sep 29 01:15:15 2026 by rpki-client