$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa File: 38cab474-b5b6-3345-8e24-1fb8e962b03e.roa (raw, json) Hash identifier: VF88LJvSotTcLB/TEUVlTDL05upLDB/iYOyopMiVBYQ= Subject key identifier: 05:CE:70:94:AA:6B:66:B5:FC:E7:78:6E:B9:7C:D8:BA:63:5A:8C:89 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584DFBD5CE5E02B115972F2DD340 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 16417 IP address blocks: 68.232.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:ce:5e:02:b1:15:97:2f:2d:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=7e1619bd-77cc-4216-b6e8-fefddd0cf924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:27:2d:13:44:04:f1:35:b6:fb:ef:2a:bc: 7a:51:2a:12:49:a8:c6:79:51:88:74:10:fc:f4:bb: 08:cd:09:d6:00:07:81:01:0c:e2:06:2d:bd:72:ac: 8c:a6:4f:60:7f:91:f7:c6:39:cf:eb:61:2e:47:66: c0:a3:3d:e2:c1:f1:83:f6:ab:d0:27:de:20:92:bb: 80:bf:a1:96:d8:fa:40:b3:ca:3e:9f:83:cd:d2:c3: 65:b8:46:c4:00:35:e9:7f:23:f2:56:fd:c0:68:34: 3f:af:16:3e:8a:26:1b:0f:82:e8:26:a2:d3:b7:9f: 84:3e:93:d5:90:ad:cb:3b:5d:27:3b:9a:0a:d5:be: 05:42:21:b7:83:71:2d:7d:91:14:75:f9:ae:dc:63: de:64:09:8d:ee:8f:00:fd:94:1d:2d:aa:13:40:8e: 4b:8e:d7:ad:e3:66:f4:d4:cf:00:90:79:9b:b3:11: e0:55:37:3a:67:5e:10:bf:51:3d:9d:20:a4:8c:ee: ec:ea:65:37:57:1c:09:91:7d:4e:16:fa:89:43:3f: ad:53:53:94:c7:4a:9d:fb:e0:7c:dd:12:26:05:25: 9b:1f:c8:eb:f5:e6:32:c3:d5:a4:8e:43:0d:63:2a: 1c:f3:04:ad:eb:09:1c:fa:ee:f4:d5:5d:5e:50:43: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CE:70:94:AA:6B:66:B5:FC:E7:78:6E:B9:7C:D8:BA:63:5A:8C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/38cab474-b5b6-3345-8e24-1fb8e962b03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:48:89:61:ff:9e:56:20:7b:2e:03:a2:a1:5d:cb:76:61:1c: 2f:c6:32:e0:78:0c:a3:de:d3:67:02:9e:63:bf:ee:3d:65:56: b1:6e:44:10:65:ab:7f:a5:61:cb:a7:44:1e:ae:c3:ce:7b:ac: f0:83:eb:19:c1:3d:9c:b6:6c:36:91:0a:15:35:2c:df:40:14: be:27:d5:43:b2:f7:4b:c0:bf:3e:5f:39:cf:73:a7:ec:5b:f2: 90:5b:74:1c:b9:9d:43:a2:87:9e:cb:ac:1e:40:29:b0:7d:0b: bf:ed:ee:63:35:23:aa:bd:cf:1a:b9:0b:fe:e0:2a:fb:14:7e: 57:1a:74:1d:1d:e5:bc:b6:71:73:f8:e8:e8:bf:5b:89:71:ba: 72:85:30:6a:66:e9:0f:61:92:c3:55:61:e1:d2:f9:86:29:1c: a0:48:52:2b:f2:8e:cb:f1:c1:8a:fe:ca:c8:b1:3f:30:e1:12: 99:6b:8c:16:ca:ae:25:22:a7:fc:c9:ca:28:46:9b:22:67:b5: f2:4f:d4:49:00:e1:d8:c1:17:98:60:16:95:5e:85:e4:48:96: a0:b9:f9:35:47:07:25:cc:b3:57:62:7e:24:99:3e:1a:3a:04: 97:4b:e6:d3:d8:5a:fb:ac:65:09:5d:13:a6:fe:49:80:0b:01: 67:7a:f1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371c5eArEVly8t00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk N2UxNjE5YmQtNzdjYy00MjE2LWI2ZTgtZmVmZGRkMGNmOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7QnLRNEBPE1tvvvKrx6USoSSajGeVGIdBD8 9LsIzQnWAAeBAQziBi29cqyMpk9gf5H3xjnP62EuR2bAoz3iwfGD9qvQJ94gkruA v6GW2PpAs8o+n4PN0sNluEbEADXpfyPyVv3AaDQ/rxY+iiYbD4LoJqLTt5+EPpPV kK3LO10nO5oK1b4FQiG3g3EtfZEUdfmu3GPeZAmN7o8A/ZQdLaoTQI5Ljtet42b0 1M8AkHmbsxHgVTc6Z14Qv1E9nSCkjO7s6mU3VxwJkX1OFvqJQz+tU1OUx0qd++B8 3RImBSWbH8jr9eYyw9WkjkMNYyoc8wSt6wkc+u701V1eUEO/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXOcJSqa2a1/Od4brl82LpjWoyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzhjYWI0NzQtYjViNi0z MzQ1LThlMjQtMWZiOGU5NjJiMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdIiWH/nlYgey4DoqFdy3ZhHC/GMuB4DKPe02cCnmO/7j1lVrFuRBBl q3+lYcunRB6uw857rPCD6xnBPZy2bDaRChU1LN9AFL4n1UOy90vAvz5fOc9zp+xb 8pBbdBy5nUOih57LrB5AKbB9C7/t7mM1I6q9zxq5C/7gKvsUflcadB0d5by2cXP4 6Oi/W4lxunKFMGpm6Q9hksNVYeHS+YYpHKBIUivyjsvxwYr+ysixPzDhEplrjBbK riUip/zJyihGmyJntfJP1EkA4djBF5hgFpVeheRIlqC5+TVHByXMs1difiSZPho6 BJdL5tPYWvusZQldE6b+SYALAWd68Tg= -----END CERTIFICATE-----Generated at Sun Jun 14 04:02:59 2026 by rpki-client