$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa File: 3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa (raw, json) Hash identifier: mGMjv3zDIryitvOxg/xy1FFbryp4C9z6LJV3oc18hbM= Subject key identifier: BD:4D:95:03:9C:9C:89:7D:F3:5E:40:5C:01:D1:7C:47:2F:26:C3:46 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E253F0514A731EFA2A1C15F80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 16417 IP address blocks: 68.232.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:05:14:a7:31:ef:a2:a1:c1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=a0fb5ec6-7ad0-4c83-af81-5946619ec8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:07:2d:4f:34:d7:c7:ef:77:32:d5:4c:b9: 62:85:e5:fb:09:2b:03:e3:85:91:ce:76:5a:02:ac: d4:61:2c:ea:c4:4e:94:7e:18:99:f4:af:dc:44:c5: e5:72:7c:7a:8f:dd:20:28:0a:2c:36:7f:19:ba:fd: 92:77:9d:32:18:e7:14:04:1d:77:ee:0d:4a:45:cc: 95:20:af:4a:2c:4b:d5:9d:a8:5d:b9:56:a8:5d:42: 12:60:4f:5d:6f:9e:aa:bc:60:f8:ad:f8:7d:c0:9e: 39:b0:dd:5a:5e:69:42:87:55:b7:d1:37:28:86:8e: a3:7e:f9:fa:f6:19:01:e2:90:58:68:0e:d3:d2:d9: 80:58:83:ce:31:b6:0e:3b:af:75:cd:da:c9:76:bc: c5:23:2c:01:45:53:e7:8e:6b:f8:08:08:6e:cf:8e: 8f:d5:a2:09:e4:1e:b8:86:45:bd:ec:e9:87:ab:58: ae:38:d7:77:9a:9d:73:99:89:18:09:2a:3c:87:82: 80:1d:ae:61:e2:cd:ff:b1:7b:5d:e3:3d:04:4c:1c: 4a:91:45:8b:fb:38:95:35:7a:ce:8e:1b:8e:d1:c6: de:aa:e8:88:0b:c2:ee:cc:a5:35:df:32:74:85:eb: cb:af:63:0f:56:12:ee:e4:fc:ad:84:e8:e2:1a:e0: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:95:03:9C:9C:89:7D:F3:5E:40:5C:01:D1:7C:47:2F:26:C3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3a38966e-0be5-3cc3-9aa2-4cb0883bba5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1d:4c:3b:47:90:6f:e7:a8:e0:84:14:b0:e9:75:9b:5f:17: 72:f7:2e:1a:12:2f:fe:8e:a3:df:08:7d:55:37:59:3d:82:c6: 7a:8a:d4:5a:07:8b:78:25:82:fb:b7:32:16:a1:6f:db:dc:0c: 21:5b:e8:89:bc:bc:cc:99:e4:53:15:7f:04:3f:82:f2:86:4e: 96:3e:5e:25:06:28:df:22:d2:18:6d:4e:0b:3e:b7:d3:f5:8f: d4:e6:85:f2:48:89:72:eb:50:3f:66:3b:ac:b9:44:3f:70:e8: 7b:85:64:83:5e:19:5a:4a:a1:4e:62:d8:bf:9a:cd:f3:70:9a: c4:86:cc:ee:d8:6c:e9:9d:f6:6f:65:93:7e:c4:ff:3f:9f:2e: 86:47:ef:90:af:79:dc:27:43:63:09:7d:1e:35:98:66:5e:d2: e2:c2:fb:3e:c2:58:5a:69:74:e2:46:7f:ce:33:71:ca:24:8c: 0c:4a:6a:97:4f:5f:85:15:4c:4e:b0:cc:5d:5f:eb:a4:78:ad: dc:a6:6e:a2:31:a3:5a:78:38:00:f4:0c:83:69:3e:73:da:8a: 50:6e:dd:46:d9:ec:31:e8:bf:7b:c2:59:53:09:6d:e6:03:94: 58:93:3f:ce:97:c7:04:44:ef:de:f0:90:d3:ea:1b:3f:03:21: 61:c8:46:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwUUpzHvoqHBX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk YTBmYjVlYzYtN2FkMC00YzgzLWFmODEtNTk0NjYxOWVjOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFEHLU8018fvdzLVTLliheX7CSsD44WRznZa AqzUYSzqxE6UfhiZ9K/cRMXlcnx6j90gKAosNn8Zuv2Sd50yGOcUBB137g1KRcyV IK9KLEvVnahduVaoXUISYE9db56qvGD4rfh9wJ45sN1aXmlCh1W30Tcoho6jfvn6 9hkB4pBYaA7T0tmAWIPOMbYOO691zdrJdrzFIywBRVPnjmv4CAhuz46P1aIJ5B64 hkW97OmHq1iuONd3mp1zmYkYCSo8h4KAHa5h4s3/sXtd4z0ETBxKkUWL+ziVNXrO jhuO0cbequiIC8LuzKU13zJ0hevLr2MPVhLu5PythOjiGuBp6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1NlQOcnIl9815AXAHRfEcvJsNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2EzODk2NmUtMGJlNS0z Y2MzLTlhYTItNGNiMDg4M2JiYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwdTDtHkG/nqOCEFLDpdZtfF3L3LhoSL/6Oo98IfVU3WT2CxnqK1FoH i3glgvu3Mhahb9vcDCFb6Im8vMyZ5FMVfwQ/gvKGTpY+XiUGKN8i0hhtTgs+t9P1 j9TmhfJIiXLrUD9mO6y5RD9w6HuFZINeGVpKoU5i2L+azfNwmsSGzO7YbOmd9m9l k37E/z+fLoZH75CvedwnQ2MJfR41mGZe0uLC+z7CWFppdOJGf84zccokjAxKapdP X4UVTE6wzF1f66R4rdymbqIxo1p4OAD0DINpPnPailBu3UbZ7DHov3vCWVMJbeYD lFiTP86XxwRE797wkNPqGz8DIWHIRv4= -----END CERTIFICATE-----Generated at Sat Jun 13 21:11:59 2026 by rpki-client