$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa File: 4842f1d7-272b-3985-8501-86b60ee63bf5.roa (raw, json) Hash identifier: TgM2Olv7ldDXFyFgfKO5Ky+HPhSPwdjfUQ26ahYru2E= Subject key identifier: 33:9A:55:FF:91:79:70:AD:06:79:FC:76:16:2C:AD:29:01:66:F8:B9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CBDB2162BBCD38031C5739100 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 30238 IP address blocks: 68.232.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:16:2b:bc:d3:80:31:c5:73:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=63388cdd-5370-40a5-984a-200dee795440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0a:6a:f5:30:61:b6:64:34:ba:ec:be:37:c3: 9d:dc:84:71:d0:6e:7a:0e:cd:a2:87:78:8c:39:2e: dc:65:e0:29:b6:a9:fc:3f:2e:8c:85:62:78:e2:df: de:e4:29:59:08:68:3a:26:f5:2e:c6:4c:63:ed:7a: cc:ee:59:fe:c5:e7:e1:18:ac:33:fc:9b:9f:27:dd: c8:f6:71:e8:08:81:3a:13:44:ee:5f:31:32:9f:f3: d4:60:c9:b4:d0:ff:ee:2c:eb:1a:16:8c:91:7a:4a: be:82:db:84:41:24:e1:36:7a:89:ca:ad:e3:35:a9: 28:22:51:62:79:02:9d:a2:9f:4d:92:6b:bc:eb:48: 3f:33:61:2d:cb:f3:ee:3a:da:7a:94:7a:08:d1:ea: ac:00:48:a8:1b:92:8d:cc:ca:c4:4f:66:35:14:f0: 5e:38:f8:4c:7a:a1:f9:c6:ba:1e:96:fc:b6:80:1e: 87:5f:63:53:77:97:3f:6d:d5:2e:a5:38:08:39:a1: a2:71:7c:77:fc:8f:75:f2:85:53:28:63:79:6b:ed: 98:97:71:9f:07:e4:11:86:73:d0:6f:23:5b:c3:54: 87:ca:86:5b:31:03:86:7c:c4:b7:9a:af:85:63:5b: 52:1d:28:b4:dd:e8:26:11:ed:99:d9:fc:72:27:43: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:55:FF:91:79:70:AD:06:79:FC:76:16:2C:AD:29:01:66:F8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4842f1d7-272b-3985-8501-86b60ee63bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e9:2d:f6:a6:07:37:05:c7:93:a6:84:55:ba:ac:d5:6f:24: b7:43:7c:02:7c:c5:b6:ff:9c:82:45:92:ec:d1:4c:04:1e:a1: 38:cc:3b:fb:da:58:fd:76:e3:45:9a:4d:0f:7f:2d:7e:83:05: 06:22:f4:d3:a6:e2:29:8d:9b:20:6d:78:19:6b:79:11:fd:57: a6:f2:85:14:35:c7:1b:aa:de:59:4b:f7:e6:71:97:9c:85:70: 41:08:4d:9d:41:8f:19:67:1f:c6:d5:de:b9:0e:5b:2e:78:90: ab:88:f0:64:d9:80:9b:bb:5e:fc:cd:23:ea:16:93:8b:5a:66: 77:33:71:3e:52:1a:d8:47:15:8a:f1:f6:83:19:a7:3e:e3:80: 9a:9d:46:17:ed:7b:33:cd:76:fb:78:0f:d1:69:4a:56:88:5f: 9c:64:51:f2:a2:62:d3:12:24:95:79:46:c3:a2:b7:67:67:6f: 8c:95:ef:13:f8:36:ad:fb:12:75:e6:74:b3:10:ea:f6:9a:bb: 13:1a:7c:66:1e:cd:fe:39:fd:f2:30:0b:3e:d6:67:db:62:96: 5b:bc:34:24:75:48:49:d9:89:11:0d:cf:e6:82:54:b5:65:1a: 4f:a5:cd:d8:2e:53:d7:11:76:e8:da:56:be:f6:18:de:68:0b: 51:ad:70:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shYrvNOAMcVzkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk NjMzODhjZGQtNTM3MC00MGE1LTk4NGEtMjAwZGVlNzk1NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gpq9TBhtmQ0uuy+N8Od3IRx0G56Ds2ih3iM OS7cZeAptqn8Py6MhWJ44t/e5ClZCGg6JvUuxkxj7XrM7ln+xefhGKwz/JufJ93I 9nHoCIE6E0TuXzEyn/PUYMm00P/uLOsaFoyRekq+gtuEQSThNnqJyq3jNakoIlFi eQKdop9Nkmu860g/M2Ety/PuOtp6lHoI0eqsAEioG5KNzMrET2Y1FPBeOPhMeqH5 xroelvy2gB6HX2NTd5c/bdUupTgIOaGicXx3/I918oVTKGN5a+2Yl3GfB+QRhnPQ byNbw1SHyoZbMQOGfMS3mq+FY1tSHSi03egmEe2Z2fxyJ0O1xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOaVf+ReXCtBnn8dhYsrSkBZvi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNDg0MmYxZDctMjcyYi0z OTg1LTg1MDEtODZiNjBlZTYzYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHpLfamBzcFx5OmhFW6rNVvJLdDfAJ8xbb/nIJFkuzRTAQeoTjMO/va WP1240WaTQ9/LX6DBQYi9NOm4imNmyBteBlreRH9V6byhRQ1xxuq3llL9+Zxl5yF cEEITZ1BjxlnH8bV3rkOWy54kKuI8GTZgJu7XvzNI+oWk4taZnczcT5SGthHFYrx 9oMZpz7jgJqdRhftezPNdvt4D9FpSlaIX5xkUfKiYtMSJJV5RsOit2dnb4yV7xP4 Nq37EnXmdLMQ6vaauxMafGYezf45/fIwCz7WZ9tillu8NCR1SEnZiRENz+aCVLVl Gk+lzdguU9cRdujaVr72GN5oC1GtcOg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:02 2026 by rpki-client