$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa File: 7ab7b27a-d14d-39af-9d87-f3f814730a14.roa (raw, json) Hash identifier: N85qq/wIjjKkpstuYaOz5c1iQTonHxXhPXsqdHoKnTs= Subject key identifier: 06:1D:9E:63:1E:D4:99:C8:20:F3:E9:3B:DC:99:1E:C3:3B:D5:2F:85 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF587998B2EFDF99487564680 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 68.232.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:99:8b:2e:fd:f9:94:87:56:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=c6d2be0b-cb68-485d-82f4-00d31598cfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:f7:37:7f:7d:cb:17:56:ee:66:43:2b:6e: 75:e2:92:f5:9a:ae:49:19:1e:4a:65:5a:7e:0b:5f: 0e:c9:ca:a8:1a:57:79:cf:1d:6e:47:f8:de:d1:3d: d7:a7:da:f1:69:04:54:32:2d:5d:ec:83:77:6c:25: 8a:a9:5d:38:b4:81:b5:af:f0:8e:c7:82:c7:af:80: 42:22:19:6f:71:7f:61:b6:15:cd:b8:ef:a0:7c:a0: 6a:0f:94:cc:9b:a3:e1:ca:db:7e:08:15:14:6b:5b: 56:59:aa:69:e4:5a:33:29:4c:f4:65:bb:38:1b:80: 88:d6:20:a3:a2:87:48:b6:db:1e:f3:22:53:fd:1d: f7:43:36:37:51:0b:c0:ef:6a:4f:fc:c8:84:61:d1: f0:6a:4f:7e:b6:6e:ec:69:77:87:62:b6:d5:e0:a1: 2f:eb:55:31:69:24:1b:4b:3a:eb:92:09:9d:77:88: ea:e7:1e:b0:6c:4c:e1:0e:ab:f8:ed:14:74:99:c6: a7:b4:da:45:b5:65:02:6f:e1:94:d5:32:1f:d5:bd: 09:bf:a2:18:6f:33:c3:fa:08:cd:88:9c:ae:81:7e: e5:6f:f7:37:f3:a9:dd:ed:95:c2:06:fd:78:72:66: 1c:7b:34:e7:0f:bf:f5:54:2a:f0:52:7e:d9:13:99: 66:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:9E:63:1E:D4:99:C8:20:F3:E9:3B:DC:99:1E:C3:3B:D5:2F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7ab7b27a-d14d-39af-9d87-f3f814730a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ac:9e:8b:79:32:39:ac:6f:e8:46:cc:43:10:ba:61:1d:2d: cf:e6:cd:53:4e:cb:94:b1:7b:c4:07:16:63:fb:01:2e:01:b6: ba:11:a7:13:9c:db:39:d0:43:97:d8:9a:b8:0a:ad:c5:52:40: ac:96:8f:9a:ae:53:08:67:d7:8e:51:76:cf:64:4c:fd:0c:5d: 9a:f7:66:b5:a9:40:d4:b8:b7:3e:a5:98:39:69:03:7e:63:13: 2a:a1:fb:08:15:f6:aa:56:4b:e8:f9:60:3a:c2:32:5b:0f:1e: 58:ce:9d:fd:ae:ac:3b:81:00:b1:7d:55:b4:a1:bf:00:7a:bc: 63:86:3f:04:e3:7e:cd:1f:fa:dd:74:d3:13:c5:0f:32:af:90: ac:07:96:a3:25:9a:3a:73:8e:c2:11:e1:39:83:4d:9d:66:61: 1f:ef:19:5d:c0:a4:9e:9c:48:da:7f:31:ba:06:ce:a1:23:5c: 67:f0:42:d7:1e:36:2b:4a:9b:79:e1:30:e7:df:80:b4:1a:90: 1b:2f:d5:54:f1:e9:32:7e:ca:b5:f0:73:cb:24:3f:d2:be:32: 8b:f9:92:a9:82:4b:d0:75:e5:cc:60:fe:80:f8:a1:45:f7:bc: a7:b0:80:7c:2b:69:c5:aa:4a:54:e4:29:1b:c4:69:14:a9:5f: 2a:cd:df:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5mLLv35lIdWRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YzZkMmJlMGItY2I2OC00ODVkLTgyZjQtMDBkMzE1OThjZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOP3N399yxdW7mZDK2514pL1mq5JGR5KZVp+ C18OycqoGld5zx1uR/je0T3Xp9rxaQRUMi1d7IN3bCWKqV04tIG1r/COx4LHr4BC IhlvcX9hthXNuO+gfKBqD5TMm6Phytt+CBUUa1tWWapp5FozKUz0Zbs4G4CI1iCj oodIttse8yJT/R33QzY3UQvA72pP/MiEYdHwak9+tm7saXeHYrbV4KEv61UxaSQb Szrrkgmdd4jq5x6wbEzhDqv47RR0mcantNpFtWUCb+GU1TIf1b0Jv6IYbzPD+gjN iJyugX7lb/c386nd7ZXCBv14cmYcezTnD7/1VCrwUn7ZE5lmcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYdnmMe1JnIIPPpO9yZHsM71S+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2FiN2IyN2EtZDE0ZC0z OWFmLTlkODctZjNmODE0NzMwYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGsnot5Mjmsb+hGzEMQumEdLc/mzVNOy5Sxe8QHFmP7AS4BtroRpxOc 2znQQ5fYmrgKrcVSQKyWj5quUwhn145Rds9kTP0MXZr3ZrWpQNS4tz6lmDlpA35j Eyqh+wgV9qpWS+j5YDrCMlsPHljOnf2urDuBALF9VbShvwB6vGOGPwTjfs0f+t10 0xPFDzKvkKwHlqMlmjpzjsIR4TmDTZ1mYR/vGV3ApJ6cSNp/MboGzqEjXGfwQtce NitKm3nhMOffgLQakBsv1VTx6TJ+yrXwc8skP9K+Mov5kqmCS9B15cxg/oD4oUX3 vKewgHwracWqSlTkKRvEaRSpXyrN37k= -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:57 2026 by rpki-client