$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa File: 85ead007-abb0-3f09-a8f1-e13fc5734e16.roa (raw, json) Hash identifier: nZmZNGv31gaYJ/BqgpnyIs1DDDi7qOxKe2WfJwYSIlY= Subject key identifier: 99:12:F6:7F:3E:04:FA:E6:D0:AD:00:7A:1D:C2:45:C3:9D:74:EE:E9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AA42B8C0661D191D2AD42DD00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16417 IP address blocks: 68.232.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8c:06:61:d1:91:d2:ad:42:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f5d6f578-f2f4-4bff-b545-ebc82bacfdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:13:94:cb:ed:57:77:71:68:9a:5b:cf:5b: ca:4d:0b:de:c2:17:0e:d1:b5:5e:a9:d5:50:f8:37: 26:5f:b9:ef:30:b0:05:67:72:57:f1:9e:e5:3f:e3: 67:4d:70:cd:03:fc:04:e9:e6:a5:c5:e8:25:f5:9c: d2:c9:6f:65:3b:0b:e3:00:68:01:cc:4d:08:a8:fd: de:ca:21:5e:d0:51:cf:e7:ea:82:eb:fa:10:1b:cc: 69:18:d0:4a:ab:f9:e2:6d:a9:f1:b8:14:42:de:08: e8:18:64:11:db:1f:5d:09:70:89:b8:48:00:64:84: 84:3d:bd:e9:f4:58:da:4e:90:35:dc:30:c5:52:9e: fc:ab:da:1a:aa:f2:1e:6b:b5:7c:91:f9:b2:67:9a: f2:2c:2b:47:c4:3c:cb:03:dc:cd:de:37:92:b9:0e: 0d:b2:25:7e:28:15:30:e3:ca:a5:c0:7c:7a:81:f1: 8f:43:fc:93:91:d0:0e:6a:8d:b8:52:65:05:4f:e8: 55:59:30:a1:71:72:43:6f:23:54:9f:d7:db:77:a0: f6:5a:e0:3b:47:13:3d:70:80:b7:a0:bc:1e:8b:12: ea:c4:3c:b8:2c:d2:b0:21:66:02:8b:80:05:56:3f: d3:08:4a:8d:c3:63:b6:af:cf:03:28:a9:79:4d:ea: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:F6:7F:3E:04:FA:E6:D0:AD:00:7A:1D:C2:45:C3:9D:74:EE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/85ead007-abb0-3f09-a8f1-e13fc5734e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:de:8d:77:c3:9d:65:d9:e8:e1:31:13:c2:5f:93:b9:27:ed: e0:19:37:35:fa:15:c4:65:57:61:96:50:47:14:45:63:df:20: b7:71:47:b5:5e:7c:0c:da:47:90:f3:12:71:84:7a:af:19:b2: fa:04:6d:1d:17:3d:ba:5f:04:65:79:45:5e:46:a9:14:cb:b7: 51:07:b2:0b:b4:da:81:33:c5:44:f8:b6:3f:2d:b8:56:4e:3f: 63:85:58:48:46:ca:fd:7a:df:f8:b2:b7:09:51:a8:de:d2:a5: 81:fa:79:82:71:83:d2:53:4a:11:94:18:16:14:80:c1:1a:b7: 82:52:ba:c7:56:98:6f:96:e4:ed:9b:be:9b:f3:3d:10:b4:e7: eb:38:20:1d:9d:b6:bd:54:4d:8f:5b:62:d7:18:a4:8c:1d:bf: d8:a6:3d:86:28:ff:b4:9b:dd:f8:83:af:11:56:ad:57:22:a7: 5f:48:13:21:fe:5e:77:f6:83:d1:68:67:0b:21:f3:f6:b5:8d: 58:85:d4:f6:46:81:cc:1a:b8:0e:46:05:25:58:13:95:c7:be: 53:45:a3:18:54:d6:b2:e7:0c:30:7f:5d:a4:81:f3:62:f2:17: 83:b5:03:b6:e3:34:fc:51:43:e0:4c:4f:c7:70:1f:b0:19:ca: 40:7d:04:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4wGYdGR0q1C3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjVkNmY1NzgtZjJmNC00YmZmLWI1NDUtZWJjODJiYWNmZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEgTlMvtV3dxaJpbz1vKTQvewhcO0bVeqdVQ +DcmX7nvMLAFZ3JX8Z7lP+NnTXDNA/wE6ealxegl9ZzSyW9lOwvjAGgBzE0IqP3e yiFe0FHP5+qC6/oQG8xpGNBKq/nibanxuBRC3gjoGGQR2x9dCXCJuEgAZISEPb3p 9FjaTpA13DDFUp78q9oaqvIea7V8kfmyZ5ryLCtHxDzLA9zN3jeSuQ4NsiV+KBUw 48qlwHx6gfGPQ/yTkdAOao24UmUFT+hVWTChcXJDbyNUn9fbd6D2WuA7RxM9cIC3 oLweixLqxDy4LNKwIWYCi4AFVj/TCEqNw2O2r88DKKl5TeqY2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkS9n8+BPrm0K0Aeh3CRcOddO7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODVlYWQwMDctYWJiMC0z ZjA5LWE4ZjEtZTEzZmM1NzM0ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXejXfDnWXZ6OExE8Jfk7kn7eAZNzX6FcRlV2GWUEcURWPfILdxR7Ve fAzaR5DzEnGEeq8ZsvoEbR0XPbpfBGV5RV5GqRTLt1EHsgu02oEzxUT4tj8tuFZO P2OFWEhGyv163/iytwlRqN7SpYH6eYJxg9JTShGUGBYUgMEat4JSusdWmG+W5O2b vpvzPRC05+s4IB2dtr1UTY9bYtcYpIwdv9imPYYo/7Sb3fiDrxFWrVcip19IEyH+ Xnf2g9FoZwsh8/a1jViF1PZGgcwauA5GBSVYE5XHvlNFoxhU1rLnDDB/XaSB82Ly F4O1A7bjNPxRQ+BMT8dwH7AZykB9BNE= -----END CERTIFICATE-----Generated at Mon Aug 4 18:55:21 2025 by rpki-client