$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa File: 9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa (raw, json) Hash identifier: scZuu8JiqagjtGmeubjP7j+uaXOLb8e49+qWhmfov4A= Subject key identifier: 21:33:7A:20:56:C9:2E:FD:94:10:5E:23:CF:97:F2:92:0D:CD:87:27 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CBDB1EE35C5CD3E4761A64B80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 30238 IP address blocks: 68.232.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ee:35:c5:cd:3e:47:61:a6:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=27c61c9a-4915-47a8-ad3a-5d75282e20e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:da:0b:04:21:87:38:a7:fa:5d:6c:f1:78: ba:56:86:38:84:54:cf:c8:62:b1:18:e7:00:d6:6b: 65:8c:97:e1:9f:66:0e:82:8c:ac:58:14:ef:ee:00: f3:38:bf:0c:a2:51:b2:c3:5a:44:97:ba:1b:57:ee: 1e:d6:09:11:b8:b2:c8:65:84:48:6b:96:24:d9:f5: b4:97:84:6c:21:90:8a:f4:8a:8e:d3:67:9e:94:b8: 26:27:43:8c:42:bd:7e:e6:09:f7:06:7a:1a:fa:a2: 28:b2:5f:20:83:a4:35:ba:51:fd:bf:c7:5d:af:11: a5:78:84:46:76:1d:c2:10:11:19:ce:29:7d:bd:23: 37:37:8a:c0:f3:fb:f6:43:dd:5f:a9:bf:11:b5:f8: fa:fe:36:d9:79:da:93:cc:0e:6c:aa:cb:77:6a:b1: ac:dc:9e:36:8c:a1:37:c1:2c:71:d9:cf:4b:a0:9c: 6e:98:07:2d:40:05:cc:2b:91:a6:88:5a:aa:19:70: 9c:32:c2:97:83:62:3a:8e:d6:b5:64:c6:3e:df:ee: 5f:f9:68:a8:a9:8e:9e:90:9f:b6:8e:45:70:a4:7e: 73:72:1b:28:93:84:c0:a8:00:42:87:90:f1:4d:f0: 49:38:fb:56:5c:cc:91:42:68:86:90:2d:08:ed:61: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:33:7A:20:56:C9:2E:FD:94:10:5E:23:CF:97:F2:92:0D:CD:87:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:43:68:aa:89:dc:20:7e:d4:55:06:d0:45:3b:9c:23:0f:ba: b7:39:00:c5:c1:e5:cd:d8:ec:45:d5:fd:c8:7b:e7:e8:b6:ad: 5f:10:34:32:64:36:f7:24:55:f7:b2:c9:e5:d4:72:2e:25:66: fb:2a:05:ef:39:11:26:bd:34:1c:8a:c9:34:ca:5f:db:43:3e: a6:ec:ad:9a:70:c3:50:b8:03:6f:f2:6e:c5:b6:52:d0:ce:dd: a5:65:f7:b9:79:c9:b2:5d:ef:bd:0d:0f:81:20:9a:39:1e:8a: 8b:9a:fa:06:bd:20:7f:b7:30:8e:47:2b:a4:41:b1:d0:2e:aa: 59:54:0b:16:d9:de:84:af:e0:51:5b:4a:22:50:a3:19:d8:22: ac:f4:b8:ba:4f:76:ce:bf:af:16:36:6d:c0:36:3d:f0:8c:d9: 15:1a:3d:9e:79:f2:94:c4:c1:bc:ad:ad:42:25:3b:29:97:bb: 10:cb:0f:06:31:d9:3c:22:bd:b5:a8:ee:45:52:7b:d4:85:25: 30:e1:8d:63:20:39:80:df:ce:90:60:66:9e:da:f7:ee:e1:07: 04:bc:a6:3a:e0:4d:86:6b:c2:5e:0e:1d:e3:8f:49:51:f4:57: 72:1c:61:eb:0a:42:19:09:f7:8f:36:dd:8d:05:0c:c6:39:70: b8:0e:97:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9se41xc0+R2GmS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MjdjNjFjOWEtNDkxNS00N2E4LWFkM2EtNWQ3NTI4MmUyMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHjaCwQhhzin+l1s8Xi6VoY4hFTPyGKxGOcA 1mtljJfhn2YOgoysWBTv7gDzOL8MolGyw1pEl7obV+4e1gkRuLLIZYRIa5Yk2fW0 l4RsIZCK9IqO02eelLgmJ0OMQr1+5gn3Bnoa+qIosl8gg6Q1ulH9v8ddrxGleIRG dh3CEBEZzil9vSM3N4rA8/v2Q91fqb8Rtfj6/jbZedqTzA5sqst3arGs3J42jKE3 wSxx2c9LoJxumActQAXMK5GmiFqqGXCcMsKXg2I6jta1ZMY+3+5f+WioqY6ekJ+2 jkVwpH5zchsok4TAqABCh5DxTfBJOPtWXMyRQmiGkC0I7WHz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEzeiBWyS79lBBeI8+X8pINzYcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOWM4NTNmOGMtMTNkMC0z YmMwLTkwYjMtNDNkYzZiZWFiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxDaKqJ3CB+1FUG0EU7nCMPurc5AMXB5c3Y7EXV/ch75+i2rV8QNDJk NvckVfeyyeXUci4lZvsqBe85ESa9NByKyTTKX9tDPqbsrZpww1C4A2/ybsW2UtDO 3aVl97l5ybJd770ND4Egmjkeioua+ga9IH+3MI5HK6RBsdAuqllUCxbZ3oSv4FFb SiJQoxnYIqz0uLpPds6/rxY2bcA2PfCM2RUaPZ558pTEwbytrUIlOymXuxDLDwYx 2TwivbWo7kVSe9SFJTDhjWMgOYDfzpBgZp7a9+7hBwS8pjrgTYZrwl4OHeOPSVH0 V3IcYesKQhkJ94823Y0FDMY5cLgOl64= -----END CERTIFICATE-----Generated at Mon Mar 2 11:08:22 2026 by rpki-client