$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa File: a3de630d-0204-3526-b6ce-a52f3bdce272.roa (raw, json) Hash identifier: 0V+ArLUsOBQ+T/uNBTkPEOPkTr0kzDphaKNcYB5cAJ4= Subject key identifier: 44:11:94:70:00:F5:A1:3F:4B:56:91:57:38:E1:8F:CA:D7:52:33:4E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584CF5879FD05412DDCE7AD6FF80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 16417 IP address blocks: 68.232.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:9f:d0:54:12:dd:ce:7a:d6:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=525d55e1-2dd5-47a2-aa84-59a6b561163b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:a1:24:01:b1:d9:ce:19:70:72:ea:74:66: f3:ef:1e:87:17:99:7f:77:81:96:8a:15:a3:a2:d1: 31:30:23:ff:d4:cd:12:d6:8f:f9:aa:b9:a4:2c:c8: 4f:fb:6c:9e:19:10:77:ea:1b:43:67:e7:60:c3:f6: 86:60:9f:bc:6f:f4:8b:fd:eb:72:25:19:0c:a2:38: e1:0f:e5:dd:93:da:e9:3e:d0:2e:e7:d0:70:1f:b8: a9:b4:3d:3b:c8:e3:c5:15:7c:26:26:83:0e:29:a9: 64:cb:80:6b:4d:2a:90:e1:60:3f:c1:3c:d7:1b:55: 70:9d:a5:fa:b7:dc:f1:2b:55:84:57:d1:6a:cf:85: a7:4e:ef:a8:4f:34:13:f3:d0:16:f6:b1:1f:64:4c: e0:46:80:6a:d9:4a:c3:40:b1:ae:44:a6:1a:f1:a4: 14:48:5b:3a:e4:8f:6d:9e:71:60:7a:a3:8f:c4:11: 02:e5:00:ce:57:95:b4:a6:91:ec:1b:ac:23:74:5f: 4f:e2:64:37:fd:ec:06:a6:82:7f:a9:19:06:25:18: 82:4f:af:e3:42:fb:4c:2f:7f:b9:4d:b0:56:d4:01: e9:e9:d9:eb:40:f8:5c:f8:3b:31:e8:66:70:f4:59: 78:cd:c7:46:cb:3b:55:88:99:d3:ab:2f:18:2f:8b: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:11:94:70:00:F5:A1:3F:4B:56:91:57:38:E1:8F:CA:D7:52:33:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f4:43:8c:0d:c7:d4:d1:40:b7:7f:af:a0:6c:ee:b0:d7:9c: 60:1a:c7:d2:9c:7d:69:dc:5f:05:6f:9a:00:76:75:b7:2f:f8: 40:93:83:b6:0f:cb:85:3a:6a:71:70:71:a9:26:97:c7:e9:ed: 50:82:2e:56:36:aa:f8:84:4d:41:12:fa:36:4e:63:4f:8b:ab: 4b:75:46:2c:26:99:3c:0d:48:1a:04:b6:82:a1:97:50:ba:75: 60:50:9d:2a:96:82:af:ba:39:1f:aa:0d:17:20:5e:2b:d1:fc: ad:97:da:94:17:d6:79:d5:e4:23:71:09:55:2e:6f:e0:0c:1f: c2:ff:38:59:a5:26:5b:6a:55:d3:68:e4:b3:7e:d0:91:bb:5b: b4:b4:0c:ee:26:32:99:e4:b2:7d:16:6e:18:8d:5a:b7:06:1d: fc:0f:e9:dc:a4:ff:90:a9:c7:f2:93:f4:c4:b8:de:2e:1e:66: b5:8e:87:5d:90:74:fb:47:9c:8a:ab:08:6b:43:20:3e:98:3c: 97:66:1b:6a:9e:5e:e7:c6:9b:5c:d9:f3:81:31:e9:c5:9d:fe: a0:03:23:43:21:1c:5b:14:c7:8b:c7:3f:c5:54:8e:f5:4f:37: e7:0f:fc:85:f3:55:33:02:57:87:4c:88:ea:30:69:cc:d8:2a: 42:b0:f5:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5/QVBLdznrW/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NTI1ZDU1ZTEtMmRkNS00N2EyLWFhODQtNTlhNmI1NjExNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnihJAGx2c4ZcHLqdGbz7x6HF5l/d4GWihWj otExMCP/1M0S1o/5qrmkLMhP+2yeGRB36htDZ+dgw/aGYJ+8b/SL/etyJRkMojjh D+Xdk9rpPtAu59BwH7iptD07yOPFFXwmJoMOKalky4BrTSqQ4WA/wTzXG1VwnaX6 t9zxK1WEV9Fqz4WnTu+oTzQT89AW9rEfZEzgRoBq2UrDQLGuRKYa8aQUSFs65I9t nnFgeqOPxBEC5QDOV5W0ppHsG6wjdF9P4mQ3/ewGpoJ/qRkGJRiCT6/jQvtML3+5 TbBW1AHp6dnrQPhc+Dsx6GZw9Fl4zcdGyztViJnTqy8YL4tP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQRlHAA9aE/S1aRVzjhj8rXUjNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTNkZTYzMGQtMDIwNC0z NTI2LWI2Y2UtYTUyZjNiZGNlMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz0Q4wNx9TRQLd/r6Bs7rDXnGAax9KcfWncXwVvmgB2dbcv+ECTg7YP y4U6anFwcakml8fp7VCCLlY2qviETUES+jZOY0+Lq0t1RiwmmTwNSBoEtoKhl1C6 dWBQnSqWgq+6OR+qDRcgXivR/K2X2pQX1nnV5CNxCVUub+AMH8L/OFmlJltqVdNo 5LN+0JG7W7S0DO4mMpnksn0WbhiNWrcGHfwP6dyk/5Cpx/KT9MS43i4eZrWOh12Q dPtHnIqrCGtDID6YPJdmG2qeXufGm1zZ84Ex6cWd/qADI0MhHFsUx4vHP8VUjvVP N+cP/IXzVTMCV4dMiOowaczYKkKw9dU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:52 2026 by rpki-client