$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa File: a3de630d-0204-3526-b6ce-a52f3bdce272.roa (raw, json) Hash identifier: enJwZ/F7CFU4VbcBd3JhasCxi0eRblxD/hhWrGUOB+Y= Subject key identifier: 1E:E0:25:2E:06:F8:27:CD:92:9D:8A:63:DD:24:84:D5:36:68:9F:20 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556F19C53B514E02448F720 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 68.232.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f1:9c:53:b5:14:e0:24:48:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=2974c8ae-e73f-40a1-835c-503b81f1140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:dc:2f:16:32:f4:2f:4a:96:37:ef:83:41: 0a:97:bd:09:91:83:dc:25:8f:8d:c7:b7:03:6d:cf: 7e:23:61:87:e1:92:ea:0c:65:71:81:a2:d1:0f:22: 32:0a:9b:2b:0c:b7:8d:c3:82:8e:6f:aa:db:9b:dc: 85:20:4b:44:d5:3c:d3:3f:2d:a7:1b:50:44:50:fe: d0:f8:97:30:19:66:de:44:95:16:16:73:5a:eb:57: b8:44:99:9e:b1:e4:3c:2e:4e:af:79:51:57:17:8c: 99:87:91:b2:65:70:04:52:fb:98:75:be:7d:f0:23: 21:85:8a:7e:0c:e4:88:43:cb:91:f1:62:86:b6:37: a1:67:5c:d5:fd:de:cf:42:a9:13:84:0f:1f:71:d3: ff:2e:18:10:31:87:36:0e:37:b7:82:cf:56:77:0f: 58:fe:0a:e7:a6:e0:a0:e9:ec:6d:e8:30:ec:0c:ca: 45:61:54:e8:6e:64:26:cd:6e:7d:cd:8b:dc:53:44: b0:47:7a:87:cb:c6:80:5b:31:bb:10:55:8d:c7:9f: 2d:c3:1a:35:48:9e:23:d6:d8:61:6f:83:ea:79:8b: cb:8b:c1:05:1e:cb:71:f0:cc:b6:a8:ad:00:e9:72: cf:d4:fc:9e:cf:ed:e7:81:7c:95:8e:db:ed:73:eb: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E0:25:2E:06:F8:27:CD:92:9D:8A:63:DD:24:84:D5:36:68:9F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a3de630d-0204-3526-b6ce-a52f3bdce272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:77:55:ed:de:0c:f4:ae:90:f6:3f:61:1a:67:c7:2e:e9:56: f9:2b:4c:72:5f:4b:51:5c:b4:f6:b9:e0:1d:28:8d:59:59:de: 35:c7:59:b3:40:60:b0:63:dc:11:55:66:f2:da:04:c2:25:b7: 23:0f:fc:d7:d4:ee:5e:f6:84:e4:ff:bb:e7:6e:e5:8f:b5:a7: 27:2d:e0:cd:18:ef:a0:96:2c:2b:2a:a6:48:20:86:ed:d2:64: 90:ea:4e:10:a1:99:52:b6:8b:fd:50:c7:ee:3f:91:95:c1:2a: 41:0c:44:c6:b5:75:68:bd:c1:d2:73:79:88:ba:7e:d2:7c:85: c9:77:49:ee:5f:6b:62:d8:53:e5:82:2d:f7:52:71:ae:6a:5e: 03:a0:24:12:b3:6f:c5:be:05:50:65:b1:6f:ff:64:7b:49:ec: 60:d9:df:0d:d2:f5:60:f1:29:37:a3:c1:6e:fd:40:6c:ee:99: 08:b5:10:ea:3a:1d:75:c8:9e:f5:54:4d:3e:2b:a1:88:2b:d5: 0b:7a:31:90:dd:6d:0d:c7:99:0a:14:2e:0e:b3:88:07:7b:06: 7d:71:5d:b8:46:e2:ff:82:7e:27:05:3e:bb:f5:dd:43:c9:1d: 4e:74:81:9c:0c:e2:d2:c0:20:4b:f4:5d:28:bb:60:1b:6b:5e: a8:5b:b4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvGcU7UU4CRI9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Mjk3NGM4YWUtZTczZi00MGExLTgzNWMtNTAzYjgxZjExNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUbcLxYy9C9Kljfvg0EKl70JkYPcJY+Nx7cD bc9+I2GH4ZLqDGVxgaLRDyIyCpsrDLeNw4KOb6rbm9yFIEtE1TzTPy2nG1BEUP7Q +JcwGWbeRJUWFnNa61e4RJmeseQ8Lk6veVFXF4yZh5GyZXAEUvuYdb598CMhhYp+ DOSIQ8uR8WKGtjehZ1zV/d7PQqkThA8fcdP/LhgQMYc2Dje3gs9Wdw9Y/grnpuCg 6ext6DDsDMpFYVTobmQmzW59zYvcU0SwR3qHy8aAWzG7EFWNx58twxo1SJ4j1thh b4PqeYvLi8EFHstx8My2qK0A6XLP1Pyez+3ngXyVjtvtc+uAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7gJS4G+CfNkp2KY90khNU2aJ8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTNkZTYzMGQtMDIwNC0z NTI2LWI2Y2UtYTUyZjNiZGNlMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN3Ve3eDPSukPY/YRpnxy7pVvkrTHJfS1FctPa54B0ojVlZ3jXHWbNA YLBj3BFVZvLaBMIltyMP/NfU7l72hOT/u+du5Y+1pyct4M0Y76CWLCsqpkgghu3S ZJDqThChmVK2i/1Qx+4/kZXBKkEMRMa1dWi9wdJzeYi6ftJ8hcl3Se5fa2LYU+WC LfdSca5qXgOgJBKzb8W+BVBlsW//ZHtJ7GDZ3w3S9WDxKTejwW79QGzumQi1EOo6 HXXInvVUTT4roYgr1Qt6MZDdbQ3HmQoULg6ziAd7Bn1xXbhG4v+CficFPrv13UPJ HU50gZwM4tLAIEv0XSi7YBtrXqhbtKo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:30 2025 by rpki-client