$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa File: b00b53ed-db98-3d02-883b-21a1dc38e020.roa (raw, json) Hash identifier: elJPBpRvtEUpxQd14m4mxuOo8GHjWr4Dvb3L+DXeM6c= Subject key identifier: D5:45:56:BF:D3:ED:39:AF:45:D7:DE:93:4C:05:5C:9F:8E:5F:5F:79 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC146BDEA1C783DFFD72480 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 68.232.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:bd:ea:1c:78:3d:ff:d7:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=79659694-1e48-4cbb-94bd-dcfb57227c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:5f:1f:ec:50:ae:89:aa:7e:8d:43:ee:61: c5:48:13:3d:b6:b4:a4:0f:b4:99:ca:c0:49:e9:be: 0d:d0:d0:7a:f9:a1:99:68:9b:0f:49:77:20:ae:b2: 2d:4e:8c:f3:81:06:89:cd:7a:94:d4:e4:e7:7b:ca: c5:50:77:67:fa:ee:f0:ff:01:8c:4f:dc:73:dc:17: 39:24:91:a6:72:73:3d:ea:a5:6b:90:17:e6:fd:42: 85:88:19:1f:92:a9:a2:3d:c5:aa:16:21:88:08:49: ea:d3:56:19:d7:4e:69:86:fc:69:f9:21:58:40:da: d2:9d:ac:89:7c:ab:89:18:cb:fd:9a:ec:20:20:d9: e1:46:35:a9:71:c3:f2:72:5e:3c:c8:b7:b2:68:ef: 78:02:24:49:6f:c9:3f:b6:72:2e:2a:ca:5b:1c:bf: e6:c9:21:cf:8f:09:5e:1d:c4:b8:53:d8:67:bd:2b: a1:99:5f:c1:23:1b:e5:00:14:3d:ce:4b:f1:ca:a5: 0f:84:fa:a7:31:6a:f0:d6:3b:bf:cf:bb:7a:68:9d: 5e:17:3c:bc:de:f9:03:8f:70:e9:7a:34:c0:23:23: b8:72:bb:aa:04:e9:f6:47:64:42:b0:b7:45:b9:7f: 87:6e:81:21:1e:ee:75:5c:e8:37:b5:83:0d:1e:9b: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:45:56:BF:D3:ED:39:AF:45:D7:DE:93:4C:05:5C:9F:8E:5F:5F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b00b53ed-db98-3d02-883b-21a1dc38e020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:36:10:96:09:91:c9:72:d6:cc:3b:2e:67:a9:4f:0f:f6:bc: 65:f8:5c:0a:13:7d:64:02:53:e4:7f:04:34:31:fa:3b:a0:45: 42:f3:d2:92:ff:66:b1:85:32:96:2e:48:e8:f1:a4:4c:7e:d7: bb:a9:ae:db:26:a6:95:e4:9c:c3:09:99:29:d5:6b:42:ea:7f: 76:65:dd:28:b7:e3:9b:9a:7b:1f:85:03:f4:4d:e9:32:e2:84: 53:43:2d:3e:8d:2d:34:cd:1e:bd:79:cd:14:b3:25:f0:a1:1f: 73:41:c6:73:b0:4b:55:66:a2:1d:7b:a3:ac:50:b8:a0:17:f3: e0:f8:25:79:1c:5c:f3:1b:f6:19:b4:8f:f6:2e:49:87:e5:4a: 41:e0:fb:36:8c:3e:ae:01:8c:8f:7d:ec:26:79:f9:df:e7:77: ef:48:65:1c:38:bf:e8:c1:25:50:25:32:73:ec:4f:2a:17:dd: b0:12:3c:73:51:16:a3:59:6a:32:3c:42:e0:4b:4b:58:40:bc: b1:ee:e2:7c:b9:b5:2b:79:17:59:6c:5c:17:73:49:c8:95:e6: 75:83:3a:66:e3:9c:75:25:0d:bf:db:43:f0:db:28:41:f8:23: b7:a8:41:12:8a:5b:2c:bb:18:c0:64:69:31:1b:7e:6a:ea:78: 6a:b1:07:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUa96hx4Pf/XJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Nzk2NTk2OTQtMWU0OC00Y2JiLTk0YmQtZGNmYjU3MjI3YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+5fH+xQromqfo1D7mHFSBM9trSkD7SZysBJ 6b4N0NB6+aGZaJsPSXcgrrItTozzgQaJzXqU1OTne8rFUHdn+u7w/wGMT9xz3Bc5 JJGmcnM96qVrkBfm/UKFiBkfkqmiPcWqFiGICEnq01YZ105phvxp+SFYQNrSnayJ fKuJGMv9muwgINnhRjWpccPycl48yLeyaO94AiRJb8k/tnIuKspbHL/mySHPjwle HcS4U9hnvSuhmV/BIxvlABQ9zkvxyqUPhPqnMWrw1ju/z7t6aJ1eFzy83vkDj3Dp ejTAIyO4cruqBOn2R2RCsLdFuX+HboEhHu51XOg3tYMNHpsmpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVFVr/T7TmvRdfek0wFXJ+OX195MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjAwYjUzZWQtZGI5OC0z ZDAyLTg4M2ItMjFhMWRjMzhlMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg2EJYJkcly1sw7LmepTw/2vGX4XAoTfWQCU+R/BDQx+jugRULz0pL/ ZrGFMpYuSOjxpEx+17uprtsmppXknMMJmSnVa0Lqf3Zl3Si345uaex+FA/RN6TLi hFNDLT6NLTTNHr15zRSzJfChH3NBxnOwS1Vmoh17o6xQuKAX8+D4JXkcXPMb9hm0 j/YuSYflSkHg+zaMPq4BjI997CZ5+d/nd+9IZRw4v+jBJVAlMnPsTyoX3bASPHNR FqNZajI8QuBLS1hAvLHu4ny5tSt5F1lsXBdzSciV5nWDOmbjnHUlDb/bQ/DbKEH4 I7eoQRKKWyy7GMBkaTEbfmrqeGqxB6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:01 2025 by rpki-client