$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/be9042e2-adf4-3727-b88d-6b18989012f9.roa File: be9042e2-adf4-3727-b88d-6b18989012f9.roa (raw, json) Hash identifier: jN/7EOit0ZL+CT4DiAPZ1hW9QGbMhWBpdzAqNuxi41o= Subject key identifier: EF:7A:C1:24:18:01:09:7E:16:C8:17:42:EF:40:7E:94:9A:05:F3:A9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B5B0764296904887998DC49A0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/be9042e2-adf4-3727-b88d-6b18989012f9.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16417 IP address blocks: 68.232.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:64:29:69:04:88:79:98:dc:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7dd2c58e-546a-4313-8932-6708f0744e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:ac:35:9c:1f:cb:03:63:ce:6b:f7:25:d8: 6e:3c:11:fc:da:c1:54:45:05:2c:51:88:d5:dc:5a: 30:d1:3b:2e:e4:40:1a:61:10:23:3d:f8:9a:5a:64: b6:d7:16:9d:75:83:c7:a3:df:7c:38:e8:34:e1:79: 5f:9c:83:a9:29:12:66:ae:8e:2b:29:56:a8:0a:21: dd:04:c7:50:d2:1d:3d:d4:d6:65:02:5d:78:6d:8c: 22:41:c8:9f:a4:47:32:7a:c3:21:7b:17:68:84:1a: 71:4e:2f:be:d9:ee:80:12:d0:de:ba:98:76:06:36: bc:a7:02:bc:6a:9c:e0:e8:8a:fa:11:1e:7a:7f:b1: 7c:d0:23:7e:38:52:9d:6d:72:3a:ea:7e:8b:54:53: 59:8d:22:e5:4b:4c:bb:b0:07:74:2d:b2:6f:1f:a2: 64:fc:9e:1c:8c:6c:ec:b8:38:8a:9f:42:36:d4:2b: 7c:48:e7:67:7c:17:13:38:20:ad:00:1f:58:f6:73: ff:f8:9b:26:b4:50:7f:94:78:d3:1c:6c:e0:22:b3: 52:06:a8:5e:27:0a:48:91:b4:ab:b1:c3:2e:f3:81: 67:10:42:9c:55:65:e1:14:7c:bd:38:24:83:44:54: a7:d9:40:5c:ce:1b:5f:c3:ad:70:db:b5:49:96:fe: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7A:C1:24:18:01:09:7E:16:C8:17:42:EF:40:7E:94:9A:05:F3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/be9042e2-adf4-3727-b88d-6b18989012f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2e:b9:6e:16:7f:24:26:32:9b:90:0b:30:6e:ca:7f:7f:cd: a1:62:03:14:69:c2:38:ce:ad:bb:eb:ea:0c:34:b6:2f:ab:79: 30:b0:43:03:71:74:92:ed:9f:7e:11:d2:42:5c:02:ea:52:b6: 82:e5:7d:05:a0:87:b2:a0:eb:aa:15:4e:7c:14:fb:9f:bf:06: 93:52:31:ff:b3:44:9f:13:d6:7b:b6:4d:cc:be:b6:30:91:2e: f3:37:4e:aa:7c:41:f5:bf:97:f0:c2:d4:19:a6:70:da:1c:28: 83:c6:ac:75:90:06:a7:d9:58:41:62:74:15:98:d0:d7:3c:31: 22:ed:1e:df:9b:e2:a3:5f:ac:ff:bf:6d:43:a0:4e:b8:c7:3b: 27:95:03:67:32:aa:16:75:ea:a5:29:98:04:68:67:a2:44:95: 13:fa:57:9e:f5:8e:99:b9:c6:9e:d0:d9:91:4d:2c:74:02:0a: 04:35:2b:f0:05:7f:76:b5:bc:2f:6d:c1:f5:9f:46:26:93:60: 38:a2:2c:57:25:8a:70:ff:e5:88:c7:d3:60:9d:f0:ef:fd:ac: 52:ad:bf:82:2b:71:7e:d9:43:0d:28:00:00:9f:e7:e6:2f:79: 66:9b:3f:f8:72:05:c0:cb:0b:c9:2a:0a:8b:58:0c:7f:b8:02: d7:8c:28:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2QpaQSIeZjcSaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2RkMmM1OGUtNTQ2YS00MzEzLTg5MzItNjcwOGYwNzQ0ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdesNZwfywNjzmv3JdhuPBH82sFURQUsUYjV 3Fow0Tsu5EAaYRAjPfiaWmS21xaddYPHo998OOg04XlfnIOpKRJmro4rKVaoCiHd BMdQ0h091NZlAl14bYwiQcifpEcyesMhexdohBpxTi++2e6AEtDeuph2Bja8pwK8 apzg6Ir6ER56f7F80CN+OFKdbXI66n6LVFNZjSLlS0y7sAd0LbJvH6Jk/J4cjGzs uDiKn0I21Ct8SOdnfBcTOCCtAB9Y9nP/+JsmtFB/lHjTHGzgIrNSBqheJwpIkbSr scMu84FnEEKcVWXhFHy9OCSDRFSn2UBczhtfw61w27VJlv4ghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO96wSQYAQl+FsgXQu9AfpSaBfOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYmU5MDQyZTItYWRmNC0z NzI3LWI4OGQtNmIxODk4OTAxMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAuuW4WfyQmMpuQCzBuyn9/zaFiAxRpwjjOrbvr6gw0ti+reTCwQwNx dJLtn34R0kJcAupStoLlfQWgh7Kg66oVTnwU+5+/BpNSMf+zRJ8T1nu2Tcy+tjCR LvM3Tqp8QfW/l/DC1BmmcNocKIPGrHWQBqfZWEFidBWY0Nc8MSLtHt+b4qNfrP+/ bUOgTrjHOyeVA2cyqhZ16qUpmARoZ6JElRP6V571jpm5xp7Q2ZFNLHQCCgQ1K/AF f3a1vC9twfWfRiaTYDiiLFclinD/5YjH02Cd8O/9rFKtv4IrcX7ZQw0oAACf5+Yv eWabP/hyBcDLC8kqCotYDH+4AteMKO8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:03 2025 by rpki-client