$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa File: c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa (raw, json) Hash identifier: fqOnAMRQGOAQ95H0dNzW6K2Am8nsp5TtN1WwP5fwBvY= Subject key identifier: C4:AC:93:AF:C1:2E:AC:9A:70:92:52:BC:E8:8A:1F:6D:97:24:38:E1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E253F09ECF14D630892CED1E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 16417 IP address blocks: 68.232.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:09:ec:f1:4d:63:08:92:ce:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=faf03c1f-a859-43da-aeb8-00393c45f232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:84:9b:a0:d8:fd:41:0e:c2:0b:ed:24:1b: 0c:cc:c4:c4:8a:3d:77:73:b3:da:3a:ef:b4:72:b4: df:47:c2:c5:46:13:0e:07:40:0c:43:8b:69:cc:8b: b9:ac:17:ac:e4:da:63:cc:a2:9d:81:73:e9:43:0c: 86:f8:b1:8b:aa:30:38:62:f8:b0:48:b6:36:45:94: 1e:8f:47:72:53:5f:3f:f0:05:cb:93:f1:41:99:67: 69:ca:bb:01:bc:46:6b:1e:a6:a4:c9:18:41:98:68: 98:59:48:1e:21:ca:24:3c:fc:ca:68:0a:f6:c3:c2: 34:b8:12:34:f7:39:7d:92:eb:05:1d:10:68:96:a6: d4:e2:a8:87:99:ed:cc:de:a9:59:dc:ae:1e:12:c5: f8:d2:0f:c0:4e:6f:d6:f5:07:cf:43:36:be:9b:1a: 05:e3:78:e4:aa:56:f1:f0:b0:3c:1d:cd:60:23:c5: 90:ba:fe:0d:90:73:ac:16:b3:e1:eb:74:53:0c:34: c8:b6:41:05:df:ac:bc:d1:47:70:dc:fd:ed:95:65: 30:04:ef:f2:82:35:e3:d5:a4:e7:55:13:6b:2f:be: 13:b4:d3:88:72:8b:18:94:a6:a2:ae:66:d9:be:a6: 3e:a6:9c:ca:9a:47:fc:a6:e4:bb:da:9e:6d:23:5f: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:93:AF:C1:2E:AC:9A:70:92:52:BC:E8:8A:1F:6D:97:24:38:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/c902ea92-e1df-3fe0-bfe2-98f6187852fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1a:46:83:5d:3e:6e:28:c1:29:8d:7f:43:95:00:95:54:ed: b0:79:91:4b:be:e7:3a:ae:21:4b:54:3b:fc:13:62:35:ec:56: 01:37:48:2e:75:6e:3d:99:ba:f6:2f:30:ab:c1:ed:c3:63:30: bd:20:d7:8b:01:f4:1a:af:ee:8f:e0:97:04:60:ef:44:ba:b4: 4a:65:de:1e:02:ac:bd:9d:16:ea:04:47:33:e7:68:68:58:e3: 2c:34:5c:3d:4c:d0:56:92:42:e5:eb:13:e7:39:84:ad:37:8f: 94:b1:58:27:af:d3:9f:46:dc:ef:90:75:d0:7d:39:93:2a:05: 56:88:8a:bb:bf:b8:40:09:e1:d9:ad:70:08:41:84:61:99:c3: a9:11:94:2e:85:a9:7c:38:db:21:c6:83:51:1c:cb:65:a0:b3: a4:47:15:4f:4d:91:63:03:0e:1a:b3:22:7d:24:d3:ab:f7:40: 3b:6b:a9:f5:a4:8b:ce:98:f0:54:36:09:16:71:37:df:68:c0: ea:54:bc:3a:e5:38:6d:68:01:46:a9:93:be:ce:0e:34:fb:6e: 51:04:fb:d3:fc:b5:d1:ab:76:06:37:a8:6e:43:05:8c:08:99: bc:c0:f1:14:4c:d1:7e:42:26:43:7a:9e:1a:f9:19:1b:13:c1: 94:82:d1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwns8U1jCJLO0eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZmFmMDNjMWYtYTg1OS00M2RhLWFlYjgtMDAzOTNjNDVmMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGOEm6DY/UEOwgvtJBsMzMTEij13c7PaOu+0 crTfR8LFRhMOB0AMQ4tpzIu5rBes5NpjzKKdgXPpQwyG+LGLqjA4YviwSLY2RZQe j0dyU18/8AXLk/FBmWdpyrsBvEZrHqakyRhBmGiYWUgeIcokPPzKaAr2w8I0uBI0 9zl9kusFHRBolqbU4qiHme3M3qlZ3K4eEsX40g/ATm/W9QfPQza+mxoF43jkqlbx 8LA8Hc1gI8WQuv4NkHOsFrPh63RTDDTItkEF36y80Udw3P3tlWUwBO/ygjXj1aTn VRNrL74TtNOIcosYlKairmbZvqY+ppzKmkf8puS72p5tI1+8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSsk6/BLqyacJJSvOiKH22XJDjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYzkwMmVhOTItZTFkZi0z ZmUwLWJmZTItOThmNjE4Nzg1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4aRoNdPm4owSmNf0OVAJVU7bB5kUu+5zquIUtUO/wTYjXsVgE3SC51 bj2ZuvYvMKvB7cNjML0g14sB9Bqv7o/glwRg70S6tEpl3h4CrL2dFuoERzPnaGhY 4yw0XD1M0FaSQuXrE+c5hK03j5SxWCev059G3O+QddB9OZMqBVaIiru/uEAJ4dmt cAhBhGGZw6kRlC6FqXw42yHGg1Ecy2Wgs6RHFU9NkWMDDhqzIn0k06v3QDtrqfWk i86Y8FQ2CRZxN99owOpUvDrlOG1oAUapk77ODjT7blEE+9P8tdGrdgY3qG5DBYwI mbzA8RRM0X5CJkN6nhr5GRsTwZSC0Rs= -----END CERTIFICATE-----Generated at Sat Jun 13 22:28:53 2026 by rpki-client