$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ecfbe68b-eda9-3658-92ed-1508f14f297d.roa File: ecfbe68b-eda9-3658-92ed-1508f14f297d.roa (raw, json) Hash identifier: R0dOt7i/RFdRZOzCPtxPZQWYM6nha16KqTWGKe2UfEY= Subject key identifier: C0:02:90:10:7C:50:94:22:54:BD:D2:9B:B1:37:4E:DA:A1:F0:F7:07 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D7A052F2E8BFAA288E8EFB000 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ecfbe68b-eda9-3658-92ed-1508f14f297d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 30238 IP address blocks: 68.232.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2f:2e:8b:fa:a2:88:e8:ef:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=10069d10-4b5f-4aa9-929a-b023c9e88f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:03:4e:14:57:6b:08:ad:67:e4:22:f9:50: 47:74:ba:41:8d:75:06:78:56:c6:58:79:68:c6:59: fd:29:2d:3b:d0:dc:ec:c6:0b:c3:a5:79:3a:35:72: 5a:8f:32:28:8f:dd:47:1e:dc:31:49:a8:49:de:22: 8a:98:0f:e1:88:68:70:da:d0:1f:8e:ca:b5:0d:ec: 90:b0:ff:51:f6:0c:e5:d7:63:60:7e:21:52:58:63: 2f:50:e8:99:88:e2:78:7f:84:dd:07:c1:91:fa:a1: 0d:b1:ed:50:26:76:e4:83:37:db:cd:93:08:35:8f: 2d:96:15:49:5f:c8:7f:ee:96:d3:80:08:b1:6c:de: c8:dd:b0:f1:fc:58:3c:c1:0a:8a:88:06:eb:28:dd: f6:0d:e0:6a:28:3b:2c:30:bb:cf:c1:47:fb:06:a2: 8e:97:77:29:c1:49:05:89:0b:a4:05:24:08:39:4e: 25:99:53:6b:c2:a0:24:58:ad:4f:8d:9f:fe:01:45: 6b:95:b9:9d:61:66:aa:cb:a3:f5:60:90:0c:30:7a: c7:21:78:23:d1:b1:1d:99:79:e4:da:2a:d6:5b:38: 1d:c7:76:b8:c1:0d:cf:5d:d4:83:a9:b4:37:03:15: 46:e7:86:63:85:9d:d0:bb:68:75:b7:37:92:b0:9d: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:90:10:7C:50:94:22:54:BD:D2:9B:B1:37:4E:DA:A1:F0:F7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ecfbe68b-eda9-3658-92ed-1508f14f297d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 68.232.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e6:7b:f4:1e:49:d3:3c:ad:af:46:10:ad:7a:b1:05:f8:69: 5c:27:7d:11:96:43:14:8f:6d:e6:50:7e:fb:9d:05:de:bc:26: 69:8d:b8:85:71:e4:53:6f:b6:43:0e:e3:a4:1d:00:3a:53:17: f7:9e:ce:0d:af:20:f1:5f:1f:1b:d0:f5:3c:64:66:cd:76:d8: ed:88:a1:2d:d9:e5:71:b5:63:bc:ca:d1:d7:26:ab:96:38:80: 1e:65:bf:90:84:08:f2:12:59:a9:cf:e6:04:39:a2:6a:aa:4b: 33:e7:36:fe:be:8f:ec:2b:db:8b:0e:81:71:3f:61:0b:f8:f5: f4:10:be:dc:d9:2a:da:82:ec:0e:d7:ef:a2:ac:7e:85:c4:a1: 4a:b6:5b:03:ed:4d:1c:ea:f0:d3:10:f5:98:31:76:7e:bd:97: ab:4a:ce:c2:1e:ac:72:c3:50:a5:73:dd:f3:76:c4:fd:db:86: b7:cf:24:42:4d:f5:c6:b9:ad:78:26:96:7f:96:b7:5e:3a:69: b6:9c:47:d6:cd:46:9b:cf:ce:1e:ce:8f:1c:18:2a:25:7d:b6: 35:36:86:d1:83:d2:e1:f9:59:bf:57:1a:cf:6a:f5:65:73:07: 2d:07:65:43:e6:e9:b4:0a:cd:20:d3:53:23:08:58:a4:e1:12: 18:75:fe:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS8ui/qiiOjvsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MTAwNjlkMTAtNGI1Zi00YWE5LTkyOWEtYjAyM2M5ZTg4ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob4DThRXawitZ+Qi+VBHdLpBjXUGeFbGWHlo xln9KS070NzsxgvDpXk6NXJajzIoj91HHtwxSahJ3iKKmA/hiGhw2tAfjsq1DeyQ sP9R9gzl12NgfiFSWGMvUOiZiOJ4f4TdB8GR+qENse1QJnbkgzfbzZMINY8tlhVJ X8h/7pbTgAixbN7I3bDx/Fg8wQqKiAbrKN32DeBqKDssMLvPwUf7BqKOl3cpwUkF iQukBSQIOU4lmVNrwqAkWK1PjZ/+AUVrlbmdYWaqy6P1YJAMMHrHIXgj0bEdmXnk 2irWWzgdx3a4wQ3PXdSDqbQ3AxVG54ZjhZ3Qu2h1tzeSsJ37DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMACkBB8UJQiVL3Sm7E3Ttqh8PcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZWNmYmU2OGItZWRhOS0z NjU4LTkyZWQtMTUwOGYxNGYyOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLme/QeSdM8ra9GEK16sQX4aVwnfRGWQxSPbeZQfvudBd68JmmNuIVx 5FNvtkMO46QdADpTF/eezg2vIPFfHxvQ9TxkZs122O2IoS3Z5XG1Y7zK0dcmq5Y4 gB5lv5CECPISWanP5gQ5omqqSzPnNv6+j+wr24sOgXE/YQv49fQQvtzZKtqC7A7X 76KsfoXEoUq2WwPtTRzq8NMQ9Zgxdn69l6tKzsIerHLDUKVz3fN2xP3bhrfPJEJN 9ca5rXgmln+Wt146abacR9bNRpvPzh7OjxwYKiV9tjU2htGD0uH5Wb9XGs9q9WVz By0HZUPm6bQKzSDTUyMIWKThEhh1/hs= -----END CERTIFICATE-----Generated at Sat Apr 18 04:00:27 2026 by rpki-client