$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/291a8c41-9101-38ec-a6e9-863dd0465526.roa File: 291a8c41-9101-38ec-a6e9-863dd0465526.roa (raw, json) Hash identifier: D9Fqb/UpU9OVInTc9RxNwspkzAQQ41brvX9awr0dAos= Subject key identifier: 42:07:F9:24:80:0B:AD:45:D3:03:3A:E8:59:82:11:F7:4B:3D:3E:D7 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F2C225F2C1AC3860B1B11DD00 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/291a8c41-9101-38ec-a6e9-863dd0465526.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 46873 IP address blocks: 68.233.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5f:2c:1a:c3:86:0b:1b:11:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=aae5a76e-985c-4c0f-975d-41340b757b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:bc:43:a2:26:a4:b0:9f:ff:6e:b7:b1:53: 1d:97:1f:27:ef:c7:1f:ac:ac:57:4d:96:75:2a:31: 37:75:81:fd:f8:17:45:e9:f6:f2:67:98:2a:63:37: 1e:02:7e:ee:14:ba:71:a3:a6:27:32:87:e0:2f:ae: d7:95:ae:79:b8:28:12:e7:08:7b:bb:f3:0c:22:bc: d8:fb:5a:2d:96:e8:76:a0:6b:7a:24:ac:d2:ba:92: fc:75:a2:51:7b:a3:89:5b:e9:f9:ae:ed:c2:cd:3c: 46:7e:e4:99:01:27:a6:b3:d5:b7:0e:da:17:f5:c1: 34:86:62:a1:84:71:ff:2c:5a:4e:bf:f1:16:93:85: 44:db:5e:69:ff:b2:b0:b8:eb:92:45:75:4f:08:71: fb:42:39:27:43:f5:19:5f:a5:57:c6:6d:be:dd:82: e4:04:ea:ab:86:3e:b2:16:c3:e9:31:0e:72:ae:c1: 31:1d:56:a1:73:64:19:ac:42:52:cf:dc:34:11:67: 38:49:5a:e1:29:65:5f:40:49:8c:4b:2f:9e:c6:7c: 43:76:13:d4:5d:b1:a0:37:95:08:83:eb:b7:3b:04: ae:7a:db:4a:d0:32:dd:b4:3f:9e:01:ae:d5:e0:ee: 38:31:af:61:63:4f:4a:0f:de:ea:c3:a3:59:4e:f1: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:F9:24:80:0B:AD:45:D3:03:3A:E8:59:82:11:F7:4B:3D:3E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/291a8c41-9101-38ec-a6e9-863dd0465526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6c:8e:f7:f5:20:04:f8:2e:8d:b2:91:b6:49:73:70:5b:ea: 25:0b:73:35:3b:cb:05:af:d6:92:63:09:dd:85:25:66:74:e6: 1b:09:a5:52:2a:13:51:0e:32:44:08:e2:08:dc:fd:66:1e:c7: 43:21:66:b9:ba:98:b4:ae:ee:30:c8:98:fc:b9:e0:de:eb:7c: 47:eb:7b:4c:e1:3c:1c:5c:7a:5e:81:ee:b5:82:97:36:60:69: 91:9d:32:d0:79:3f:61:ce:97:87:ca:df:4d:4e:e4:f6:c8:d5: d1:e1:eb:db:5b:db:c5:c6:87:1f:7a:aa:ef:ac:b3:38:e7:9a: d0:ae:29:b9:74:a9:3f:6a:08:1f:ee:50:cf:b2:0c:98:d5:ae: 44:54:e0:5c:ad:a7:83:08:7e:2e:ab:25:50:d2:2d:07:e1:19: 46:5d:f4:97:3a:e0:5a:25:9b:d3:cf:6f:25:12:0f:5a:7c:2d: df:e8:6e:f4:73:37:d9:00:1c:62:3f:0b:4b:36:7b:54:e7:fc: 25:26:e5:26:08:62:2f:01:9f:f5:fe:42:2b:27:df:e8:f6:30: 7d:99:24:72:b7:05:e4:e0:b6:9d:46:1b:8d:e8:84:21:b2:e2: bb:9c:6a:f8:74:57:f6:ef:24:17:4e:0b:24:62:b0:3d:62:07: 5c:ce:8b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIl8sGsOGCxsR3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk YWFlNWE3NmUtOTg1Yy00YzBmLTk3NWQtNDEzNDBiNzU3YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSC8Q6ImpLCf/263sVMdlx8n78cfrKxXTZZ1 KjE3dYH9+BdF6fbyZ5gqYzceAn7uFLpxo6YnMofgL67Xla55uCgS5wh7u/MMIrzY +1otluh2oGt6JKzSupL8daJRe6OJW+n5ru3CzTxGfuSZASems9W3DtoX9cE0hmKh hHH/LFpOv/EWk4VE215p/7KwuOuSRXVPCHH7QjknQ/UZX6VXxm2+3YLkBOqrhj6y FsPpMQ5yrsExHVahc2QZrEJSz9w0EWc4SVrhKWVfQEmMSy+exnxDdhPUXbGgN5UI g+u3OwSuettK0DLdtD+eAa7V4O44Ma9hY09KD97qw6NZTvFrMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIH+SSAC61F0wM66FmCEfdLPT7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMjkxYThjNDEtOTEwMS0z OGVjLWE2ZTktODYzZGQwNDY1NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhsjvf1IAT4Lo2ykbZJc3Bb6iULczU7ywWv1pJjCd2FJWZ05hsJpVIq E1EOMkQI4gjc/WYex0MhZrm6mLSu7jDImPy54N7rfEfre0zhPBxcel6B7rWClzZg aZGdMtB5P2HOl4fK301O5PbI1dHh69tb28XGhx96qu+sszjnmtCuKbl0qT9qCB/u UM+yDJjVrkRU4Fytp4MIfi6rJVDSLQfhGUZd9Jc64Folm9PPbyUSD1p8Ld/obvRz N9kAHGI/C0s2e1Tn/CUm5SYIYi8Bn/X+Qisn3+j2MH2ZJHK3BeTgtp1GG43ohCGy 4rucavh0V/bvJBdOCyRisD1iB1zOi6k= -----END CERTIFICATE-----Generated at Sat Sep 26 18:03:46 2026 by rpki-client