$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa File: 3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa (raw, json) Hash identifier: 6KErz1jk84twMr6AQ6pO0Zy6yySzxPNCh08okuyFW/M= Subject key identifier: 0E:EA:F4:D8:4B:D0:FE:73:E2:DA:02:65:A0:15:CB:CF:0B:75:F1:64 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584FCE2BCF8FEF16B4252A0C9480 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa Signing time: Wed 11 Nov 2026 14:00:13 +0000 ROA not before: Wed 11 Nov 2026 14:00:13 +0000 ROA not after: Tue 09 Feb 2027 14:00:13 +0000 asID: 46873 IP address blocks: 68.233.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ce:2b:cf:8f:ef:16:b4:25:2a:0c:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Nov 11 14:00:13 2026 GMT Not After : Feb 9 14:00:13 2027 GMT Subject: CN=0961ee76-ecef-4f16-9600-dd9040f936d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:d7:cc:c1:45:6f:c6:15:2d:f8:8f:7b:5e: 08:53:59:50:c6:5b:c3:c9:d2:16:e7:5e:df:65:0c: f1:3c:7d:e1:2b:ca:04:f4:91:c9:47:c9:4d:0a:33: 32:de:9a:ad:45:82:3a:90:1b:dc:d6:78:38:5c:76: ce:4f:15:f6:2e:d6:35:50:47:e9:81:fa:d8:d0:44: e8:56:9b:a0:9c:23:47:f7:ad:6e:27:d6:90:e1:33: b7:6f:39:23:9b:3a:70:68:9d:79:2c:9f:00:fd:4e: 42:1a:2c:2f:ec:1e:c5:99:52:5f:05:54:5c:de:32: 96:e5:f3:6f:08:db:09:49:b0:ff:fc:45:43:43:8d: 2a:87:13:43:f8:79:ae:f3:45:91:ff:2c:df:d2:87: 79:4a:91:31:8f:ac:93:3f:91:a4:dd:cf:0f:81:23: 87:5d:f6:f6:ed:c0:64:1a:51:ed:46:9c:16:e5:30: 78:39:c3:7f:da:e0:7d:04:98:c7:9b:22:6d:52:f0: 3a:a2:d5:35:b7:09:a0:17:4e:16:23:7b:65:f0:db: f3:c0:59:92:af:bc:69:15:6e:2b:20:6c:11:39:bb: 27:e9:db:57:2a:10:1f:37:42:fc:fd:20:e3:fb:d4: e8:f9:6a:65:5c:b7:99:e0:af:58:8e:6f:c7:ae:68: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EA:F4:D8:4B:D0:FE:73:E2:DA:02:65:A0:15:CB:CF:0B:75:F1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ca:f6:79:25:24:db:4d:5d:1f:71:6a:09:37:55:34:37:70: cc:e2:bf:5f:ca:50:59:c5:cc:e3:7a:2f:1f:2c:b6:cf:21:0f: 5b:f4:a6:e2:02:54:b3:52:f6:5f:48:8a:9e:98:5a:3d:3f:a1: 38:9a:8c:3b:10:87:f0:1b:71:89:6d:fd:39:ed:b5:56:77:fa: 2c:8f:24:d4:ec:eb:75:56:8f:d1:9d:2f:0b:54:f6:ee:65:7d: 44:72:5e:4a:e4:0f:12:5f:bb:91:17:a2:0f:86:f4:9f:90:ae: 8a:50:56:fa:a9:95:31:66:30:67:d1:32:81:ba:e4:2a:0b:ad: 2f:33:b9:21:ab:d7:9c:14:97:e8:6f:ee:db:d1:47:82:1d:4f: 2d:82:4e:11:7b:13:97:b3:b6:d2:f3:30:8a:82:bb:2f:ce:6c: 5b:4a:cd:a4:22:3d:a7:3e:a0:d4:87:b6:00:a3:98:9f:02:4f: be:38:d4:f9:80:88:b5:e0:7c:92:11:c1:56:ba:22:14:8c:07: 36:80:30:00:66:3b:38:7a:db:55:11:20:7f:b8:9d:cd:e6:1a: e3:23:52:5d:34:f8:70:71:1f:67:df:26:cd:c9:6e:88:59:a9: 5e:0a:bb:a1:cc:ab:37:6e:c0:4e:22:11:1a:2d:27:45:80:8f: 5e:4f:e0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/OK8+P7xa0JSoMlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MTExMTE0MDAxM1oXDTI3MDIwOTE0MDAxM1owLzEtMCsGA1UEAxMk MDk2MWVlNzYtZWNlZi00ZjE2LTk2MDAtZGQ5MDQwZjkzNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCzXzMFFb8YVLfiPe14IU1lQxlvDydIW517f ZQzxPH3hK8oE9JHJR8lNCjMy3pqtRYI6kBvc1ng4XHbOTxX2LtY1UEfpgfrY0ETo VpugnCNH961uJ9aQ4TO3bzkjmzpwaJ15LJ8A/U5CGiwv7B7FmVJfBVRc3jKW5fNv CNsJSbD//EVDQ40qhxND+Hmu80WR/yzf0od5SpExj6yTP5Gk3c8PgSOHXfb27cBk GlHtRpwW5TB4OcN/2uB9BJjHmyJtUvA6otU1twmgF04WI3tl8NvzwFmSr7xpFW4r IGwRObsn6dtXKhAfN0L8/SDj+9To+WplXLeZ4K9Yjm/HrmgRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7q9NhL0P5z4toCZaAVy88LdfFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvM2E5YzRlZDctZWYwYi0z M2ZlLTllYzEtYzFiNzJjZDhmYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLK9nklJNtNXR9xagk3VTQ3cMziv1/KUFnFzON6Lx8sts8hD1v0puIC VLNS9l9Iip6YWj0/oTiajDsQh/AbcYlt/TnttVZ3+iyPJNTs63VWj9GdLwtU9u5l fURyXkrkDxJfu5EXog+G9J+QropQVvqplTFmMGfRMoG65CoLrS8zuSGr15wUl+hv 7tvRR4IdTy2CThF7E5ezttLzMIqCuy/ObFtKzaQiPac+oNSHtgCjmJ8CT7441PmA iLXgfJIRwVa6IhSMBzaAMABmOzh621URIH+4nc3mGuMjUl00+HBxH2ffJs3JbohZ qV4Ku6HMqzduwE4iERotJ0WAj15P4J4= -----END CERTIFICATE-----Generated at Sun Nov 15 18:48:43 2026 by rpki-client