$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa File: 58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa (raw, json) Hash identifier: 5ITd9HPbJN+Ps0kFFCMT47dwChZOzffTEg30XEyYg3A= Subject key identifier: 8F:AC:47:A0:BB:5E:11:A1:EF:E3:35:1A:EA:AE:C7:0A:2A:CA:D1:0A Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584FCE2BD463E357D2DA714B67BC Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa Signing time: Wed 11 Nov 2026 14:00:13 +0000 ROA not before: Wed 11 Nov 2026 14:00:13 +0000 ROA not after: Tue 09 Feb 2027 14:00:13 +0000 asID: 46873 IP address blocks: 68.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ce:2b:d4:63:e3:57:d2:da:71:4b:67:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Nov 11 14:00:13 2026 GMT Not After : Feb 9 14:00:13 2027 GMT Subject: CN=85347626-8935-4514-b0c0-a8ccaf985aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:7a:58:ef:53:4b:a4:01:a8:63:e4:09:94: bd:02:23:d6:e4:fa:f9:86:aa:f0:26:71:14:a7:8f: 87:1f:8a:a2:3f:87:2e:aa:24:fd:db:53:fa:4c:b1: 84:c4:e6:ce:1d:3d:c0:a4:7e:7d:07:6b:84:05:2f: 36:30:6f:96:25:39:0a:60:31:83:6d:db:14:9a:44: 20:7c:16:2c:1c:82:0f:1e:03:52:ca:b8:f0:b8:52: b7:20:92:e8:48:f1:be:0f:7b:b9:f0:4a:37:b1:0e: 10:25:f5:a5:3b:5a:55:41:d6:e7:02:25:46:40:5d: d8:e6:4a:30:82:b2:15:fc:f6:b7:0e:e7:fe:0a:17: 29:4c:b0:fb:0e:62:5e:49:31:27:09:34:eb:1a:8c: 56:bd:d3:b3:cf:cd:4f:7f:09:dd:d1:32:90:25:da: f2:00:24:15:95:d5:27:25:a4:4b:d7:24:97:e8:9c: 48:23:dd:91:fe:55:3b:4c:7f:4c:bc:0d:46:63:86: 2f:49:37:80:7c:75:3f:ae:61:48:66:de:8d:44:50: 85:5a:1e:ae:48:a8:91:63:02:8a:ab:7e:10:9a:99: 20:48:0d:b2:63:0e:15:e2:7f:fa:e2:21:57:34:1c: 53:95:2b:a7:b7:7b:3f:7b:98:ab:5c:92:5d:98:fa: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AC:47:A0:BB:5E:11:A1:EF:E3:35:1A:EA:AE:C7:0A:2A:CA:D1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0b:27:bd:2a:15:60:92:0a:10:eb:04:f2:fd:e6:1e:6a:23: 10:8b:1f:bf:75:f4:d2:f3:74:89:73:99:d4:01:5a:2e:ec:e4: 36:32:3a:e1:b1:31:ab:d2:8f:29:26:f8:d5:9f:5c:20:7f:f6: 37:e2:7a:7f:63:35:1d:73:0e:b3:91:0d:99:04:45:c7:a5:a1: 95:6c:5d:4d:5f:38:65:b2:83:0b:13:85:92:11:fa:ea:1a:2e: 84:cb:5a:80:ea:74:31:5b:4f:cd:ba:6c:bb:9f:47:e8:58:61: 3e:c3:99:f0:b3:2b:a6:56:3a:a6:97:24:7e:0d:b3:9c:24:8c: 99:86:34:c0:e6:13:c0:ea:14:30:1c:d0:47:4d:84:1c:12:7e: 3b:a7:db:18:90:61:7f:6b:a3:38:d0:49:67:03:a6:00:0e:2a: c5:99:56:a4:d7:67:8e:e9:e3:dc:89:fc:60:db:36:6c:b7:f8: bf:1a:38:07:be:0d:51:d7:1b:14:b7:48:d4:e0:54:81:80:9a: 73:a7:23:c6:2f:db:46:a8:03:42:f5:15:17:ab:3f:c6:c8:88: ec:db:96:bd:f5:96:71:1b:0e:0a:8c:95:05:14:6f:f8:30:53: 19:db:35:4b:f5:96:30:cf:f1:99:66:87:28:ad:53:c8:b7:da: 70:22:8c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/OK9Rj41fS2nFLZ7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MTExMTE0MDAxM1oXDTI3MDIwOTE0MDAxM1owLzEtMCsGA1UEAxMk ODUzNDc2MjYtODkzNS00NTE0LWIwYzAtYThjY2FmOTg1YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaB6WO9TS6QBqGPkCZS9AiPW5Pr5hqrwJnEU p4+HH4qiP4cuqiT921P6TLGExObOHT3ApH59B2uEBS82MG+WJTkKYDGDbdsUmkQg fBYsHIIPHgNSyrjwuFK3IJLoSPG+D3u58Eo3sQ4QJfWlO1pVQdbnAiVGQF3Y5kow grIV/Pa3Duf+ChcpTLD7DmJeSTEnCTTrGoxWvdOzz81Pfwnd0TKQJdryACQVldUn JaRL1ySX6JxII92R/lU7TH9MvA1GY4YvSTeAfHU/rmFIZt6NRFCFWh6uSKiRYwKK q34QmpkgSA2yYw4V4n/64iFXNBxTlSunt3s/e5irXJJdmPqMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+sR6C7XhGh7+M1GuquxwoqytEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvNThkY2MyNmEtNzVkYi0z Njk0LTljNjYtMjkwZGRiMWI3ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJILJ70qFWCSChDrBPL95h5qIxCLH7919NLzdIlzmdQBWi7s5DYyOuGx MavSjykm+NWfXCB/9jfien9jNR1zDrORDZkERceloZVsXU1fOGWygwsThZIR+uoa LoTLWoDqdDFbT826bLufR+hYYT7DmfCzK6ZWOqaXJH4Ns5wkjJmGNMDmE8DqFDAc 0EdNhBwSfjun2xiQYX9rozjQSWcDpgAOKsWZVqTXZ47p49yJ/GDbNmy3+L8aOAe+ DVHXGxS3SNTgVIGAmnOnI8Yv20aoA0L1FRerP8bIiOzblr31lnEbDgqMlQUUb/gw UxnbNUv1ljDP8ZlmhyitU8i32nAijH4= -----END CERTIFICATE-----Generated at Sun Nov 15 17:53:27 2026 by rpki-client