$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa File: 58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa (raw, json) Hash identifier: eYTQsffgb/29EaH9vLbSGfIl80lGbXY4ah+UEX/igXc= Subject key identifier: 34:39:37:8B:C9:84:18:D8:4B:31:C7:FA:1B:19:E8:72:32:F3:6B:4F Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584DA9F33E8C2BC19397F514D330 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa Signing time: Wed 29 Apr 2026 05:03:18 +0000 ROA not before: Wed 29 Apr 2026 05:03:18 +0000 ROA not after: Tue 28 Jul 2026 05:03:18 +0000 asID: 46873 IP address blocks: 68.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:f3:3e:8c:2b:c1:93:97:f5:14:d3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 29 05:03:18 2026 GMT Not After : Jul 28 05:03:18 2026 GMT Subject: CN=c6a3c9f4-895d-4be8-a2c6-71e01faa44cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:78:cd:73:a4:d2:72:26:5a:de:01:a3:ec: a1:37:c5:b3:f6:9c:c0:e3:49:b0:d0:ab:0b:55:d5: c2:52:6c:2f:e0:33:2c:d2:e9:19:7b:b7:84:6a:ee: a5:fa:91:72:09:a7:e1:2a:6c:7d:8f:e3:a7:60:f9: d8:2c:32:22:09:9e:0e:67:a9:7b:00:8b:88:d1:4b: c1:53:79:8c:54:6a:9b:ba:48:6d:7c:76:a7:65:b4: a3:3a:25:ce:50:f8:7d:31:d3:6c:17:12:a2:95:42: 80:ab:e9:e1:1f:1c:8e:b2:46:79:8e:6a:60:49:ac: 04:f6:0e:5f:1f:7c:5c:b9:6b:9c:74:ad:a2:d8:ed: 7f:81:e5:9d:e0:1f:56:4b:b3:c4:50:97:39:b2:ac: 22:87:72:ca:be:7c:66:86:01:94:0a:79:27:80:51: 83:87:d1:89:ee:e7:b7:98:80:d4:32:6c:d6:c3:79: 25:17:25:02:60:a2:a8:22:fb:32:00:0c:bd:68:9e: 91:5a:e0:af:ec:87:5d:16:47:05:da:10:40:0a:c0: db:db:89:2c:e8:f3:1e:31:41:4d:b8:9d:96:93:c0: 83:8b:5e:01:c7:99:fa:6f:b4:52:be:48:f4:eb:03: ef:09:90:d3:6d:3d:92:28:6a:9f:20:c4:66:a2:08: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:37:8B:C9:84:18:D8:4B:31:C7:FA:1B:19:E8:72:32:F3:6B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:79:b9:0c:25:54:46:c2:cc:e1:c2:da:7b:e5:46:50:1b:4c: 69:9f:e3:81:55:f3:e4:3c:5f:08:4e:3d:fc:bc:a6:41:0f:e6: f1:65:45:a0:13:45:09:b4:54:74:05:12:6a:14:66:07:9c:c1: 2f:e8:23:27:90:cf:61:18:22:cd:da:f4:0d:66:53:35:6e:41: 41:ee:ea:7c:b5:6e:50:7d:b2:bc:a4:89:05:af:d9:93:16:bd: fd:32:2f:d8:87:e1:4e:4b:f8:f7:d2:e0:38:59:36:e8:b1:35: b8:0f:8a:8c:c5:60:b7:ee:1b:2e:6e:73:ec:41:0b:fe:ed:6d: e7:31:3b:ed:52:bd:73:92:5f:b8:03:49:b0:77:e3:d0:f0:03: 24:aa:61:4a:63:eb:62:97:b5:a3:93:d6:17:dc:41:11:c7:67: f0:1c:e1:e4:16:ad:fa:0f:58:da:40:3d:19:dd:18:e3:20:17: bb:71:47:f3:83:42:97:fd:98:c3:f9:b4:6a:9f:d8:dd:5a:48: f1:57:3e:bd:3a:af:e5:8a:90:f4:64:b0:45:6d:fb:7a:58:09: 5e:96:f1:40:fc:c2:6a:83:a2:2b:6b:4d:56:9c:39:16:a9:e4: 01:61:d2:46:c7:6c:36:1b:56:87:50:2f:5c:7e:27:54:3d:6f: 96:85:1d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2p8z6MK8GTl/UU0zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDQyOTA1MDMxOFoXDTI2MDcyODA1MDMxOFowLzEtMCsGA1UEAxMk YzZhM2M5ZjQtODk1ZC00YmU4LWEyYzYtNzFlMDFmYWE0NGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXt4zXOk0nImWt4Bo+yhN8Wz9pzA40mw0KsL VdXCUmwv4DMs0ukZe7eEau6l+pFyCafhKmx9j+OnYPnYLDIiCZ4OZ6l7AIuI0UvB U3mMVGqbukhtfHanZbSjOiXOUPh9MdNsFxKilUKAq+nhHxyOskZ5jmpgSawE9g5f H3xcuWucdK2i2O1/geWd4B9WS7PEUJc5sqwih3LKvnxmhgGUCnkngFGDh9GJ7ue3 mIDUMmzWw3klFyUCYKKoIvsyAAy9aJ6RWuCv7IddFkcF2hBACsDb24ks6PMeMUFN uJ2Wk8CDi14Bx5n6b7RSvkj06wPvCZDTbT2SKGqfIMRmogirAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ5N4vJhBjYSzHH+hsZ6HIy82tPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvNThkY2MyNmEtNzVkYi0z Njk0LTljNjYtMjkwZGRiMWI3ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ5uQwlVEbCzOHC2nvlRlAbTGmf44FV8+Q8XwhOPfy8pkEP5vFlRaAT RQm0VHQFEmoUZgecwS/oIyeQz2EYIs3a9A1mUzVuQUHu6ny1blB9srykiQWv2ZMW vf0yL9iH4U5L+PfS4DhZNuixNbgPiozFYLfuGy5uc+xBC/7tbecxO+1SvXOSX7gD SbB349DwAySqYUpj62KXtaOT1hfcQRHHZ/Ac4eQWrfoPWNpAPRndGOMgF7txR/OD Qpf9mMP5tGqf2N1aSPFXPr06r+WKkPRksEVt+3pYCV6W8UD8wmqDoitrTVacORap 5AFh0kbHbDYbVodQL1x+J1Q9b5aFHa4= -----END CERTIFICATE-----Generated at Wed May 13 05:55:50 2026 by rpki-client