$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa File: 7f688b8f-3942-3db6-8392-940669f88020.roa (raw, json) Hash identifier: 47+dtr0lFhBNm1MArSt56c8pzRBDWNq9t+UL2I4uI0c= Subject key identifier: 6E:22:C6:39:E5:46:84:73:9D:12:69:37:9A:CD:CE:61:CF:15:68:53 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584E9384FAF4FBA6F054416DDD00 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 63023 IP address blocks: 68.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:fa:f4:fb:a6:f0:54:41:6d:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=11171c50-4582-4881-975a-9bc50bc959b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:70:62:69:83:ad:99:08:67:16:be:05:6a: 7d:e8:83:5c:80:d6:8a:ce:b8:ec:ba:21:ba:f3:4e: fb:9c:e7:a2:c3:b2:cc:fb:88:8f:73:6c:f1:93:ce: 72:07:cf:9e:30:3b:55:77:8e:ea:04:33:33:a7:11: 7c:c2:7d:b0:09:81:82:4b:11:3b:7a:48:02:63:6b: e5:5d:67:3f:f2:a6:e4:7f:82:ae:14:01:53:c0:a1: 64:6f:20:88:ba:01:95:f0:6d:2c:8b:90:23:2b:bd: ac:01:8c:ba:15:11:0c:ae:cc:56:f7:84:f3:29:86: ef:e6:53:64:df:3e:d3:d6:43:ea:1d:7c:b1:8b:87: 4d:00:48:48:78:a4:f9:9b:96:36:4a:ac:5d:20:0d: c5:57:7b:ef:5d:35:bb:af:03:4f:2d:94:d8:85:8d: 33:4b:d1:ff:13:a3:c9:3f:4a:d4:e8:a5:18:c2:8e: 9d:5a:4f:67:6e:ff:fa:88:fb:49:d4:0c:57:ac:d8: 9f:cb:2a:82:03:f9:0d:2f:77:72:0d:0c:20:15:65: a8:ce:ad:f1:ba:31:40:6d:8b:99:a7:81:0b:b7:1c: 29:77:95:09:a4:44:6c:e5:ee:b0:8f:6f:66:02:73: 2f:5a:1f:77:a9:f6:05:1f:4f:e5:85:6f:d3:f9:37: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:C6:39:E5:46:84:73:9D:12:69:37:9A:CD:CE:61:CF:15:68:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:31:d2:07:cd:0b:ec:72:8f:9d:34:01:1f:d2:4a:61:a0:b4: 3a:04:54:89:e5:f9:02:05:c8:cf:13:27:37:81:a3:35:0d:62: d2:f2:7d:ff:2c:81:21:0f:fe:c3:f4:fc:46:43:af:87:e6:4c: 36:d3:bb:d3:74:87:a9:d3:66:11:5a:eb:11:86:68:2e:02:71: e4:fa:50:4d:9f:c6:c8:ed:f7:34:e8:09:2d:2a:e0:47:a5:1f: 95:8f:6a:11:76:cf:94:7e:7c:cb:81:a6:59:a1:67:3c:9b:54: 43:66:59:88:2d:47:34:08:4c:19:d1:b9:3c:5f:35:55:30:e0: bd:7a:7d:83:12:92:e7:f7:18:5b:49:a0:96:59:5a:4d:37:25: 9f:1f:31:2b:2b:28:9a:b6:b5:74:53:1e:c8:ae:5f:c8:8c:a4: 77:d3:27:2d:e4:10:78:5a:62:8a:87:67:8f:05:7b:b6:2d:51: 31:22:8b:53:99:45:ac:c0:04:20:7f:d8:07:85:97:16:40:61: 05:2c:f3:e9:5e:57:75:5a:7f:be:0f:bb:41:91:fe:97:48:62: 63:3c:21:a6:5a:31:2b:77:8b:df:be:0e:4c:e2:75:a0:3c:fc: 67:c4:1e:ca:13:b9:cb:14:81:26:79:84:0b:2f:d5:0c:87:a8: 34:08:db:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPr0+6bwVEFt3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk MTExNzFjNTAtNDU4Mi00ODgxLTk3NWEtOWJjNTBiYzk1OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQNwYmmDrZkIZxa+BWp96INcgNaKzrjsuiG6 8077nOeiw7LM+4iPc2zxk85yB8+eMDtVd47qBDMzpxF8wn2wCYGCSxE7ekgCY2vl XWc/8qbkf4KuFAFTwKFkbyCIugGV8G0si5AjK72sAYy6FREMrsxW94TzKYbv5lNk 3z7T1kPqHXyxi4dNAEhIeKT5m5Y2SqxdIA3FV3vvXTW7rwNPLZTYhY0zS9H/E6PJ P0rU6KUYwo6dWk9nbv/6iPtJ1AxXrNifyyqCA/kNL3dyDQwgFWWozq3xujFAbYuZ p4ELtxwpd5UJpERs5e6wj29mAnMvWh93qfYFH0/lhW/T+Tfp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4ixjnlRoRznRJpN5rNzmHPFWhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvN2Y2ODhiOGYtMzk0Mi0z ZGI2LTgzOTItOTQwNjY5Zjg4MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcx0gfNC+xyj500AR/SSmGgtDoEVInl+QIFyM8TJzeBozUNYtLyff8s gSEP/sP0/EZDr4fmTDbTu9N0h6nTZhFa6xGGaC4CceT6UE2fxsjt9zToCS0q4Eel H5WPahF2z5R+fMuBplmhZzybVENmWYgtRzQITBnRuTxfNVUw4L16fYMSkuf3GFtJ oJZZWk03JZ8fMSsrKJq2tXRTHsiuX8iMpHfTJy3kEHhaYoqHZ48Fe7YtUTEii1OZ RazABCB/2AeFlxZAYQUs8+leV3Vaf74Pu0GR/pdIYmM8IaZaMSt3i9++DkzidaA8 /GfEHsoTucsUgSZ5hAsv1QyHqDQI2+0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:35:11 2026 by rpki-client