$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bc323fbd-d533-3405-8194-762e6da21790.roa File: bc323fbd-d533-3405-8194-762e6da21790.roa (raw, json) Hash identifier: e6aX469l0FTCnOyzvSfqSmUsaoHplZo8nBn5tW6zlfA= Subject key identifier: 00:46:FC:E3:D3:EF:3C:5A:A2:AB:88:4C:87:54:02:00:5F:8D:42:87 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F2C225EF4D151F6F8C6D3C380 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bc323fbd-d533-3405-8194-762e6da21790.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 46873 IP address blocks: 68.233.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5e:f4:d1:51:f6:f8:c6:d3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=f9254984-7a51-47ba-8e7f-78cfa4bd7ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:cb:0d:57:bc:1e:b2:6f:c8:4d:23:d4:fa: 95:e6:38:45:70:8a:04:f2:42:a7:40:61:6d:e9:fc: db:3d:27:ff:3d:aa:4e:d5:c1:58:e8:1f:09:c9:26: 26:cc:50:0b:76:c1:aa:55:75:ba:68:d9:00:87:c7: c4:c4:ba:c7:ed:e8:7e:77:85:4a:d1:87:15:fe:4f: 19:43:58:b1:bc:c9:ca:00:09:2b:5a:18:1d:b1:d3: f4:92:96:27:c5:f7:8d:6a:ae:c3:d5:14:f1:30:08: ca:7b:2c:46:05:9d:5f:30:2b:a4:1b:3f:a3:69:46: c1:4d:22:54:c7:07:87:f5:5d:a8:93:e7:0b:f9:84: 16:f6:4a:e4:01:fb:ea:e4:29:96:dd:d3:cc:21:c4: 22:9d:ae:4e:d0:b2:9b:ca:31:15:a3:4c:67:3e:0c: 4e:61:42:17:18:44:1c:8a:19:00:b6:2b:f9:cd:8b: 1e:97:aa:dc:a4:7a:1f:24:52:8a:8b:9a:ba:09:8f: 08:cd:9c:95:d5:59:52:fb:27:c7:ae:cd:cc:8c:cd: bf:f8:2a:5a:26:a3:29:07:51:dd:79:56:22:f3:bc: f0:a8:b9:d7:3b:bc:f2:8b:c9:56:96:ef:9a:9d:ce: db:ef:59:4c:31:64:92:1f:e7:6d:ce:47:65:07:65: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:46:FC:E3:D3:EF:3C:5A:A2:AB:88:4C:87:54:02:00:5F:8D:42:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bc323fbd-d533-3405-8194-762e6da21790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:03:bb:87:c1:cf:d4:fa:60:59:91:45:0b:63:b0:a2:3e:15: 4d:c5:0e:78:a4:21:5b:7f:75:eb:14:71:92:ad:b7:84:8b:b1: 93:5d:88:48:de:bc:c7:05:14:b7:9b:e7:dc:34:40:bf:a5:2e: 03:31:4d:a9:11:91:cc:ee:db:89:63:ea:ca:4f:d2:a5:7c:2b: d0:e1:e2:9d:4f:62:65:6e:94:4c:f2:48:f1:99:ef:af:17:88: d1:c4:b6:b9:9e:ea:a4:2b:3a:ec:bb:84:e0:df:94:0d:95:2d: a0:24:62:b4:6b:d7:07:8b:b5:06:43:8e:cf:9d:93:f8:26:00: 4a:87:06:86:4f:d5:c0:e9:66:e9:b9:04:8b:cb:d0:ea:e4:0f: c2:72:e2:6e:ee:64:e2:78:c4:6c:43:77:72:1c:f4:a6:d5:db: 83:1f:4d:71:08:cd:b2:78:a4:4f:5f:00:3b:f0:29:f6:b0:de: 60:9c:47:e9:a0:48:ea:ed:10:44:c9:91:2e:5f:f9:1d:b1:7e: d2:63:4e:f6:d9:d3:54:f7:6f:49:8f:dd:7e:ef:40:36:6f:be: d8:da:98:8b:b4:82:98:05:6f:32:85:0b:ba:7b:77:6a:e2:29: 65:cd:51:6e:1b:c7:3c:63:b0:34:0d:e2:a6:af:48:31:5f:cd: 85:9f:73:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIl700VH2+MbTw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjkyNTQ5ODQtN2E1MS00N2JhLThlN2YtNzhjZmE0YmQ3Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXvLDVe8HrJvyE0j1PqV5jhFcIoE8kKnQGFt 6fzbPSf/PapO1cFY6B8JySYmzFALdsGqVXW6aNkAh8fExLrH7eh+d4VK0YcV/k8Z Q1ixvMnKAAkrWhgdsdP0kpYnxfeNaq7D1RTxMAjKeyxGBZ1fMCukGz+jaUbBTSJU xweH9V2ok+cL+YQW9krkAfvq5CmW3dPMIcQina5O0LKbyjEVo0xnPgxOYUIXGEQc ihkAtiv5zYsel6rcpHofJFKKi5q6CY8IzZyV1VlS+yfHrs3MjM2/+CpaJqMpB1Hd eVYi87zwqLnXO7zyi8lWlu+anc7b71lMMWSSH+dtzkdlB2WA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABG/OPT7zxaoquITIdUAgBfjUKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYmMzMjNmYmQtZDUzMy0z NDA1LTgxOTQtNzYyZTZkYTIxNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQDu4fBz9T6YFmRRQtjsKI+FU3FDnikIVt/desUcZKtt4SLsZNdiEje vMcFFLeb59w0QL+lLgMxTakRkczu24lj6spP0qV8K9Dh4p1PYmVulEzySPGZ768X iNHEtrme6qQrOuy7hODflA2VLaAkYrRr1weLtQZDjs+dk/gmAEqHBoZP1cDpZum5 BIvL0OrkD8Jy4m7uZOJ4xGxDd3Ic9KbV24MfTXEIzbJ4pE9fADvwKfaw3mCcR+mg SOrtEETJkS5f+R2xftJjTvbZ01T3b0mP3X7vQDZvvtjamIu0gpgFbzKFC7p7d2ri KWXNUW4bxzxjsDQN4qavSDFfzYWfc0k= -----END CERTIFICATE-----Generated at Thu Sep 24 23:19:06 2026 by rpki-client