$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa File: f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa (raw, json) Hash identifier: HQw4woSTmvf/Y8AWVZ3SOMyQ9+AfyGzwAu7YAu5h3Pw= Subject key identifier: C5:EC:2B:56:15:39:28:2E:69:33:83:11:84:FD:F8:E3:25:79:69:B3 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F49878E8A3572B12BA40B4D40 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397391 IP address blocks: 68.233.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:8e:8a:35:72:b1:2b:a4:0b:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=58815ca0-6be1-4b52-8885-127e90c8e6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:4f:b6:65:d7:b5:6a:ce:ba:21:e9:74:fe: 36:4d:f4:07:8e:57:bf:d3:26:f4:08:4d:84:5a:ac: d8:65:c9:5f:19:03:18:97:62:c1:91:ec:87:63:df: 3b:c9:be:9c:3d:4f:65:c8:18:52:c2:22:1a:ce:71: f5:29:cf:07:9d:89:6a:7c:df:fd:bd:59:f1:0a:73: a8:b6:59:2a:70:de:79:62:e5:3e:f4:a2:21:04:e5: 29:68:a8:ff:f3:88:6e:93:72:52:e4:ba:2a:6c:dd: fb:6b:d0:74:41:e0:ec:b9:99:7e:02:22:c0:35:1e: 5e:e7:50:6a:22:0f:cc:eb:03:aa:9d:96:38:41:aa: dc:40:68:40:0a:31:3d:22:64:9d:37:ac:3e:92:aa: 73:e9:12:8d:03:6b:37:60:8a:e3:68:21:d9:35:f0: 05:84:73:0a:76:be:cd:27:95:3f:e5:c6:cb:19:a9: 26:f6:d1:f5:14:c0:62:4b:13:75:c0:7a:c1:e2:fe: 27:3d:50:40:56:8e:cd:9a:e9:2f:2c:33:73:ff:f9: 12:27:eb:cc:cb:5e:1c:6c:2f:ad:5b:8d:7b:89:6d: d4:2c:9d:3e:ba:85:6c:36:50:23:7f:73:ed:9c:f6: 13:fe:bc:66:54:88:1d:09:04:45:bb:d0:8d:2c:b0: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:2B:56:15:39:28:2E:69:33:83:11:84:FD:F8:E3:25:79:69:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f2:1b:65:48:24:ac:3c:64:86:9d:ec:10:8b:79:6e:23:e9: e2:4a:d2:9f:ca:c1:b0:38:c9:38:e1:89:bf:d9:2e:57:32:eb: 0a:c3:d8:82:a0:99:fe:3a:05:4e:b9:0c:74:87:0c:8c:30:fe: d3:77:e7:94:1e:50:11:e3:45:6f:02:d2:1d:62:5c:ef:22:61: 10:f8:65:e2:ba:ae:5b:9e:72:61:77:60:18:42:ff:67:8b:fa: 58:67:46:2c:8b:a8:fa:ae:c2:a1:c2:bb:e7:97:6c:1a:b9:c6: aa:b4:31:2f:f8:f5:0a:21:f2:a8:4f:e0:92:ed:8e:79:1f:15: 29:b9:2d:c1:23:2c:21:bc:2f:32:c9:82:b6:f9:72:44:0c:77: 2a:9b:a3:81:64:94:cb:8d:19:d1:c9:02:8a:88:bf:83:22:e6: 53:84:e4:c4:26:83:b6:12:a8:9d:e7:2a:d4:42:60:e4:26:36: 15:4e:47:ac:dc:a0:93:09:98:0f:82:0d:5f:d0:fa:4c:b3:d0: 3c:31:36:68:50:4d:47:43:80:23:8b:67:16:f5:29:28:f2:ec: cb:05:a0:b9:e4:51:e9:b3:00:44:62:93:cc:77:fc:58:44:98: 22:d2:5a:b2:31:e8:38:e9:95:dd:cb:0a:bd:05:ff:ea:09:ab: 17:88:be:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh46KNXKxK6QLTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTg4MTVjYTAtNmJlMS00YjUyLTg4ODUtMTI3ZTkwYzhlNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxThPtmXXtWrOuiHpdP42TfQHjle/0yb0CE2E WqzYZclfGQMYl2LBkeyHY987yb6cPU9lyBhSwiIaznH1Kc8HnYlqfN/9vVnxCnOo tlkqcN55YuU+9KIhBOUpaKj/84huk3JS5LoqbN37a9B0QeDsuZl+AiLANR5e51Bq Ig/M6wOqnZY4QarcQGhACjE9ImSdN6w+kqpz6RKNA2s3YIrjaCHZNfAFhHMKdr7N J5U/5cbLGakm9tH1FMBiSxN1wHrB4v4nPVBAVo7NmukvLDNz//kSJ+vMy14cbC+t W417iW3ULJ0+uoVsNlAjf3PtnPYT/rxmVIgdCQRFu9CNLLBAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXsK1YVOSguaTODEYT9+OMleWmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZjA4MjRlMGUtNzFmMS0z NGMyLThjMjItNDMwZmM1YTg0ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILyG2VIJKw8ZIad7BCLeW4j6eJK0p/KwbA4yTjhib/ZLlcy6wrD2IKg mf46BU65DHSHDIww/tN355QeUBHjRW8C0h1iXO8iYRD4ZeK6rluecmF3YBhC/2eL +lhnRiyLqPquwqHCu+eXbBq5xqq0MS/49Qoh8qhP4JLtjnkfFSm5LcEjLCG8LzLJ grb5ckQMdyqbo4FklMuNGdHJAoqIv4Mi5lOE5MQmg7YSqJ3nKtRCYOQmNhVOR6zc oJMJmA+CDV/Q+kyz0DwxNmhQTUdDgCOLZxb1KSjy7MsFoLnkUemzAERik8x3/FhE mCLSWrIx6Djpld3LCr0F/+oJqxeIvlU= -----END CERTIFICATE-----Generated at Fri Sep 25 17:49:06 2026 by rpki-client