$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa File: 39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa (raw, json) Hash identifier: ltfopwGpP8MjyW5zqhwXYwYdYv77RD5DW44swdE+6lo= Subject key identifier: 67:98:0A:5C:1C:AF:23:C1:35:57:A8:75:C1:F8:F5:A8:49:5D:00:90 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B8EACE898EDDDF2771D133800 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 397423 IP address blocks: 68.233.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e8:98:ed:dd:f2:77:1d:13:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=303047c0-4510-4ad6-8417-87ad9aac406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:90:46:a2:5a:fd:07:b5:79:d6:b6:bb:7c: 0c:41:5a:56:29:67:d4:0e:b9:b3:b4:ea:27:4a:31: 84:0a:e9:e2:0f:f3:97:10:c7:f1:cc:14:e2:69:6e: c6:85:e9:bc:30:d6:f8:55:ef:25:85:e7:9c:1a:65: 72:14:cf:7c:c3:2c:9c:34:d8:53:fe:0c:d2:47:3b: 5e:c5:c9:a5:e7:d6:85:88:f4:da:d8:fa:7e:e5:9a: b1:f1:d9:a8:0d:ee:73:40:05:3b:9b:34:64:54:35: b1:a5:b8:91:8d:12:d6:05:a1:e5:5c:29:3a:8d:bd: c1:64:3e:21:1b:bf:b4:46:6b:59:21:79:60:7b:21: a6:05:3c:94:b0:3e:e3:a3:ac:09:ad:03:90:35:88: 02:82:fc:f9:10:8c:02:3d:1c:1b:7f:07:26:7f:3d: e1:34:82:80:6d:db:aa:d0:79:69:d2:cd:e7:71:c4: 2c:7f:ed:33:98:99:fd:9d:9c:d9:9f:b1:70:2a:da: 3b:79:d4:f0:b1:a8:d6:58:d5:ad:be:d0:e9:a4:60: ef:33:a1:ac:61:bb:3d:21:5a:fc:e0:f4:08:28:9c: 35:36:fa:04:df:ef:88:a1:09:f7:1a:93:74:c5:2e: 06:b3:e1:2c:dd:68:9a:2e:df:6a:02:9d:83:40:c5: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:98:0A:5C:1C:AF:23:C1:35:57:A8:75:C1:F8:F5:A8:49:5D:00:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:37:42:f7:9e:c9:e1:e4:d8:81:f1:7b:ce:b2:11:49:96:e0: 8d:eb:9f:79:7b:a6:ec:25:a6:eb:e9:13:66:2c:0e:b5:0f:8e: eb:f8:b6:46:6a:74:77:11:65:01:3d:90:54:2b:0b:c9:df:3b: 78:65:07:06:25:3a:db:ae:69:2d:98:f0:c9:23:d0:bc:93:72: fa:f4:1a:53:d3:25:cb:b8:e0:11:ca:ea:d0:ae:22:66:f4:35: b9:56:cc:f7:f2:31:e6:d5:22:db:4f:a7:76:60:f6:95:1d:a4: 6c:de:49:77:cb:c5:1c:7a:c3:41:e2:7a:20:0e:c2:28:ae:04: 14:4e:52:27:18:75:c6:6d:9f:15:79:b8:82:06:6c:36:39:20: 50:be:7f:16:36:a7:81:a8:15:3b:85:d8:8c:11:a9:5d:21:39: aa:9e:ee:76:f5:b2:75:c2:da:d1:ce:ac:f9:1a:97:97:c1:35: f4:3c:9f:8c:fa:c0:a4:53:b2:22:6a:85:17:c5:6e:55:a4:9b: 17:db:9d:b1:66:3e:3f:4a:8d:80:d8:87:0e:df:86:5a:a7:a8: ef:72:5d:bc:45:6b:f3:11:c6:cb:19:8c:5a:40:19:3c:af:d4: 1c:54:30:af:6d:44:21:fc:04:22:1d:9f:bb:82:b2:ab:ac:df: a5:84:68:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOiY7d3ydx0TOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MzAzMDQ3YzAtNDUxMC00YWQ2LTg0MTctODdhZDlhYWM0MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm12QRqJa/Qe1eda2u3wMQVpWKWfUDrmztOon SjGECuniD/OXEMfxzBTiaW7Ghem8MNb4Ve8lheecGmVyFM98wyycNNhT/gzSRzte xcml59aFiPTa2Pp+5Zqx8dmoDe5zQAU7mzRkVDWxpbiRjRLWBaHlXCk6jb3BZD4h G7+0RmtZIXlgeyGmBTyUsD7jo6wJrQOQNYgCgvz5EIwCPRwbfwcmfz3hNIKAbduq 0Hlp0s3nccQsf+0zmJn9nZzZn7FwKto7edTwsajWWNWtvtDppGDvM6GsYbs9IVr8 4PQIKJw1NvoE3++IoQn3GpN0xS4Gs+Es3WiaLt9qAp2DQMX5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeYClwcryPBNVeodcH49ahJXQCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMzlkNmEyYjMtYzk3OS0z NjMyLWE0YTctMzRhZDk3YmFhMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU3QveeyeHk2IHxe86yEUmW4I3rn3l7puwlpuvpE2YsDrUPjuv4tkZq dHcRZQE9kFQrC8nfO3hlBwYlOtuuaS2Y8Mkj0LyTcvr0GlPTJcu44BHK6tCuImb0 NblWzPfyMebVIttPp3Zg9pUdpGzeSXfLxRx6w0HieiAOwiiuBBROUicYdcZtnxV5 uIIGbDY5IFC+fxY2p4GoFTuF2IwRqV0hOaqe7nb1snXC2tHOrPkal5fBNfQ8n4z6 wKRTsiJqhRfFblWkmxfbnbFmPj9KjYDYhw7fhlqnqO9yXbxFa/MRxssZjFpAGTyv 1BxUMK9tRCH8BCIdn7uCsqus36WEaDE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:25 2025 by rpki-client