$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa File: 39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa (raw, json) Hash identifier: vJUctpBE5V1zO7KpnOaxwG7qYzAqZIXLPmd9OXV2Ip0= Subject key identifier: 4C:F2:B3:C1:74:ED:C2:92:7C:61:55:70:25:AC:29:D1:CC:84:96:2B Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584D4D5A701DE84B72E3405AFC80 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 397423 IP address blocks: 68.233.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:70:1d:e8:4b:72:e3:40:5a:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=9754bb16-d2c2-450f-8341-110e19220450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:f5:6b:a2:93:3a:0a:53:f3:70:18:24:02: ac:8e:a7:8a:9b:ab:21:50:c0:78:07:25:de:b9:60: 6f:67:72:16:3c:b5:fe:d9:cd:b0:1d:b9:09:24:9f: 16:0b:26:06:b3:0e:eb:6a:d2:e9:eb:e8:c0:69:7e: 61:dd:5a:4d:0b:10:ff:3e:32:98:76:4b:3f:d9:c9: 3a:69:f3:d0:ce:69:50:b2:31:a7:7d:f7:9e:30:42: 1b:b1:06:97:6c:5d:db:73:9f:4c:36:88:97:37:5a: 19:26:d6:94:e8:a7:44:f8:60:a2:84:33:2c:a8:25: c0:fe:2f:9c:75:38:21:19:09:85:a1:31:5c:21:43: af:4c:57:72:82:e9:d0:9e:8c:7e:a1:25:0f:b4:b7: 56:00:c1:7c:05:22:2b:90:bc:48:e5:2e:66:19:c5: 76:ed:98:ba:2f:14:c9:48:d6:85:d9:8c:6f:28:0f: 81:11:1a:b4:46:15:10:3a:86:c1:f2:9d:bf:50:a3: bc:10:1f:ff:f1:4e:42:cd:f6:19:94:36:d4:e6:57: 37:95:72:a7:2c:e4:6c:e8:4e:a2:92:3a:e3:0c:b1: 25:74:f2:93:78:41:04:60:41:c5:18:31:27:af:4d: 19:59:6a:1a:67:7b:e1:79:f2:95:03:a3:3e:da:b8: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F2:B3:C1:74:ED:C2:92:7C:61:55:70:25:AC:29:D1:CC:84:96:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:47:30:a4:a7:b4:f7:22:2d:22:da:d8:d5:18:d9:fe:54:03: 61:f5:6a:3f:21:01:55:21:e3:04:ce:d3:f9:98:95:5a:d6:61: af:8d:11:13:39:60:ef:94:d9:1c:ef:a0:7f:03:02:58:04:c4: 33:49:df:a9:d2:88:29:f8:ad:a1:4b:1a:27:74:d2:c8:f3:b1: 5b:f7:22:ed:73:76:19:27:68:64:04:6b:66:dd:c8:5f:00:9f: f2:2f:46:44:c3:5b:b6:0f:4c:a8:4b:bf:3d:51:78:ee:30:fc: da:03:7d:ea:c0:2c:fa:91:4d:5d:1b:7c:b1:a1:da:20:92:56: 70:80:f6:a5:94:02:14:d6:fb:db:c0:71:0e:03:5a:bb:d8:73: 44:2a:5f:56:03:7e:f4:69:9b:75:e2:32:a8:b2:2a:7d:39:e4: 26:cf:6c:d5:75:d7:a4:9c:e3:96:ed:5e:f2:60:43:49:6f:2c: 81:14:bc:88:a7:e6:14:eb:5a:bc:94:65:97:c4:01:af:6b:da: 52:46:e2:2a:e8:fc:6f:cc:30:6d:13:f3:db:bd:52:fb:3c:75: 39:c8:2b:03:23:b4:49:2a:ac:c3:40:49:98:a6:95:bd:01:11: 58:05:9c:33:f6:e3:38:24:e2:62:f2:a9:bd:eb:62:2a:ea:90: 33:cf:6f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnAd6Ety40Ba/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTc1NGJiMTYtZDJjMi00NTBmLTgzNDEtMTEwZTE5MjIwNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRj1a6KTOgpT83AYJAKsjqeKm6shUMB4ByXe uWBvZ3IWPLX+2c2wHbkJJJ8WCyYGsw7ratLp6+jAaX5h3VpNCxD/PjKYdks/2ck6 afPQzmlQsjGnffeeMEIbsQaXbF3bc59MNoiXN1oZJtaU6KdE+GCihDMsqCXA/i+c dTghGQmFoTFcIUOvTFdygunQnox+oSUPtLdWAMF8BSIrkLxI5S5mGcV27Zi6LxTJ SNaF2YxvKA+BERq0RhUQOobB8p2/UKO8EB//8U5CzfYZlDbU5lc3lXKnLORs6E6i kjrjDLEldPKTeEEEYEHFGDEnr00ZWWoaZ3vhefKVA6M+2rhqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzys8F07cKSfGFVcCWsKdHMhJYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMzlkNmEyYjMtYzk3OS0z NjMyLWE0YTctMzRhZDk3YmFhMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRHMKSntPciLSLa2NUY2f5UA2H1aj8hAVUh4wTO0/mYlVrWYa+NERM5 YO+U2RzvoH8DAlgExDNJ36nSiCn4raFLGid00sjzsVv3Iu1zdhknaGQEa2bdyF8A n/IvRkTDW7YPTKhLvz1ReO4w/NoDferALPqRTV0bfLGh2iCSVnCA9qWUAhTW+9vA cQ4DWrvYc0QqX1YDfvRpm3XiMqiyKn055CbPbNV116Sc45btXvJgQ0lvLIEUvIin 5hTrWryUZZfEAa9r2lJG4iro/G/MMG0T89u9Uvs8dTnIKwMjtEkqrMNASZimlb0B EVgFnDP24zgk4mLyqb3rYirqkDPPb3w= -----END CERTIFICATE-----Generated at Fri Apr 17 10:04:03 2026 by rpki-client