$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa File: 3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa (raw, json) Hash identifier: yu44ebAnwNoctu2hzEjTcB7KhNj4FuiJCIzUNFk7y1U= Subject key identifier: 0B:FA:5D:9B:96:30:BF:D5:E6:D9:DF:51:AF:2F:E6:68:0C:B8:79:95 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F2C225884CBD7EACE35CF3D40 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 46873 IP address blocks: 68.233.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:58:84:cb:d7:ea:ce:35:cf:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=89e74027-5a98-4e31-a70e-3c6877574386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:05:16:cb:c2:b0:0a:40:b6:25:39:ea:bd: 65:cf:73:8f:db:34:d3:dd:84:5a:f4:1a:87:74:e0: 9b:08:b3:fd:70:4e:8f:77:d4:f1:9b:bf:f5:4b:65: 6b:ea:2f:db:5b:39:31:94:54:1b:86:69:25:8e:2a: 29:88:22:4c:a5:e1:b8:54:f7:15:ce:ca:eb:2c:1f: 30:ec:28:69:9a:db:43:b2:c4:7b:58:74:19:c2:15: 2c:8e:6a:f9:98:33:30:a9:f8:c8:24:1c:93:41:d8: 9e:1e:fc:b3:ab:43:22:72:57:16:7a:66:be:be:81: e8:bc:d2:59:4b:fb:15:72:cc:19:b5:70:e2:61:65: 4b:3c:44:8d:a7:d6:53:97:58:b4:5d:0d:b0:7d:31: 3d:a7:73:c1:7b:18:11:81:d7:e7:4e:6d:c0:bf:6d: 84:cb:e2:16:dc:44:f1:3b:53:2a:0b:83:91:4c:1c: 0d:7f:02:7d:7b:ea:19:8e:6b:52:96:2b:df:c3:7d: 6f:ad:08:ac:d5:b2:eb:9c:3d:ae:b1:1b:68:ac:a4: aa:ac:04:0a:3d:29:f6:15:7d:b2:f4:a7:ad:c3:60: 3f:ef:09:46:10:f3:91:78:98:19:bf:06:c5:29:e4: c0:b9:69:ea:64:4e:78:a0:a9:cb:d2:5b:b4:1a:36: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FA:5D:9B:96:30:BF:D5:E6:D9:DF:51:AF:2F:E6:68:0C:B8:79:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/3a9c4ed7-ef0b-33fe-9ec1-c1b72cd8fc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5e:cc:1c:af:73:94:20:02:03:af:ce:cc:71:9b:61:ea:fd: 85:d8:a8:19:6e:1b:60:01:1c:00:22:c9:ae:7c:51:19:a6:a6: 81:b2:0f:3e:5e:67:51:77:4d:de:a4:d1:96:8e:37:d6:f1:cf: b5:2b:09:c6:6a:ee:1c:31:1a:10:3d:9a:c0:b6:e3:7e:d9:46: ce:df:03:47:65:f8:4a:1f:a4:0e:25:26:ac:e8:4a:01:57:8e: 99:38:61:ab:5c:e3:05:7d:c6:59:55:66:d4:84:29:63:b1:3a: f5:e8:c9:b5:81:e1:fa:fc:3b:25:53:d1:8b:a3:0a:bb:ff:77: a0:b9:a0:f2:56:e9:91:34:e8:c0:3a:2e:70:53:ec:f7:de:52: 77:88:e9:af:31:7e:79:78:c4:fa:8a:92:b9:ae:2f:a3:bd:36: 11:e4:61:27:48:88:19:e4:d4:03:ee:df:86:bd:a5:4f:08:e4: ca:a2:74:f3:79:2d:bb:5d:f4:8b:0a:38:98:cb:4d:ac:25:38: 8d:3e:cb:2b:4e:bf:71:90:63:a4:69:f6:92:5d:db:63:28:3a: 15:dd:c6:2e:19:f5:e9:21:b2:75:63:6a:94:53:f4:0f:71:5e: 54:02:bb:dc:71:32:f9:71:9c:47:99:17:d8:dd:00:f7:d0:20: f5:13:68:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIliEy9fqzjXPPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk ODllNzQwMjctNWE5OC00ZTMxLWE3MGUtM2M2ODc3NTc0Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBsFFsvCsApAtiU56r1lz3OP2zTT3YRa9BqH dOCbCLP9cE6Pd9Txm7/1S2Vr6i/bWzkxlFQbhmkljiopiCJMpeG4VPcVzsrrLB8w 7ChpmttDssR7WHQZwhUsjmr5mDMwqfjIJByTQdieHvyzq0MiclcWema+voHovNJZ S/sVcswZtXDiYWVLPESNp9ZTl1i0XQ2wfTE9p3PBexgRgdfnTm3Av22Ey+IW3ETx O1MqC4ORTBwNfwJ9e+oZjmtSlivfw31vrQis1bLrnD2usRtorKSqrAQKPSn2FX2y 9Ketw2A/7wlGEPOReJgZvwbFKeTAuWnqZE54oKnL0lu0GjYGfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAv6XZuWML/V5tnfUa8v5mgMuHmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvM2E5YzRlZDctZWYwYi0z M2ZlLTllYzEtYzFiNzJjZDhmYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARezByvc5QgAgOvzsxxm2Hq/YXYqBluG2ABHAAiya58URmmpoGyDz5e Z1F3Td6k0ZaON9bxz7UrCcZq7hwxGhA9msC2437ZRs7fA0dl+EofpA4lJqzoSgFX jpk4Yatc4wV9xllVZtSEKWOxOvXoybWB4fr8OyVT0YujCrv/d6C5oPJW6ZE06MA6 LnBT7PfeUneI6a8xfnl4xPqKkrmuL6O9NhHkYSdIiBnk1APu34a9pU8I5MqidPN5 Lbtd9IsKOJjLTawlOI0+yytOv3GQY6Rp9pJd22MoOhXdxi4Z9ekhsnVjapRT9A9x XlQCu9xxMvlxnEeZF9jdAPfQIPUTaKA= -----END CERTIFICATE-----Generated at Tue Sep 22 04:11:53 2026 by rpki-client