$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa File: 58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa (raw, json) Hash identifier: IfpLk5BiU1cl/oZ1rlaOacl15Vi71eVcEuFS8RTkuNo= Subject key identifier: 45:5D:06:2F:81:FF:F9:AC:18:43:65:3D:5F:37:0D:26:2C:98:3D:98 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F2C225CD62621767421356540 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 46873 IP address blocks: 68.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5c:d6:26:21:76:74:21:35:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=71187966-f182-4651-a9de-97d84ce1a2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:80:e9:98:35:d8:69:5e:2d:27:d2:0e:93:91: 93:ba:48:04:dc:e9:b7:01:ec:4d:3a:ca:f7:78:a6: 69:c9:08:91:61:08:91:24:5a:e0:31:77:ec:27:05: c0:29:fa:a7:3a:f9:93:74:71:09:03:a7:34:da:5e: e9:27:7a:d7:06:c9:73:1f:75:3e:54:aa:be:18:c3: 51:62:77:23:50:24:9b:34:18:1d:71:3c:ff:a4:3d: 1c:06:f7:ac:32:bb:56:9c:dd:bc:af:9c:ac:c0:9e: 81:87:1c:a2:16:4b:2f:b3:7d:44:46:50:04:e3:36: b3:37:25:d2:24:0f:6d:6d:7b:5c:3d:3f:cf:50:d8: f7:ad:d1:64:eb:63:17:12:b8:3d:7d:4c:77:aa:ed: 24:95:b3:72:7f:6e:ba:72:7a:9a:27:21:51:7d:41: 86:41:3a:3d:59:a7:fc:63:71:e3:86:ff:a8:42:1a: c0:5a:5f:ba:d3:e2:09:1c:c8:aa:86:25:2a:2a:4c: b9:ae:a1:0c:8a:84:b8:b5:9d:e4:22:e1:69:16:e5: 00:46:8f:e6:3e:dd:20:d0:b9:7b:78:d0:e8:d5:0d: 01:33:e3:b6:aa:fe:fe:17:b1:9a:33:0e:3b:24:84: e4:23:7a:d5:63:a1:bf:ed:48:ff:97:57:a5:ef:cb: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5D:06:2F:81:FF:F9:AC:18:43:65:3D:5F:37:0D:26:2C:98:3D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/58dcc26a-75db-3694-9c66-290ddb1b7e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:15:b9:72:d9:c8:23:00:c6:e8:87:b3:1d:18:db:1e:54:80: 43:a5:8b:54:ff:f8:e9:06:ff:d3:81:24:5f:2f:48:c9:4e:c5: 48:9b:f7:d0:94:7a:46:d4:60:08:dc:45:15:d4:06:f0:45:6e: 6d:6a:19:6b:9a:eb:d4:ba:62:95:4a:b2:96:13:73:38:81:4f: e8:cf:a7:0d:08:1d:0c:4f:83:f4:fd:3f:79:b1:ca:b1:d8:07: 2d:b8:47:f8:dd:0d:77:eb:7f:15:fa:45:ec:ca:3e:a7:13:1c: 30:0b:98:d5:69:ad:89:9f:d9:b3:27:8d:d2:ba:9a:53:80:13: fb:1f:77:61:47:4e:d9:c7:4f:4f:48:6c:4e:38:27:5d:8f:4b: 05:a7:aa:95:70:b6:35:5c:49:69:7f:a1:af:1d:96:87:4a:40: 99:12:28:2b:ef:4f:57:7b:08:dd:2d:89:6b:13:45:ae:9e:ea: 33:10:d9:dd:f9:75:64:f5:7c:32:fe:23:d9:71:d0:72:a0:29: 86:17:a3:f0:57:c7:b4:b4:47:e7:14:b5:9f:f0:7e:46:f4:ae: d8:67:44:3f:d1:49:ba:43:7d:a4:47:78:87:e4:c8:1f:e7:1e: e4:ca:f9:61:6c:41:7b:5e:40:f0:89:b4:29:20:cc:9a:90:2a: e3:a4:2f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIlzWJiF2dCE1ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NzExODc5NjYtZjE4Mi00NjUxLWE5ZGUtOTdkODRjZTFhMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oDpmDXYaV4tJ9IOk5GTukgE3Om3AexNOsr3 eKZpyQiRYQiRJFrgMXfsJwXAKfqnOvmTdHEJA6c02l7pJ3rXBslzH3U+VKq+GMNR YncjUCSbNBgdcTz/pD0cBvesMrtWnN28r5yswJ6BhxyiFksvs31ERlAE4zazNyXS JA9tbXtcPT/PUNj3rdFk62MXErg9fUx3qu0klbNyf266cnqaJyFRfUGGQTo9Waf8 Y3Hjhv+oQhrAWl+60+IJHMiqhiUqKky5rqEMioS4tZ3kIuFpFuUARo/mPt0g0Ll7 eNDo1Q0BM+O2qv7+F7GaMw47JITkI3rVY6G/7Uj/l1el78vNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVdBi+B//msGENlPV83DSYsmD2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvNThkY2MyNmEtNzVkYi0z Njk0LTljNjYtMjkwZGRiMWI3ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsVuXLZyCMAxuiHsx0Y2x5UgEOli1T/+OkG/9OBJF8vSMlOxUib99CU ekbUYAjcRRXUBvBFbm1qGWua69S6YpVKspYTcziBT+jPpw0IHQxPg/T9P3mxyrHY By24R/jdDXfrfxX6RezKPqcTHDALmNVprYmf2bMnjdK6mlOAE/sfd2FHTtnHT09I bE44J12PSwWnqpVwtjVcSWl/oa8dlodKQJkSKCvvT1d7CN0tiWsTRa6e6jMQ2d35 dWT1fDL+I9lx0HKgKYYXo/BXx7S0R+cUtZ/wfkb0rthnRD/RSbpDfaRHeIfkyB/n HuTK+WFsQXteQPCJtCkgzJqQKuOkL2c= -----END CERTIFICATE-----Generated at Mon Sep 21 10:23:13 2026 by rpki-client