$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa File: 7f688b8f-3942-3db6-8392-940669f88020.roa (raw, json) Hash identifier: XDEDypYwNg9422Xy3JETKHWJT9PkvaHoxbcogJM9v1g= Subject key identifier: 99:A3:8A:67:0C:DB:00:60:32:81:44:F2:34:01:DB:18:6D:22:96:53 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584CD2A1EEA1FCA409059F1C3860 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa Signing time: Wed 11 Feb 2026 02:00:32 +0000 ROA not before: Wed 11 Feb 2026 02:00:32 +0000 ROA not after: Tue 12 May 2026 01:00:32 +0000 asID: 63023 IP address blocks: 68.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:a1:ee:a1:fc:a4:09:05:9f:1c:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Feb 11 02:00:32 2026 GMT Not After : May 12 01:00:32 2026 GMT Subject: CN=854d2317-ec4b-4758-996b-790726cb6a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:b7:69:fd:74:ab:a4:61:1e:71:c7:fc:0e: 01:4d:76:0a:f0:27:bc:db:50:d0:5b:6a:4a:fe:ab: e8:9d:22:ec:a7:87:28:5c:ce:b6:61:1e:ea:83:91: 3c:d8:5e:5f:93:31:8b:61:0b:f5:9c:c9:3f:92:45: f6:43:33:84:ad:69:a0:e2:06:c9:71:1e:0b:1e:5a: b2:69:4d:87:a8:b4:fd:9d:fa:ab:28:32:df:aa:71: 14:3d:24:80:c5:31:b9:c5:cc:f6:ea:0d:cd:ec:73: a5:41:15:a7:8b:1f:60:ba:fc:06:f4:16:89:ee:ab: 04:35:2d:81:a4:f8:58:85:95:b7:51:24:06:4c:cc: 1d:b1:f3:24:e6:bd:43:ed:8c:63:98:70:13:25:d8: 53:c0:98:23:ea:5f:18:b5:60:96:71:4a:cc:af:1d: 40:59:6c:21:08:ed:0f:96:b8:16:49:c1:48:00:22: ca:59:cb:eb:df:e6:f7:54:44:fb:f4:36:34:d9:3b: 26:39:45:e1:b2:a2:7f:77:85:10:3c:ac:cb:96:8b: ad:dc:9c:e0:d1:cb:75:23:4e:1f:81:ba:18:dc:c1: f0:cd:13:82:d6:a4:73:d3:f1:12:77:b6:e3:d0:9b: ec:a2:e0:d8:27:94:6b:4d:49:35:ac:8c:40:2a:56: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A3:8A:67:0C:DB:00:60:32:81:44:F2:34:01:DB:18:6D:22:96:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:91:30:0b:fd:c9:00:ad:0b:56:b2:78:cd:49:42:5d:99:10: 72:b0:08:61:a6:8d:cf:99:03:43:61:b7:64:5c:35:17:d7:f8: 48:6c:a9:bd:89:e1:8a:ae:2c:64:13:e0:ff:7f:be:c5:d1:78: a8:a3:b2:f1:3e:81:df:0a:b8:08:7a:95:e8:0c:5e:55:e9:87: b3:7a:38:a4:76:6f:c7:76:e6:42:61:41:0e:c4:af:9e:3b:fa: 34:ff:42:a1:c1:6e:5b:57:c4:6b:39:da:c3:68:ca:24:d8:64: 8d:f4:d6:3b:0c:00:c9:43:95:88:7f:30:c1:36:50:48:ce:21: 56:7a:4c:27:6a:49:04:48:2d:df:99:2f:fa:b5:b4:38:f8:e8: a5:b4:80:31:84:a9:66:d8:02:78:5c:10:15:a7:14:b4:6d:c2: fa:99:b4:f8:f8:96:d8:81:c1:0d:ae:d6:88:fa:45:28:44:fb: 8c:75:20:17:a7:db:2b:9f:98:c3:91:8d:d6:c0:bb:00:b3:4e: 73:6c:c2:77:13:8c:57:14:1f:ad:c0:ff:25:a7:1a:43:f9:44: 38:52:d2:e0:4d:7d:f5:af:14:58:b3:db:8c:82:f9:02:54:36: b2:8d:5f:3a:32:25:4e:f0:85:ab:d3:79:84:49:3c:4e:c1:f3: e5:ff:89:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoe6h/KQJBZ8cOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk ODU0ZDIzMTctZWM0Yi00NzU4LTk5NmItNzkwNzI2Y2I2YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjy3af10q6RhHnHH/A4BTXYK8Ce821DQW2pK /qvonSLsp4coXM62YR7qg5E82F5fkzGLYQv1nMk/kkX2QzOErWmg4gbJcR4LHlqy aU2HqLT9nfqrKDLfqnEUPSSAxTG5xcz26g3N7HOlQRWnix9guvwG9BaJ7qsENS2B pPhYhZW3USQGTMwdsfMk5r1D7YxjmHATJdhTwJgj6l8YtWCWcUrMrx1AWWwhCO0P lrgWScFIACLKWcvr3+b3VET79DY02TsmOUXhsqJ/d4UQPKzLlout3Jzg0ct1I04f gboY3MHwzROC1qRz0/ESd7bj0JvsouDYJ5RrTUk1rIxAKlakwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmjimcM2wBgMoFE8jQB2xhtIpZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvN2Y2ODhiOGYtMzk0Mi0z ZGI2LTgzOTItOTQwNjY5Zjg4MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqRMAv9yQCtC1ayeM1JQl2ZEHKwCGGmjc+ZA0Nht2RcNRfX+Ehsqb2J 4YquLGQT4P9/vsXReKijsvE+gd8KuAh6legMXlXph7N6OKR2b8d25kJhQQ7Er547 +jT/QqHBbltXxGs52sNoyiTYZI301jsMAMlDlYh/MME2UEjOIVZ6TCdqSQRILd+Z L/q1tDj46KW0gDGEqWbYAnhcEBWnFLRtwvqZtPj4ltiBwQ2u1oj6RShE+4x1IBen 2yufmMORjdbAuwCzTnNswncTjFcUH63A/yWnGkP5RDhS0uBNffWvFFiz24yC+QJU NrKNXzoyJU7whavTeYRJPE7B8+X/iY0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:01 2026 by rpki-client