$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/86afe46f-92b0-3f6d-b76a-58733977e040.roa File: 86afe46f-92b0-3f6d-b76a-58733977e040.roa (raw, json) Hash identifier: NDRNlvW6CtdJsTaybQ+nZvzoQVp14LlwvolFeqySOa0= Subject key identifier: 1D:1E:E4:19:12:FD:69:06:56:75:E7:2A:65:81:1D:05:9A:48:AD:34 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F2C225B10700C251F28B35E80 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/86afe46f-92b0-3f6d-b76a-58733977e040.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 46873 IP address blocks: 68.233.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5b:10:70:0c:25:1f:28:b3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=e904f5a2-2beb-4163-8aac-8d78e4b3fb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:7d:78:d8:36:67:aa:d3:61:4c:bd:2e:bd: 1f:88:0b:18:34:e6:c8:32:1e:48:40:17:c0:14:bc: be:7a:99:85:29:7d:9c:fc:4c:9f:4c:a1:5f:55:83: 04:6b:d8:f2:d4:4c:b3:f5:7c:3c:f9:ca:d0:6d:72: de:32:ce:5c:d8:c6:98:31:94:52:41:2c:38:ec:91: 51:02:e2:47:3b:79:67:cc:e6:e8:1a:b1:6d:db:f7: a4:fc:5e:f5:39:4f:98:c3:e0:ec:8e:64:39:69:99: c4:a6:da:9e:a4:d8:b2:b9:ad:c5:86:ff:82:1d:b1: 7d:51:e9:40:61:97:d9:3e:50:38:71:e4:bc:4e:ef: 71:80:c2:1f:9c:8e:1e:88:93:b5:61:8b:74:bf:7a: 0a:8f:5b:1f:dc:80:d8:99:4d:82:82:ad:0e:cd:a1: b1:96:67:96:6c:1f:ea:eb:74:ce:26:0a:30:13:b6: b3:c6:a0:97:c1:b0:21:b0:c1:cf:c9:8b:86:78:cc: 28:88:81:ba:b7:d2:9c:4f:58:4f:28:f0:a2:db:6e: 31:c1:44:8e:8d:6a:6e:a9:63:f5:a5:e3:8f:5a:5d: 63:1e:20:59:1a:53:40:8b:f8:3e:d0:53:cf:7b:70: ad:cb:74:bd:02:4b:7d:fe:e4:87:15:fe:91:6b:7e: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:E4:19:12:FD:69:06:56:75:E7:2A:65:81:1D:05:9A:48:AD:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/86afe46f-92b0-3f6d-b76a-58733977e040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:68:de:a6:53:d4:0c:17:4a:dd:41:cb:73:3d:78:a6:61:a4: d5:b4:65:ae:b6:48:b8:e1:04:60:6b:54:ab:94:e5:c6:37:89: 02:36:7b:f0:d8:79:b9:84:c1:ac:27:2b:da:be:9d:02:49:c7: 2c:7b:86:c0:9a:57:83:01:aa:39:bf:89:ee:6d:be:c7:05:77: 22:81:28:8c:ca:5f:29:06:71:ab:73:aa:cb:0f:f8:3d:30:7c: 02:85:09:41:07:d2:e0:49:b1:d2:7d:25:d1:e9:c2:d6:9e:47: 9d:49:dd:ef:1b:bc:48:eb:c3:47:8a:83:61:5f:0e:02:c4:e3: 78:c5:62:9f:28:12:14:37:64:de:db:bd:b2:9f:08:8c:35:18: 5b:f4:d3:91:a1:8b:6e:71:5e:46:55:71:38:58:85:15:08:47: 03:ad:94:51:f9:8a:77:66:89:32:27:7b:52:80:81:78:b2:7c: 00:0b:86:91:c6:10:9d:93:6b:4d:76:60:7c:d4:cb:0d:28:f0: e4:cc:ec:7c:bb:9d:7e:45:33:0f:20:d3:4a:c6:34:58:e3:45: a0:59:8f:72:a7:ed:b8:6e:aa:3a:4c:16:92:5d:7b:a9:55:1a: 31:db:cd:48:ac:f3:29:f9:5e:c0:5d:e8:43:02:d8:e4:39:9c: 48:99:a8:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIlsQcAwlHyizXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTkwNGY1YTItMmJlYi00MTYzLThhYWMtOGQ3OGU0YjNmYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1119eNg2Z6rTYUy9Lr0fiAsYNObIMh5IQBfA FLy+epmFKX2c/EyfTKFfVYMEa9jy1Eyz9Xw8+crQbXLeMs5c2MaYMZRSQSw47JFR AuJHO3lnzOboGrFt2/ek/F71OU+Yw+DsjmQ5aZnEptqepNiyua3Fhv+CHbF9UelA YZfZPlA4ceS8Tu9xgMIfnI4eiJO1YYt0v3oKj1sf3IDYmU2Cgq0OzaGxlmeWbB/q 63TOJgowE7azxqCXwbAhsMHPyYuGeMwoiIG6t9KcT1hPKPCi224xwUSOjWpuqWP1 peOPWl1jHiBZGlNAi/g+0FPPe3Cty3S9Akt9/uSHFf6Ra34+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0e5BkS/WkGVnXnKmWBHQWaSK00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvODZhZmU0NmYtOTJiMC0z ZjZkLWI3NmEtNTg3MzM5NzdlMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBo3qZT1AwXSt1By3M9eKZhpNW0Za62SLjhBGBrVKuU5cY3iQI2e/DY ebmEwawnK9q+nQJJxyx7hsCaV4MBqjm/ie5tvscFdyKBKIzKXykGcatzqssP+D0w fAKFCUEH0uBJsdJ9JdHpwtaeR51J3e8bvEjrw0eKg2FfDgLE43jFYp8oEhQ3ZN7b vbKfCIw1GFv005Ghi25xXkZVcThYhRUIRwOtlFH5indmiTIne1KAgXiyfAALhpHG EJ2Ta012YHzUyw0o8OTM7Hy7nX5FMw8g00rGNFjjRaBZj3Kn7bhuqjpMFpJde6lV GjHbzUis8yn5XsBd6EMC2OQ5nEiZqEI= -----END CERTIFICATE-----Generated at Mon Sep 21 20:34:34 2026 by rpki-client