$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa File: aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa (raw, json) Hash identifier: qPdE4ipMOYGxohp85X4VcVw4KjKo6RWpXdiLo0xjaFg= Subject key identifier: 00:20:FA:21:05:58:15:70:A0:44:7E:D9:81:0C:47:A3:2C:4E:B5:12 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F506D547ED2296E218F6B1600 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:7e:d2:29:6e:21:8f:6b:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=378a1ad7-9fd1-4777-adef-b01c50d0bf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:7c:3e:b8:5f:6d:0b:e0:44:33:0f:aa:da: 05:11:b7:22:1e:2c:71:d4:fe:14:61:86:75:3d:05: 90:bb:d4:59:dd:0a:14:ad:50:c5:f4:11:f2:42:7d: 14:81:c6:23:73:b0:2a:02:98:e6:b5:73:f8:30:ab: 23:ec:95:62:b6:b6:36:ce:43:eb:9e:6b:cf:b5:4f: 08:1b:85:e6:4a:7e:78:72:b2:13:76:4a:8e:6f:96: 9f:5e:f3:31:21:97:80:d9:10:8d:f8:e9:ce:c3:78: b0:29:cd:06:56:e6:e5:b7:45:ec:08:9f:b5:83:2e: d3:29:32:d8:3e:29:bd:cf:15:27:32:98:ca:ed:6a: d1:c4:aa:5d:56:49:2b:9c:4b:58:38:bd:a3:9d:a8: d6:93:42:4a:82:b4:e6:20:9c:4b:b2:71:76:38:f6: 6d:f4:4d:3c:82:87:72:6e:43:74:39:6b:2a:16:a2: 9c:70:52:32:0e:9c:03:b1:3f:71:f9:c3:15:1d:77: ad:f9:be:23:af:cc:5d:af:65:8e:a9:37:0b:72:0a: 2e:4d:9e:05:cd:7e:5f:5a:13:83:ac:a1:fe:93:57: dd:2a:97:29:f4:93:af:30:19:05:d5:b5:e2:e3:23: d5:94:84:dd:10:e5:50:7d:64:25:c2:4e:00:0d:20: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:20:FA:21:05:58:15:70:A0:44:7E:D9:81:0C:47:A3:2C:4E:B5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ab:25:76:dc:e8:3b:2c:f9:0f:7f:e3:9e:cb:d5:33:6e:65: fa:73:23:bb:01:74:fe:19:9d:33:4e:b3:92:65:fc:d2:98:92: 7b:bc:11:9e:68:51:1d:f9:77:8f:2d:12:b6:9a:81:38:74:ea: 2e:57:7c:ef:20:03:7d:12:dd:a0:56:ad:a6:80:fd:9e:ca:44: 06:07:e4:ab:2f:28:90:c2:a4:07:f2:8c:94:1b:0c:5b:6a:89: f8:eb:25:86:9a:a5:e0:9c:25:cd:66:89:35:a2:ec:3f:62:ab: f9:f8:6a:24:ac:d8:37:d2:64:57:2e:eb:5e:dc:4e:10:26:d9: 79:0c:96:ab:06:f4:b2:b4:a9:e7:39:82:25:0f:e2:57:2a:11: 57:8a:39:5e:1e:11:88:11:34:70:c1:1f:54:32:32:0b:c1:c5: 1f:b0:c0:ee:d9:26:b1:12:19:b4:49:53:e0:2c:07:94:07:7c: ef:13:62:94:86:a7:e6:ca:93:69:57:a1:83:42:76:25:5c:ed: 8f:84:01:f0:c4:43:6c:66:52:30:5f:42:9f:d9:3b:71:22:80: b9:42:95:61:18:61:f0:98:ca:3c:d3:65:03:ef:d8:1c:5a:d9: 08:ee:16:fb:bb:c9:2b:67:6d:fa:1a:9d:4a:78:09:43:65:81: ff:bd:37:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVR+0iluIY9rFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk Mzc4YTFhZDctOWZkMS00Nzc3LWFkZWYtYjAxYzUwZDBiZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDR8PrhfbQvgRDMPqtoFEbciHixx1P4UYYZ1 PQWQu9RZ3QoUrVDF9BHyQn0UgcYjc7AqApjmtXP4MKsj7JVitrY2zkPrnmvPtU8I G4XmSn54crITdkqOb5afXvMxIZeA2RCN+OnOw3iwKc0GVublt0XsCJ+1gy7TKTLY Pim9zxUnMpjK7WrRxKpdVkkrnEtYOL2jnajWk0JKgrTmIJxLsnF2OPZt9E08gody bkN0OWsqFqKccFIyDpwDsT9x+cMVHXet+b4jr8xdr2WOqTcLcgouTZ4FzX5fWhOD rKH+k1fdKpcp9JOvMBkF1bXi4yPVlITdEOVQfWQlwk4ADSA+eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAg+iEFWBVwoER+2YEMR6MsTrUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYWVhMjQ2ZGQtZjAyZS0z ZTUyLTgxODctZjFjZjI3MjJjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKrJXbc6Dss+Q9/457L1TNuZfpzI7sBdP4ZnTNOs5Jl/NKYknu8EZ5o UR35d48tEraagTh06i5XfO8gA30S3aBWraaA/Z7KRAYH5KsvKJDCpAfyjJQbDFtq ifjrJYaapeCcJc1miTWi7D9iq/n4aiSs2DfSZFcu617cThAm2XkMlqsG9LK0qec5 giUP4lcqEVeKOV4eEYgRNHDBH1QyMgvBxR+wwO7ZJrESGbRJU+AsB5QHfO8TYpSG p+bKk2lXoYNCdiVc7Y+EAfDEQ2xmUjBfQp/ZO3EigLlClWEYYfCYyjzTZQPv2Bxa 2QjuFvu7yStnbfoanUp4CUNlgf+9N5Y= -----END CERTIFICATE-----Generated at Mon Sep 28 21:09:30 2026 by rpki-client