$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa File: dab11a5e-6bef-369e-9164-020a3598a65b.roa (raw, json) Hash identifier: 4hEdd9P1j2UIRnDOpyxQ/dKuRPn3L6zMHloA+oWtJnE= Subject key identifier: 61:1E:0A:45:6A:85:E7:F7:53:7B:B3:FE:A1:9B:DC:18:F0:54:48:38 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F3E47E51FACF77D85960B8280 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 63023 IP address blocks: 68.233.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e5:1f:ac:f7:7d:85:96:0b:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=22dc20d3-d412-4701-a5ab-13eb08c07be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:61:2b:1e:7f:07:a0:48:0a:85:39:69:db:96: 34:d9:1f:6e:25:b9:79:06:84:da:a6:86:28:ec:b9: 09:ad:f8:cd:76:25:39:fd:d1:ad:1e:92:34:40:cb: 2b:19:59:32:60:96:b0:cf:f6:0c:ad:dc:f9:61:d6: 2c:14:ee:3d:13:97:e9:83:72:7c:51:fc:11:4b:93: 3f:c0:b6:5a:17:56:08:60:d9:d2:b2:44:39:d6:92: 8e:91:ea:31:4a:a1:6d:23:df:d6:98:17:7a:9d:29: 04:20:26:6c:eb:32:d7:3f:6e:de:0e:c4:80:6d:f5: b6:b4:25:eb:d9:f7:c0:54:33:27:9e:49:af:4f:3e: 90:31:7e:c9:d6:80:de:02:1c:1e:d6:c7:b4:1f:59: 4f:c1:ee:ec:32:9e:f5:eb:2a:b9:73:85:97:54:8e: cd:c7:b6:75:ce:75:75:4f:7d:84:a6:94:98:0c:98: c5:b1:bd:ec:08:96:8d:1c:6f:7b:56:87:fc:de:4e: 13:9e:61:db:11:8b:11:66:a1:93:69:46:3a:3e:18: f2:b1:f7:23:b8:3e:98:58:0f:36:b3:d7:c7:e5:66: c3:41:f7:fd:56:7e:a9:c2:f1:80:3b:51:d4:34:6e: ab:45:62:78:e0:c7:7c:a6:11:ae:19:a6:c6:81:bb: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1E:0A:45:6A:85:E7:F7:53:7B:B3:FE:A1:9B:DC:18:F0:54:48:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:01:a3:c9:e3:c6:f0:08:c3:3c:1e:e8:72:fa:f9:fa:e5:12: a5:e0:9a:76:33:b8:75:cf:cf:b7:ed:d0:5e:b6:0c:c7:1f:ee: f1:95:46:91:1f:7d:56:e1:8f:a7:43:41:e5:f0:1d:79:b5:2d: 14:d4:22:8e:d6:c1:78:f2:e4:5c:dc:e4:1b:2e:31:ac:78:d1: 40:21:9f:ec:25:ce:bd:37:1d:69:03:35:9a:64:f8:89:0f:ba: 0f:a9:3a:29:5d:71:02:e7:31:c1:a2:f9:7d:6a:3b:c5:3a:54: 0b:96:ba:83:15:b3:ef:94:fd:be:7e:fa:f6:dd:21:31:eb:44: 0a:5b:21:6e:4b:a8:31:93:d8:8b:b6:78:c8:7a:a5:e9:41:b6: 0f:2a:3e:6c:07:63:3c:29:0a:f9:f1:9b:40:ca:1a:9b:61:f5: c5:2c:6d:51:e9:9b:b5:a8:98:92:d3:29:1c:84:08:6a:a7:2e: 31:5f:1d:de:23:d6:68:fb:25:fb:1f:c9:71:b3:b0:80:15:ca: dd:0f:f1:33:fa:54:3b:97:e5:e3:25:70:01:85:7b:ff:bb:ee: be:19:fa:fe:56:92:4b:cb:96:87:da:02:28:ac:fa:00:b9:d8: 1f:65:f5:fe:6c:bc:24:c1:4e:8e:25:7b:c5:f5:7b:f9:89:db: 88:c7:d4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+UfrPd9hZYLgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjJkYzIwZDMtZDQxMi00NzAxLWE1YWItMTNlYjA4YzA3YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ErHn8HoEgKhTlp25Y02R9uJbl5BoTapoYo 7LkJrfjNdiU5/dGtHpI0QMsrGVkyYJawz/YMrdz5YdYsFO49E5fpg3J8UfwRS5M/ wLZaF1YIYNnSskQ51pKOkeoxSqFtI9/WmBd6nSkEICZs6zLXP27eDsSAbfW2tCXr 2ffAVDMnnkmvTz6QMX7J1oDeAhwe1se0H1lPwe7sMp716yq5c4WXVI7Nx7Z1znV1 T32EppSYDJjFsb3sCJaNHG97Vof83k4TnmHbEYsRZqGTaUY6PhjysfcjuD6YWA82 s9fH5WbDQff9Vn6pwvGAO1HUNG6rRWJ44Md8phGuGabGgbtkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEeCkVqhef3U3uz/qGb3BjwVEg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZGFiMTFhNWUtNmJlZi0z NjllLTkxNjQtMDIwYTM1OThhNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMBo8njxvAIwzwe6HL6+frlEqXgmnYzuHXPz7ft0F62DMcf7vGVRpEf fVbhj6dDQeXwHXm1LRTUIo7WwXjy5Fzc5BsuMax40UAhn+wlzr03HWkDNZpk+IkP ug+pOildcQLnMcGi+X1qO8U6VAuWuoMVs++U/b5++vbdITHrRApbIW5LqDGT2Iu2 eMh6pelBtg8qPmwHYzwpCvnxm0DKGpth9cUsbVHpm7WomJLTKRyECGqnLjFfHd4j 1mj7JfsfyXGzsIAVyt0P8TP6VDuX5eMlcAGFe/+77r4Z+v5WkkvLlofaAiis+gC5 2B9l9f5svCTBTo4le8X1e/mJ24jH1OU= -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:50 2026 by rpki-client