$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa File: 39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa (raw, json) Hash identifier: CR+IIxKoly5rIDFGg0i7Y2KTUfomkPdh1yx6w62XZLM= Subject key identifier: AC:0E:45:DE:A5:51:DD:51:04:60:FE:7C:3B:63:31:E0:42:AE:3C:98 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584ED001F078ABEF6B9718FF7880 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 397423 IP address blocks: 68.233.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f0:78:ab:ef:6b:97:18:ff:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=227113dd-ee1b-4c34-9c2a-2e2ba51e7bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:52:8c:9f:79:4a:e7:6d:10:15:dd:80:60: b1:85:de:cb:5d:8e:cf:17:b9:ba:0c:f9:46:36:6f: a8:d3:1f:06:e0:75:23:f4:50:f4:5e:cb:2d:cd:41: 7b:c1:e5:84:e4:3a:5f:a2:ca:3b:fe:9f:b9:a0:7d: 16:ee:bd:d2:e6:20:5c:99:58:da:04:31:34:02:ae: 35:c8:72:a2:c8:4d:b3:23:f7:09:39:86:86:2c:53: 95:95:1c:8e:fd:88:e8:56:33:f0:73:fd:33:d8:9f: dd:e6:64:db:c3:21:15:45:9b:36:4d:be:79:46:dc: 04:f8:37:41:c0:5a:54:ef:55:1f:ba:b4:24:42:ca: a9:8c:d2:ef:bd:ae:36:d8:c1:2e:9b:ee:56:ab:a1: b5:86:37:00:08:6f:15:47:39:25:ef:d2:80:e6:63: 2f:43:9c:4e:7a:ce:16:99:3d:fe:46:71:01:85:85: 51:5d:6e:aa:0b:46:1e:de:53:16:41:58:af:f3:50: 97:06:48:07:a6:27:f8:7b:32:34:45:2f:92:b6:22: 26:74:23:d3:0e:76:98:44:7d:4e:9b:92:e9:04:cf: 8d:93:ad:2d:dd:41:2e:65:03:43:bb:96:3e:29:17: 65:3b:a7:1c:91:05:38:32:86:ec:cf:cb:c9:13:90: 60:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:45:DE:A5:51:DD:51:04:60:FE:7C:3B:63:31:E0:42:AE:3C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:51:d6:dd:9c:75:9e:f9:4a:21:41:cb:42:69:49:ab:36:21: 73:52:69:c0:d7:93:05:f7:69:d4:2e:91:62:e4:ae:af:86:2c: 65:4f:b9:82:f1:5f:93:24:5a:9f:d8:73:6b:ec:ed:aa:cf:ac: 03:4a:b2:49:cc:9a:ab:f0:c0:b9:c6:78:f4:57:9f:16:1c:3c: af:67:9e:03:c6:69:43:9c:9e:0c:4c:99:ea:2a:a4:50:1e:ac: 9c:00:0d:82:b1:38:8c:c7:4b:f1:a6:87:ca:cc:e1:06:02:11: 6c:dd:a6:32:b4:b8:a3:f6:3c:60:c2:e6:c0:b5:6d:41:f3:5d: f2:a8:68:48:90:ed:ab:30:a0:59:45:05:2d:6f:93:a8:3d:5d: 50:20:00:f3:dc:84:65:bc:2d:cf:cc:1f:bb:24:19:16:9d:22: 3e:56:80:f3:82:34:a9:f3:99:94:7c:1d:64:39:78:49:cd:06: 12:40:cc:69:5e:ec:eb:18:1d:ee:bd:1e:54:bd:3c:1f:d7:9f: 60:93:74:4b:f0:dd:b0:8d:a2:27:3e:9f:8a:58:e1:2f:66:1d: 06:48:0b:c1:a8:56:ef:af:94:53:0d:13:dd:b1:15:f7:d8:84: f6:51:7e:ef:fe:e4:ec:a9:c6:9f:ef:19:9e:6e:bd:b3:69:20: 19:29:0d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfB4q+9rlxj/eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjI3MTEzZGQtZWUxYi00YzM0LTljMmEtMmUyYmE1MWU3YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15SjJ95SudtEBXdgGCxhd7LXY7PF7m6DPlG Nm+o0x8G4HUj9FD0XsstzUF7weWE5Dpfoso7/p+5oH0W7r3S5iBcmVjaBDE0Aq41 yHKiyE2zI/cJOYaGLFOVlRyO/YjoVjPwc/0z2J/d5mTbwyEVRZs2Tb55RtwE+DdB wFpU71UfurQkQsqpjNLvva422MEum+5Wq6G1hjcACG8VRzkl79KA5mMvQ5xOes4W mT3+RnEBhYVRXW6qC0Ye3lMWQViv81CXBkgHpif4ezI0RS+StiImdCPTDnaYRH1O m5LpBM+Nk60t3UEuZQNDu5Y+KRdlO6cckQU4Mobsz8vJE5BgGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwORd6lUd1RBGD+fDtjMeBCrjyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMzlkNmEyYjMtYzk3OS0z NjMyLWE0YTctMzRhZDk3YmFhMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZR1t2cdZ75SiFBy0JpSas2IXNSacDXkwX3adQukWLkrq+GLGVPuYLx X5MkWp/Yc2vs7arPrANKsknMmqvwwLnGePRXnxYcPK9nngPGaUOcngxMmeoqpFAe rJwADYKxOIzHS/Gmh8rM4QYCEWzdpjK0uKP2PGDC5sC1bUHzXfKoaEiQ7aswoFlF BS1vk6g9XVAgAPPchGW8Lc/MH7skGRadIj5WgPOCNKnzmZR8HWQ5eEnNBhJAzGle 7OsYHe69HlS9PB/Xn2CTdEvw3bCNoic+n4pY4S9mHQZIC8GoVu+vlFMNE92xFffY hPZRfu/+5Oypxp/vGZ5uvbNpIBkpDWg= -----END CERTIFICATE-----Generated at Sat Sep 5 02:30:57 2026 by rpki-client