$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/6f240ec9-4388-3eeb-b1f9-291573049d07.roa File: 6f240ec9-4388-3eeb-b1f9-291573049d07.roa (raw, json) Hash identifier: QMW0DlZsXPvpnU61fFyZL2iWLzr+GlQj1VOG8F2QJE4= Subject key identifier: CD:43:2C:09:14:F3:C3:50:2F:24:76:A2:46:F6:ED:27:CB:57:DC:C5 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F49897AB6F487FAAE95430100 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/6f240ec9-4388-3eeb-b1f9-291573049d07.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397423 IP address blocks: 68.233.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:7a:b6:f4:87:fa:ae:95:43:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=879de24d-c0ec-4614-953e-f39715650a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:63:13:f0:5f:7c:f5:d5:6c:93:1d:e7:3f: 4c:f0:f7:15:f6:b4:e4:20:d6:59:ea:b8:2e:32:43: b9:db:76:ae:1c:11:92:5c:c7:3f:bf:c1:6c:34:2e: ab:74:d3:51:4b:c8:39:c5:42:83:3f:3c:c1:c8:3c: 4a:c2:4c:a2:56:bd:d3:39:38:09:e1:08:71:21:97: d7:c6:a3:cf:0d:60:de:15:c9:40:13:3f:a3:dc:4b: aa:f1:1a:e4:fa:4c:a4:c6:6e:d2:4d:53:46:09:50: 30:39:8b:2f:3d:65:fa:cc:80:34:c1:b1:07:fb:43: 80:e2:c7:9e:d6:d3:67:d7:50:3c:d4:0a:2e:36:4a: 39:0c:4c:dc:c5:84:0d:10:d9:5e:3f:ef:a3:f6:62: 6b:e6:e6:7f:52:f9:35:e4:30:15:38:a9:df:0a:24: 5f:2c:2b:3c:c9:4a:55:7a:7a:fe:75:e1:5c:33:9c: 6c:dc:42:81:81:df:7d:41:55:2b:b9:1d:9d:7c:4a: 8c:47:df:f4:ff:dc:91:94:aa:bf:4e:f8:d2:b2:a6: 9c:ad:48:01:82:ce:14:b1:05:7e:46:fc:0c:f7:1c: aa:a3:0a:7e:80:09:52:53:76:68:cc:e1:61:cd:ce: be:b5:91:b7:5b:44:35:c9:87:cf:db:71:12:ab:2a: c0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:2C:09:14:F3:C3:50:2F:24:76:A2:46:F6:ED:27:CB:57:DC:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/6f240ec9-4388-3eeb-b1f9-291573049d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9b:44:8b:39:04:61:98:2d:28:d1:3a:0a:fc:a8:3c:04:5e: ed:ca:fd:17:af:59:b4:ff:3a:37:48:01:70:9d:2f:9c:61:f5: bc:3d:c9:6b:4d:f5:71:6a:63:13:1e:f5:86:67:1e:5d:5b:ab: 2b:53:7b:ce:da:e3:c7:3e:f5:71:e8:f5:96:c3:1c:4a:4a:11: 8e:a3:d7:ee:88:e0:24:ca:c2:e6:78:82:c1:79:2a:ce:b4:ec: fa:96:91:de:5b:48:de:b6:0c:42:20:71:b3:75:1b:42:fc:f1: ff:8e:85:ea:f6:6f:cd:59:43:1b:cf:2e:94:67:fe:bd:78:4c: d2:09:f8:32:ef:ed:bd:38:85:50:8b:15:49:8f:d4:a3:9a:1c: 78:5b:90:46:9f:7a:90:de:35:ec:38:63:1b:2f:2c:a2:82:f7: 33:c2:39:70:46:34:91:1a:53:b4:3b:02:bf:b9:29:e4:7a:36: 8b:a9:2c:c0:f0:04:02:01:5f:50:9c:9a:f6:2a:33:7d:1a:f4: 86:a1:28:37:37:05:0d:ce:41:02:38:bd:64:b9:f1:be:52:d2: e8:2d:15:05:c5:fa:2d:cc:77:f7:c8:81:df:ed:16:26:f6:9f: b9:1f:3d:dc:eb:9d:c6:0d:74:42:16:a0:a3:e8:cb:16:cd:d4: 35:89:ab:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiXq29If6rpVDAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODc5ZGUyNGQtYzBlYy00NjE0LTk1M2UtZjM5NzE1NjUwYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+pjE/BffPXVbJMd5z9M8PcV9rTkINZZ6rgu MkO523auHBGSXMc/v8FsNC6rdNNRS8g5xUKDPzzByDxKwkyiVr3TOTgJ4QhxIZfX xqPPDWDeFclAEz+j3Euq8Rrk+kykxm7STVNGCVAwOYsvPWX6zIA0wbEH+0OA4see 1tNn11A81AouNko5DEzcxYQNENleP++j9mJr5uZ/Uvk15DAVOKnfCiRfLCs8yUpV enr+deFcM5xs3EKBgd99QVUruR2dfEqMR9/0/9yRlKq/TvjSsqacrUgBgs4UsQV+ RvwM9xyqowp+gAlSU3ZozOFhzc6+tZG3W0Q1yYfP23ESqyrAKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1DLAkU88NQLyR2okb27SfLV9zFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvNmYyNDBlYzktNDM4OC0z ZWViLWIxZjktMjkxNTczMDQ5ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACebRIs5BGGYLSjROgr8qDwEXu3K/RevWbT/OjdIAXCdL5xh9bw9yWtN 9XFqYxMe9YZnHl1bqytTe87a48c+9XHo9ZbDHEpKEY6j1+6I4CTKwuZ4gsF5Ks60 7PqWkd5bSN62DEIgcbN1G0L88f+Oher2b81ZQxvPLpRn/r14TNIJ+DLv7b04hVCL FUmP1KOaHHhbkEafepDeNew4YxsvLKKC9zPCOXBGNJEaU7Q7Ar+5KeR6NoupLMDw BAIBX1CcmvYqM30a9IahKDc3BQ3OQQI4vWS58b5S0ugtFQXF+i3Md/fIgd/tFib2 n7kfPdzrncYNdEIWoKPoyxbN1DWJqwQ= -----END CERTIFICATE-----Generated at Sun Oct 25 12:37:57 2026 by rpki-client