$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa File: f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa (raw, json) Hash identifier: +7KwG8JvOJAOSlTHU3ZgaSoDTc9ddJ9wC/GG6wYTSsU= Subject key identifier: 03:31:91:08:3C:46:3F:00:06:A8:18:5B:9E:FE:72:78:EE:5E:4A:57 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584EA787A6C01C597515D447FB40 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397391 IP address blocks: 68.233.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:a6:c0:1c:59:75:15:d4:47:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fa9e780c-45a8-4799-b1ae-462b6e7ab505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:4f:3e:48:e1:a8:9d:3c:35:c1:9f:d0:2a: b3:95:d9:3a:d0:ea:a1:3c:ed:a0:4a:01:c9:62:95: 84:85:52:b4:38:0b:67:fd:19:97:11:69:5b:63:5b: c9:d8:cf:14:eb:19:98:ab:44:24:51:e1:7e:98:fb: 54:ee:aa:ff:10:99:cc:a9:1f:09:08:cd:74:ce:5d: ef:3f:1c:05:5c:09:0d:f5:35:f7:84:29:62:c4:b1: 55:fa:e5:e6:d5:9d:e0:b6:3c:1f:c7:98:7f:3b:05: 96:e5:fd:79:e9:1a:7f:6d:f6:1d:64:b7:7d:cf:51: bc:38:ab:5b:8f:10:d9:e0:94:ce:f8:a0:36:35:1e: c6:f1:e6:6b:25:87:2e:52:6c:48:1f:af:5e:62:42: 70:ae:e4:24:e1:95:ef:d6:03:05:14:6e:15:7d:09: d6:64:4f:77:ad:cc:0e:c7:35:7d:f4:c6:56:31:64: bb:81:19:90:68:98:74:22:ea:a9:2d:12:35:31:21: 72:36:d5:b7:41:75:c1:3d:9a:b7:0c:79:dc:60:63: 5b:2b:47:da:e2:cc:51:40:9f:57:75:8f:fa:03:01: 7d:8f:17:71:c4:ac:64:4f:35:4b:67:9e:a2:ad:29: 1a:d6:be:72:b1:24:ca:48:40:33:db:8c:94:84:42: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:91:08:3C:46:3F:00:06:A8:18:5B:9E:FE:72:78:EE:5E:4A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:17:25:ca:38:25:33:ed:57:04:6a:75:91:f3:d8:3a:9f:1b: 38:8a:42:cd:7a:0c:36:31:d1:25:75:5b:ba:ab:2e:3f:a6:c3: cb:12:94:5a:91:b7:0e:1f:b4:6a:1f:85:6a:79:85:80:80:57: 1a:6f:37:08:12:9e:17:34:6d:ab:bc:b9:b1:46:e7:87:15:c5: 60:e2:76:ad:6e:61:3b:1b:53:03:b6:0c:67:2d:71:35:b8:a1: ff:8a:63:3e:8a:f6:80:76:74:ee:97:9a:66:4c:5f:6d:f9:1e: a5:b9:52:63:84:40:3f:b8:ef:80:d0:bf:70:2e:1e:ac:be:8b: 21:7b:bb:0a:c9:25:60:84:11:cd:ae:ea:91:02:3a:70:6b:9c: ad:82:a7:e3:40:b9:bf:59:58:ef:cf:7e:42:8b:1f:0a:73:d6: 4d:a9:a6:6b:b6:e4:64:84:96:fd:43:c5:3b:8d:15:06:bb:3e: 81:7d:2e:10:8a:4f:b6:da:35:8a:cb:37:b9:b3:a3:75:ca:c4: 34:2f:01:ea:c1:68:17:28:04:ff:41:95:b5:be:c4:4a:a0:ee: 7d:38:0a:90:56:22:9e:87:c3:19:5e:f0:6f:f9:03:94:ab:62: a7:28:f4:81:74:39:44:18:d1:46:76:1c:cc:eb:46:0d:74:15: 7d:f1:73:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh6bAHFl1FdRH+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmE5ZTc4MGMtNDVhOC00Nzk5LWIxYWUtNDYyYjZlN2FiNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSpPPkjhqJ08NcGf0Cqzldk60OqhPO2gSgHJ YpWEhVK0OAtn/RmXEWlbY1vJ2M8U6xmYq0QkUeF+mPtU7qr/EJnMqR8JCM10zl3v PxwFXAkN9TX3hClixLFV+uXm1Z3gtjwfx5h/OwWW5f156Rp/bfYdZLd9z1G8OKtb jxDZ4JTO+KA2NR7G8eZrJYcuUmxIH69eYkJwruQk4ZXv1gMFFG4VfQnWZE93rcwO xzV99MZWMWS7gRmQaJh0IuqpLRI1MSFyNtW3QXXBPZq3DHncYGNbK0fa4sxRQJ9X dY/6AwF9jxdxxKxkTzVLZ56irSka1r5ysSTKSEAz24yUhEKHAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMxkQg8Rj8ABqgYW57+cnjuXkpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZjA4MjRlMGUtNzFmMS0z NGMyLThjMjItNDMwZmM1YTg0ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMXJco4JTPtVwRqdZHz2DqfGziKQs16DDYx0SV1W7qrLj+mw8sSlFqR tw4ftGofhWp5hYCAVxpvNwgSnhc0bau8ubFG54cVxWDidq1uYTsbUwO2DGctcTW4 of+KYz6K9oB2dO6XmmZMX235HqW5UmOEQD+474DQv3AuHqy+iyF7uwrJJWCEEc2u 6pECOnBrnK2Cp+NAub9ZWO/PfkKLHwpz1k2ppmu25GSElv1DxTuNFQa7PoF9LhCK T7baNYrLN7mzo3XKxDQvAerBaBcoBP9BlbW+xEqg7n04CpBWIp6Hwxle8G/5A5Sr Yqco9IF0OUQY0UZ2HMzrRg10FX3xc5Y= -----END CERTIFICATE-----Generated at Sat Sep 5 01:50:03 2026 by rpki-client