$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa File: 0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa (raw, json) Hash identifier: QHyZ2XoqYhc79XzSbI+d1fsb63KE/PU7boHtAwraueg= Subject key identifier: 9F:71:EC:BD:76:74:51:16:4C:1F:72:F2:46:4D:E3:0B:7B:50:22:26 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F2EED10D7335EBBA4E6382000 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 46873 IP address blocks: 68.233.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:10:d7:33:5e:bb:a4:e6:38:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=6498c07b-a68d-4102-92e8-37a42005dead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:75:ad:54:dd:ff:90:e2:08:b4:fc:6d:cf: 02:02:67:60:ab:d5:1b:e7:36:c1:86:8a:4e:a1:0b: 66:fc:5e:ab:b6:83:a6:90:a7:98:e0:91:23:c8:40: 88:c2:4d:cd:17:db:0a:f3:5d:db:f0:09:68:75:f3: 6e:1f:8e:61:6f:e6:d0:ef:ad:ef:3f:7b:50:e0:f7: 41:5a:26:6b:cb:33:ff:8e:3e:d5:e8:75:7d:7f:08: e6:bd:61:82:6c:fc:32:6e:36:55:21:e4:04:2e:e3: 92:7c:57:92:90:b4:4c:ac:09:ba:01:6d:8a:b5:1f: b8:68:c2:19:0d:62:45:21:c0:31:f3:19:7a:38:fe: d6:cf:fe:39:ea:d4:0a:62:4c:24:99:3e:da:99:da: 5c:4a:8e:d8:e5:c0:98:18:03:20:a9:78:19:6b:b2: e9:b2:f6:02:30:3e:74:ef:40:11:a7:2d:c6:53:0f: 91:5a:8e:ae:af:1c:61:13:6d:aa:cf:c9:50:db:57: e9:d3:dd:da:cc:03:77:60:77:ed:ae:35:99:cf:33: 34:22:fd:a2:22:a4:7f:5a:84:58:bd:ef:61:3b:49: b5:ff:30:26:6f:10:3e:ba:83:ad:bc:d4:3b:a0:b9: ce:a9:41:55:ae:19:07:88:69:f5:6b:1f:8d:4e:0c: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:EC:BD:76:74:51:16:4C:1F:72:F2:46:4D:E3:0B:7B:50:22:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4c:84:9b:e8:b5:4b:ed:b6:8f:94:78:73:92:b1:16:39:45: 68:26:d9:9e:0a:98:1b:e6:0b:66:61:15:3d:fb:f7:6d:7a:9d: 3c:5c:3d:95:85:81:e9:6a:3d:04:89:e9:4d:ad:9b:51:67:5e: 91:02:84:6a:ba:2e:2c:78:e6:d4:bc:72:ae:54:5c:2e:9e:a8: a6:29:2f:37:9f:67:87:0e:aa:cc:f5:82:1f:05:3b:ad:9a:4f: 7d:d6:b2:02:e8:27:4c:4f:df:98:4d:9f:83:a9:08:dd:79:19: b1:0d:4e:8d:07:62:05:59:b6:7f:4c:8a:a5:a1:aa:86:4d:bc: 2a:ff:5d:bc:dd:db:f1:ee:c6:45:7f:9a:e1:47:38:b3:66:e0: 8f:11:71:16:55:49:77:0f:e6:81:8c:67:34:96:2f:a1:dc:63: e5:e2:e8:62:6e:f7:11:2e:2d:c0:86:c4:08:c8:76:eb:25:98: 7b:55:06:03:41:21:ec:81:fa:28:97:2f:14:db:e4:da:5d:c1: ec:1c:e8:36:54:92:4c:9c:cf:d8:d8:b4:85:50:37:34:5e:00: a9:e8:1b:aa:d1:1b:f5:ba:88:1f:df:4e:7e:2e:b3:ff:9d:bf: 1d:6c:20:f9:9c:a1:b0:64:db:24:45:24:92:61:8c:b4:43:2c: 60:c5:2c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RDXM167pOY4IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NjQ5OGMwN2ItYTY4ZC00MTAyLTkyZTgtMzdhNDIwMDVkZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkux1rVTd/5DiCLT8bc8CAmdgq9Ub5zbBhopO oQtm/F6rtoOmkKeY4JEjyECIwk3NF9sK813b8AlodfNuH45hb+bQ763vP3tQ4PdB WiZryzP/jj7V6HV9fwjmvWGCbPwybjZVIeQELuOSfFeSkLRMrAm6AW2KtR+4aMIZ DWJFIcAx8xl6OP7Wz/456tQKYkwkmT7amdpcSo7Y5cCYGAMgqXgZa7LpsvYCMD50 70ARpy3GUw+RWo6urxxhE22qz8lQ21fp093azAN3YHftrjWZzzM0Iv2iIqR/WoRY ve9hO0m1/zAmbxA+uoOtvNQ7oLnOqUFVrhkHiGn1ax+NTgyrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9x7L12dFEWTB9y8kZN4wt7UCImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMGE1ZDBjNDUtZDkyYy0z MjRmLWEyYWMtYzM2ZmUzZDMzN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNMhJvotUvtto+UeHOSsRY5RWgm2Z4KmBvmC2ZhFT379216nTxcPZWF gelqPQSJ6U2tm1FnXpEChGq6Lix45tS8cq5UXC6eqKYpLzefZ4cOqsz1gh8FO62a T33WsgLoJ0xP35hNn4OpCN15GbENTo0HYgVZtn9MiqWhqoZNvCr/Xbzd2/HuxkV/ muFHOLNm4I8RcRZVSXcP5oGMZzSWL6HcY+Xi6GJu9xEuLcCGxAjIduslmHtVBgNB IeyB+iiXLxTb5Npdwewc6DZUkkycz9jYtIVQNzReAKnoG6rRG/W6iB/fTn4us/+d vx1sIPmcobBk2yRFJJJhjLRDLGDFLBg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:40 2026 by rpki-client