$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa File: a1da6f6b-ff4c-320f-ae27-198fcae45575.roa (raw, json) Hash identifier: 8huic2n9Jj9mpZ4GkRfwxaR3E0nXMz9ZK5DEXWVUj4I= Subject key identifier: E6:39:4A:87:E5:D3:22:F2:14:16:C7:0E:68:E9:97:85:F7:85:94:92 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584C9536F5A8C827DE922844FBC0 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 63023 IP address blocks: 68.233.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:f5:a8:c8:27:de:92:28:44:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=a520d8e7-4e9b-4248-8223-aaee0d95a48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:84:f1:60:15:fc:f9:09:7f:24:e5:4e:b2: 7f:4a:40:fa:6c:cb:cc:31:dc:de:06:db:ee:d2:02: 31:b3:eb:1e:51:30:0f:3c:03:d8:cd:c2:91:4d:c8: 18:9e:f6:f8:b7:ea:89:55:a1:ec:28:c9:fa:89:34: 6e:86:c2:cb:ec:1a:52:ff:71:a0:29:99:e3:56:7e: d7:2d:25:18:c9:a1:66:5c:02:c7:1a:d7:3b:e5:99: 70:55:c7:f4:10:17:33:94:60:b3:94:d3:2d:07:07: ab:38:69:e9:e7:a4:ad:60:13:40:5a:a6:71:73:93: c2:fe:d0:c8:d8:bd:ac:f0:d9:05:da:d4:02:b2:c3: 79:de:14:ad:c3:68:cf:f4:97:33:36:2a:23:09:31: dd:45:f2:83:24:10:77:45:a7:12:0e:60:65:43:19: d5:47:88:14:a0:d7:fa:f1:5b:03:d0:e2:27:43:b7: 87:65:dc:30:93:db:4c:12:27:13:23:5d:b5:b0:42: 51:f6:78:82:cb:a2:55:35:6d:f5:4a:5f:75:31:16: e1:cb:c5:5f:9b:66:7a:80:c5:89:30:80:ac:db:90: 6b:f3:24:c4:c2:3f:44:81:e0:40:6d:48:8b:38:1d: a7:74:a6:f7:9c:95:81:79:2e:a0:cd:4f:8a:8a:28: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:39:4A:87:E5:D3:22:F2:14:16:C7:0E:68:E9:97:85:F7:85:94:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f3:c8:b4:05:b0:cb:c5:57:bf:16:62:68:2a:2f:f2:ee:36: 6d:42:68:8d:0a:ff:8e:fa:e8:b5:4b:48:29:09:13:4f:73:e0: d2:a1:56:35:c9:3b:47:e1:1a:9d:2b:4f:37:ab:31:ea:3f:8d: 76:ea:94:1a:31:17:7e:9f:5e:09:23:fc:73:4a:2b:e2:d6:cd: e1:13:79:7d:ef:24:74:74:4f:95:17:0a:e8:e5:a5:b6:b9:c7: 9c:bd:c7:41:33:7c:3a:52:9f:73:71:95:62:7e:b4:1d:00:41: 6e:af:53:57:dc:c5:a2:e9:53:1d:f0:34:a3:a2:ea:cd:c5:e9: 97:fb:1b:87:73:f5:37:29:25:aa:ad:81:db:0f:b5:3c:83:43: 11:45:83:ad:d9:cd:e9:7f:42:ab:2b:5f:44:5f:6c:ba:11:9a: 70:14:53:e4:92:8c:4e:e3:a4:f3:7c:f4:c3:f3:b8:f4:3c:f5: 20:16:90:74:82:32:6d:6d:10:4e:1f:7c:a7:ec:2a:e9:b9:55: e2:51:08:6d:94:97:f7:27:e8:83:8c:0a:f6:63:66:60:83:bf: 78:56:f1:45:7b:1b:29:93:e0:74:1a:51:82:6e:2e:d3:d3:1b: d2:e2:47:ef:b1:b7:77:b2:e5:1f:76:23:77:c0:de:3d:b1:0f: 22:89:d9:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyVNvWoyCfekihE+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk YTUyMGQ4ZTctNGU5Yi00MjQ4LTgyMjMtYWFlZTBkOTVhNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufyE8WAV/PkJfyTlTrJ/SkD6bMvMMdzeBtvu 0gIxs+seUTAPPAPYzcKRTcgYnvb4t+qJVaHsKMn6iTRuhsLL7BpS/3GgKZnjVn7X LSUYyaFmXALHGtc75ZlwVcf0EBczlGCzlNMtBwerOGnp56StYBNAWqZxc5PC/tDI 2L2s8NkF2tQCssN53hStw2jP9JczNiojCTHdRfKDJBB3RacSDmBlQxnVR4gUoNf6 8VsD0OInQ7eHZdwwk9tMEicTI121sEJR9niCy6JVNW31Sl91MRbhy8Vfm2Z6gMWJ MICs25Br8yTEwj9EgeBAbUiLOB2ndKb3nJWBeS6gzU+KiiikEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY5Sofl0yLyFBbHDmjpl4X3hZSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTFkYTZmNmItZmY0Yy0z MjBmLWFlMjctMTk4ZmNhZTQ1NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPzyLQFsMvFV78WYmgqL/LuNm1CaI0K/4766LVLSCkJE09z4NKhVjXJ O0fhGp0rTzerMeo/jXbqlBoxF36fXgkj/HNKK+LWzeETeX3vJHR0T5UXCujlpba5 x5y9x0EzfDpSn3NxlWJ+tB0AQW6vU1fcxaLpUx3wNKOi6s3F6Zf7G4dz9TcpJaqt gdsPtTyDQxFFg63Zzel/QqsrX0RfbLoRmnAUU+SSjE7jpPN89MPzuPQ89SAWkHSC Mm1tEE4ffKfsKum5VeJRCG2Ul/cn6IOMCvZjZmCDv3hW8UV7GymT4HQaUYJuLtPT G9LiR++xt3ey5R92I3fA3j2xDyKJ2dY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:59:46 2026 by rpki-client