$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa File: a1da6f6b-ff4c-320f-ae27-198fcae45575.roa (raw, json) Hash identifier: aiEU9y+UC85zU/eYeoGDht9v218DnZkZBNC4FrBSTMk= Subject key identifier: 6C:67:0A:C4:5F:BB:0D:7F:D8:E8:B2:82:B4:FD:8F:FE:94:0E:1F:79 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584D75D53DF87CD42E324F5EE640 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 63023 IP address blocks: 68.233.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:3d:f8:7c:d4:2e:32:4f:5e:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=057c8055-92c3-4958-a9ee-a30ebdd7a44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:7a:38:d8:05:50:26:39:9c:b2:08:36:2f: 0d:ac:8e:57:39:65:e9:fc:25:85:b8:13:46:e6:24: 38:6d:a3:b1:15:6c:51:10:07:93:8d:1e:c7:56:8a: 5a:58:26:9c:84:e2:f9:fc:38:a0:87:16:f0:19:a6: 7e:2d:18:5f:c8:1e:75:4e:99:88:c2:7a:d9:c6:7a: ff:96:1c:1f:2a:c5:59:55:88:c0:06:a7:b3:04:b0: dd:54:29:e6:d5:59:06:64:91:62:c1:8b:08:18:6a: 6d:4c:23:dd:64:1b:f6:ff:84:56:4f:7d:b5:18:74: 8d:ce:32:ec:6a:ed:95:8e:a3:5c:4a:5e:00:de:fd: 3b:f0:99:c5:df:c4:bc:c9:ec:58:24:f5:20:c2:13: 5e:27:bc:5f:7f:af:62:00:c7:a9:b8:3e:1a:06:e7: eb:a2:d4:d5:08:e8:9b:11:83:43:5b:12:5c:e4:f6: 57:bc:c2:9a:6f:e1:15:de:f4:53:00:78:6a:6e:d0: 5d:34:5c:c1:d9:b4:d1:22:46:fc:f4:f1:d8:a9:b2: 19:07:af:cc:f9:aa:1a:47:c9:9d:6a:bd:08:2c:5d: c2:13:de:1f:a5:3d:96:d8:44:8c:55:65:fe:35:4d: e0:7b:28:f1:45:32:43:48:53:c3:9b:14:86:6d:78: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:0A:C4:5F:BB:0D:7F:D8:E8:B2:82:B4:FD:8F:FE:94:0E:1F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:83:b7:3f:f5:bd:d4:00:7e:c4:63:9b:d2:96:cb:ee:86:bd: c0:d5:01:14:4f:f0:2c:c3:49:6a:60:45:51:d1:7c:57:16:dc: a7:52:16:70:2f:93:01:db:1c:8c:84:42:b3:7c:6b:1d:3d:ba: 8c:7a:56:12:2e:b5:5d:81:c0:7d:e5:6c:22:1e:2c:d2:64:8c: e3:da:05:dd:35:e5:84:ef:ca:10:bc:c8:9c:3a:da:32:e8:fe: c0:62:e3:8f:d3:91:de:52:4c:41:1a:0a:7b:2f:7b:2a:36:3b: 3b:8b:d4:72:8e:88:0f:da:12:ae:25:cd:36:5e:78:58:fe:16: d1:bb:7a:56:98:2b:89:57:7a:29:d1:f3:3d:8a:99:0b:93:d5: 4a:c9:fe:4f:47:01:01:f0:f8:76:b4:bf:9c:56:cf:e8:12:aa: aa:00:52:0b:46:9d:be:da:6c:f0:eb:c6:11:5d:08:11:6c:72: 14:1c:27:7f:e7:e1:f7:e0:ea:f3:9d:28:ae:1e:70:cc:e7:58: 96:30:4f:4b:bd:b3:3e:aa:b9:f8:2b:8f:ca:e6:38:a9:8d:34: 6a:98:6b:bc:73:f2:04:c5:b9:8f:aa:29:e4:ff:5b:c8:67:eb: 12:bc:c1:ff:5d:52:52:b8:d6:47:b1:b0:50:6c:f4:b5:45:f2: 7c:1c:77:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111T34fNQuMk9e5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MDU3YzgwNTUtOTJjMy00OTU4LWE5ZWUtYTMwZWJkZDdhNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBV6ONgFUCY5nLIINi8NrI5XOWXp/CWFuBNG 5iQ4baOxFWxREAeTjR7HVopaWCachOL5/DighxbwGaZ+LRhfyB51TpmIwnrZxnr/ lhwfKsVZVYjABqezBLDdVCnm1VkGZJFiwYsIGGptTCPdZBv2/4RWT321GHSNzjLs au2VjqNcSl4A3v078JnF38S8yexYJPUgwhNeJ7xff69iAMepuD4aBufrotTVCOib EYNDWxJc5PZXvMKab+EV3vRTAHhqbtBdNFzB2bTRIkb89PHYqbIZB6/M+aoaR8md ar0ILF3CE94fpT2W2ESMVWX+NU3geyjxRTJDSFPDmxSGbXi57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxnCsRfuw1/2OiygrT9j/6UDh95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTFkYTZmNmItZmY0Yy0z MjBmLWFlMjctMTk4ZmNhZTQ1NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+Dtz/1vdQAfsRjm9KWy+6GvcDVARRP8CzDSWpgRVHRfFcW3KdSFnAv kwHbHIyEQrN8ax09uox6VhIutV2BwH3lbCIeLNJkjOPaBd015YTvyhC8yJw62jLo /sBi44/Tkd5STEEaCnsveyo2OzuL1HKOiA/aEq4lzTZeeFj+FtG7elaYK4lXeinR 8z2KmQuT1UrJ/k9HAQHw+Ha0v5xWz+gSqqoAUgtGnb7abPDrxhFdCBFschQcJ3/n 4ffg6vOdKK4ecMznWJYwT0u9sz6qufgrj8rmOKmNNGqYa7xz8gTFuY+qKeT/W8hn 6xK8wf9dUlK41kexsFBs9LVF8nwcd90= -----END CERTIFICATE-----Generated at Fri Apr 17 10:13:12 2026 by rpki-client