$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa File: 0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa (raw, json) Hash identifier: 7Zw0TBVchY2aXVyNA10POBvBd0RTqEXyqA2TLNOjPm4= Subject key identifier: E5:58:FA:EF:D1:74:40:D5:C7:D5:F9:46:73:89:CC:7F:AC:91:20:82 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584DAD3086000B8B7583CE3D91E0 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa Signing time: Thu 30 Apr 2026 08:54:11 +0000 ROA not before: Thu 30 Apr 2026 08:54:11 +0000 ROA not after: Wed 29 Jul 2026 08:54:11 +0000 asID: 46873 IP address blocks: 68.233.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:30:86:00:0b:8b:75:83:ce:3d:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 30 08:54:11 2026 GMT Not After : Jul 29 08:54:11 2026 GMT Subject: CN=4a9f3154-8029-46ff-af74-27e0363485c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:23:10:50:41:57:27:c0:2f:1c:c2:8b:74: 6f:7c:2c:be:5f:c3:aa:4b:1d:a4:bd:f7:35:e3:29: 13:46:e0:15:08:d2:ac:29:6d:07:0b:ff:57:45:e2: 38:eb:0d:e2:c0:01:10:af:d1:83:16:d7:23:ff:81: c7:ff:2b:30:a0:fc:c1:1a:0c:0a:33:5c:25:c5:3c: 4b:20:b9:ef:7d:69:32:1d:f6:4b:a8:2b:ea:b4:85: 64:eb:81:25:21:db:f8:b8:b1:73:5e:2b:d7:8f:69: dd:8e:38:1c:aa:70:eb:fc:19:de:22:07:e5:d3:72: fb:34:3a:3e:24:eb:d8:7c:e5:ca:7e:3c:29:6b:9c: 23:d0:55:7b:65:4a:43:2b:5a:51:ba:6b:dd:75:a6: bb:19:3d:62:5d:a6:51:6a:e6:28:6b:31:88:f8:a3: bd:3e:47:8d:6e:1c:d4:80:97:c1:ce:48:c4:22:2f: ec:b9:f3:1d:a5:69:fe:a3:66:75:c0:fa:d6:6f:64: 72:ca:34:77:d6:34:dd:b4:79:e3:79:34:72:41:33: b1:60:d4:01:d2:65:5d:3c:cc:92:47:dd:da:bf:c2: 6f:1a:d5:16:b8:aa:72:d7:5d:88:e9:fe:5f:b9:e2: 99:4c:ce:4c:b9:32:f6:1f:fd:60:cd:7e:1a:fe:ed: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:FA:EF:D1:74:40:D5:C7:D5:F9:46:73:89:CC:7F:AC:91:20:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/0a5d0c45-d92c-324f-a2ac-c36fe3d337ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:99:b9:e6:d1:b0:49:3e:b4:9e:af:b6:0d:b4:65:8e:dc:ca: 39:0c:b3:3f:05:0e:ac:2b:4f:5b:6f:b5:f0:5c:f2:ab:26:b8: 8e:28:bb:5e:ae:f5:31:ae:9a:11:f0:6f:92:4d:2f:9d:94:a3: f2:17:19:a8:b0:04:3f:e1:64:14:14:6e:dc:90:9c:07:cc:b0: cf:94:6e:4a:80:8b:8c:68:56:ba:93:2e:c7:c2:76:e4:87:95: 5f:53:1e:9d:87:22:1a:cb:75:26:48:cb:27:c3:21:9c:62:ad: 06:26:a3:2d:12:fa:23:cb:70:94:63:64:df:87:52:bd:1d:4c: ed:f6:02:1f:3e:b0:6b:f7:46:5e:d4:f6:be:d9:96:18:e2:03: 33:b2:9a:f0:3f:c7:d8:de:05:33:c7:80:02:34:fc:ae:ec:33: d9:cb:61:ad:02:74:c6:72:62:79:74:af:00:43:48:2a:98:53: 9f:02:bd:37:c6:02:07:b0:01:08:7c:be:18:48:cb:8f:70:a5: 91:3b:0c:a3:5d:d1:fd:55:39:b3:fd:6f:be:73:e5:99:fc:5f: fd:26:33:82:6e:f7:06:c4:55:c0:5c:95:cd:33:d9:10:77:ab: 33:d5:74:e1:d0:a7:e5:60:7b:c6:9b:3d:8e:23:e0:27:cb:00: 2a:e7:3e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tMIYAC4t1g849keAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDQzMDA4NTQxMVoXDTI2MDcyOTA4NTQxMVowLzEtMCsGA1UEAxMk NGE5ZjMxNTQtODAyOS00NmZmLWFmNzQtMjdlMDM2MzQ4NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjysjEFBBVyfALxzCi3RvfCy+X8OqSx2kvfc1 4ykTRuAVCNKsKW0HC/9XReI46w3iwAEQr9GDFtcj/4HH/yswoPzBGgwKM1wlxTxL ILnvfWkyHfZLqCvqtIVk64ElIdv4uLFzXivXj2ndjjgcqnDr/BneIgfl03L7NDo+ JOvYfOXKfjwpa5wj0FV7ZUpDK1pRumvddaa7GT1iXaZRauYoazGI+KO9PkeNbhzU gJfBzkjEIi/sufMdpWn+o2Z1wPrWb2RyyjR31jTdtHnjeTRyQTOxYNQB0mVdPMyS R93av8JvGtUWuKpy112I6f5fueKZTM5MuTL2H/1gzX4a/u3PgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVY+u/RdEDVx9X5RnOJzH+skSCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvMGE1ZDBjNDUtZDkyYy0z MjRmLWEyYWMtYzM2ZmUzZDMzN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ZuebRsEk+tJ6vtg20ZY7cyjkMsz8FDqwrT1tvtfBc8qsmuI4ou16u 9TGumhHwb5JNL52Uo/IXGaiwBD/hZBQUbtyQnAfMsM+UbkqAi4xoVrqTLsfCduSH lV9THp2HIhrLdSZIyyfDIZxirQYmoy0S+iPLcJRjZN+HUr0dTO32Ah8+sGv3Rl7U 9r7ZlhjiAzOymvA/x9jeBTPHgAI0/K7sM9nLYa0CdMZyYnl0rwBDSCqYU58CvTfG AgewAQh8vhhIy49wpZE7DKNd0f1VObP9b75z5Zn8X/0mM4Ju9wbEVcBclc0z2RB3 qzPVdOHQp+Vge8abPY4j4CfLACrnPnA= -----END CERTIFICATE-----Generated at Wed May 13 05:55:48 2026 by rpki-client