$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7a69ea64-9e10-3866-be1d-7a2297ecb839.roa File: 7a69ea64-9e10-3866-be1d-7a2297ecb839.roa (raw, json) Hash identifier: s8TwaNAwfyacHmVdVcM0F59CgTmwm+3tKnzkCM425UY= Subject key identifier: 6C:19:BC:2E:A6:46:43:42:34:21:9B:FF:CE:FA:13:5C:12:66:13:38 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584DB7703D214310CCEE4734F400 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7a69ea64-9e10-3866-be1d-7a2297ecb839.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 206264 IP address blocks: 68.233.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3d:21:43:10:cc:ee:47:34:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=405d943c-8f98-4951-bac9-f540028e03ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:1b:34:29:17:d7:da:65:31:fb:ea:25:7d: 54:60:4f:eb:3f:40:b8:31:59:4a:7f:db:41:99:de: 78:a1:d8:39:62:e9:ed:8d:d7:b5:84:51:f1:14:a6: ca:51:b9:91:e4:0f:44:6b:95:2e:af:11:ae:27:e4: af:93:ca:0d:77:dd:6e:45:7c:23:9b:e0:68:4a:f1: e3:17:23:e9:bb:fa:c8:a6:14:29:88:80:04:99:3b: fa:43:03:e7:ac:49:1a:28:8f:c6:3f:f8:99:9e:13: 55:43:cc:59:94:3f:3a:b1:d6:4a:e9:07:f7:98:33: ca:2c:0e:95:8c:6d:4d:17:cb:8c:46:01:ee:d0:32: 8c:ba:b6:f2:8d:33:f1:67:db:f0:0e:57:61:60:e9: 22:a8:6d:2e:56:03:61:df:13:7d:72:4b:2b:3d:97: 74:4f:96:bb:03:73:2d:81:2b:07:da:25:e7:0f:b6: d5:22:b8:f8:98:fd:89:01:8f:1e:7d:ee:18:e3:41: 01:12:d6:08:25:f1:f5:c3:6c:40:78:38:74:44:28: 90:4e:01:5a:55:d6:6b:9a:f9:05:7c:be:5b:5c:a0: 4e:5c:10:c8:95:ca:ab:5f:22:c1:51:eb:f7:4f:ab: 39:96:2a:d3:6f:9e:f4:de:d2:8c:34:99:dd:f9:d0: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:19:BC:2E:A6:46:43:42:34:21:9B:FF:CE:FA:13:5C:12:66:13:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7a69ea64-9e10-3866-be1d-7a2297ecb839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0a:19:48:ed:9a:25:34:37:cd:77:79:05:6f:7d:90:b8:a2: 65:e5:85:68:1c:83:43:2d:68:46:ad:16:14:04:06:ff:10:fc: d4:91:ad:09:cd:d2:b2:d6:9c:39:03:4b:ba:75:5e:92:18:99: f4:94:87:ae:39:be:db:7d:6f:ea:d1:26:30:09:6b:c0:18:cb: b1:22:ab:2d:7a:58:c0:df:fb:3b:94:c0:f4:95:59:50:a5:4a: f6:01:22:f5:32:64:e3:89:11:13:dd:ac:33:a1:cd:de:97:eb: ab:d1:12:25:27:92:bc:bc:8b:7f:7b:d8:fc:bd:59:1e:0c:68: 1b:29:ae:88:5e:ad:5c:96:4d:5d:9e:47:90:b7:36:6b:e8:e2: 66:c1:87:0c:da:89:95:f2:6a:6f:09:dd:92:cf:5f:ce:be:78: 33:d4:d0:c2:bb:ee:24:a6:69:ce:a6:01:df:64:80:30:a4:ad: ef:11:58:29:94:35:e0:68:0b:65:45:e6:1f:df:c7:5a:25:ca: 31:6d:2e:e6:a9:d1:2d:c0:91:7f:67:25:89:f3:56:a7:9c:c1: d5:97:7f:6c:e1:32:db:06:7c:10:ff:2c:cc:22:cd:3b:39:a8: 3e:27:37:a0:89:51:27:8b:32:15:c9:69:cf:ee:65:c4:33:36: 8a:72:6b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cD0hQxDM7kc09AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NDA1ZDk0M2MtOGY5OC00OTUxLWJhYzktZjU0MDAyOGUwM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIbNCkX19plMfvqJX1UYE/rP0C4MVlKf9tB md54odg5Yuntjde1hFHxFKbKUbmR5A9Ea5UurxGuJ+Svk8oNd91uRXwjm+BoSvHj FyPpu/rIphQpiIAEmTv6QwPnrEkaKI/GP/iZnhNVQ8xZlD86sdZK6Qf3mDPKLA6V jG1NF8uMRgHu0DKMurbyjTPxZ9vwDldhYOkiqG0uVgNh3xN9cksrPZd0T5a7A3Mt gSsH2iXnD7bVIrj4mP2JAY8efe4Y40EBEtYIJfH1w2xAeDh0RCiQTgFaVdZrmvkF fL5bXKBOXBDIlcqrXyLBUev3T6s5lirTb5703tKMNJnd+dBL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwZvC6mRkNCNCGb/876E1wSZhM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvN2E2OWVhNjQtOWUxMC0z ODY2LWJlMWQtN2EyMjk3ZWNiODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIKGUjtmiU0N813eQVvfZC4omXlhWgcg0MtaEatFhQEBv8Q/NSRrQnN 0rLWnDkDS7p1XpIYmfSUh645vtt9b+rRJjAJa8AYy7Eiqy16WMDf+zuUwPSVWVCl SvYBIvUyZOOJERPdrDOhzd6X66vREiUnkry8i3972Py9WR4MaBsproherVyWTV2e R5C3Nmvo4mbBhwzaiZXyam8J3ZLPX86+eDPU0MK77iSmac6mAd9kgDCkre8RWCmU NeBoC2VF5h/fx1olyjFtLuap0S3AkX9nJYnzVqecwdWXf2zhMtsGfBD/LMwizTs5 qD4nN6CJUSeLMhXJac/uZcQzNopya+Y= -----END CERTIFICATE-----Generated at Wed May 13 06:27:54 2026 by rpki-client