$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/86afe46f-92b0-3f6d-b76a-58733977e040.roa File: 86afe46f-92b0-3f6d-b76a-58733977e040.roa (raw, json) Hash identifier: ufrZ3Ek5eYxtmCp3xYvwQGIh8ysWjvkTeBO4wDX51mA= Subject key identifier: B8:BA:C7:6D:CB:1C:2C:E1:08:8F:4F:35:BE:8A:C9:37:D7:CB:DF:58 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584DA9D72CC79B0887B2EBCE3800 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/86afe46f-92b0-3f6d-b76a-58733977e040.roa Signing time: Wed 29 Apr 2026 04:06:44 +0000 ROA not before: Wed 29 Apr 2026 04:06:44 +0000 ROA not after: Tue 28 Jul 2026 04:06:44 +0000 asID: 46873 IP address blocks: 68.233.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:d7:2c:c7:9b:08:87:b2:eb:ce:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Apr 29 04:06:44 2026 GMT Not After : Jul 28 04:06:44 2026 GMT Subject: CN=f6cf0a37-0390-400f-bfb1-7047cca7b543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:62:4c:0a:00:3a:83:f0:97:98:72:95:eb: 33:c4:67:22:3b:fb:03:82:03:9d:9c:c7:20:a7:f5: dc:41:6e:56:ac:30:9a:65:3f:e2:73:a1:a3:2f:74: c1:f9:81:c3:78:6c:b4:f6:b7:12:af:4f:83:c5:a5: d3:11:e5:71:9e:4e:5e:7c:e6:3d:8a:de:9e:c3:9b: 19:69:7a:61:b5:fc:4c:c8:78:76:dc:4d:df:a5:1e: 2e:29:73:ec:7e:cc:a2:ad:af:1b:44:9c:24:9c:7a: 08:a9:1c:de:75:b8:4f:59:16:f1:61:c1:58:94:bd: 9f:5a:a7:11:89:b4:b4:7d:97:7d:23:96:97:07:ce: 72:3b:f7:8e:cf:e8:52:01:25:d9:78:93:aa:6d:a3: f8:95:63:55:ec:82:c3:e7:a2:be:e9:16:a4:64:26: 29:db:85:e3:c8:f2:ec:93:0a:1e:89:7b:13:c0:5c: 3a:f3:c1:8e:86:ec:ba:85:30:76:cc:16:8f:45:44: d9:d9:90:af:49:9a:48:00:c4:f7:e8:6f:44:28:9e: 4d:7f:97:01:6a:64:6a:85:d6:b7:b7:74:6c:88:3c: df:d3:2e:b9:78:a8:dc:7f:3a:2b:ba:14:a2:72:5b: 95:58:49:f6:17:32:98:bf:47:b0:f9:1f:e3:12:c5: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:C7:6D:CB:1C:2C:E1:08:8F:4F:35:BE:8A:C9:37:D7:CB:DF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/86afe46f-92b0-3f6d-b76a-58733977e040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f0:3c:b5:2d:20:91:c3:13:1b:df:7b:1d:b9:72:79:c2:a7: cf:f6:5d:d3:e6:6e:5c:db:5e:78:72:3a:d5:9f:f7:e3:20:95: ac:dc:92:5a:8c:7d:9c:d3:f0:cc:d1:43:d7:5c:1d:cc:ad:88: 89:6a:e8:54:13:92:fa:30:1a:00:4d:b5:3f:fb:f9:ea:af:be: 4d:75:1c:d9:1e:9b:cc:7d:3c:a4:ba:d2:78:f4:7f:be:cd:e4: 3c:f8:37:db:96:89:28:f7:4f:42:11:65:b6:d9:47:16:ec:48: e9:78:3a:36:ee:a4:e1:e0:b5:85:ea:51:8b:a9:34:a2:00:09: 9d:1f:60:6b:72:b1:00:56:64:2f:f4:e4:f9:06:d9:2a:56:1a: ca:01:51:d1:0f:66:7e:0b:eb:96:4e:40:47:45:3f:33:1e:8d: 87:ad:02:fd:d9:14:25:9f:75:a3:01:58:de:05:88:3f:88:6a: ed:e6:ec:df:99:14:09:23:c2:0f:fa:62:5c:c7:b5:14:1b:44: 92:fa:80:ac:f4:17:8d:0f:96:53:b8:9e:89:b2:c4:58:5a:1b: c8:0b:eb:62:1d:f6:fe:23:4b:47:a4:dd:a1:e7:e2:5d:b8:b1: 6e:25:0a:f1:23:bf:cb:d4:2e:4f:de:3b:46:33:10:74:10:27: bb:e6:d0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2p1yzHmwiHsuvOOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDQyOTA0MDY0NFoXDTI2MDcyODA0MDY0NFowLzEtMCsGA1UEAxMk ZjZjZjBhMzctMDM5MC00MDBmLWJmYjEtNzA0N2NjYTdiNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryhiTAoAOoPwl5hyleszxGciO/sDggOdnMcg p/XcQW5WrDCaZT/ic6GjL3TB+YHDeGy09rcSr0+DxaXTEeVxnk5efOY9it6ew5sZ aXphtfxMyHh23E3fpR4uKXPsfsyira8bRJwknHoIqRzedbhPWRbxYcFYlL2fWqcR ibS0fZd9I5aXB85yO/eOz+hSASXZeJOqbaP4lWNV7ILD56K+6RakZCYp24XjyPLs kwoeiXsTwFw688GOhuy6hTB2zBaPRUTZ2ZCvSZpIAMT36G9EKJ5Nf5cBamRqhda3 t3RsiDzf0y65eKjcfzoruhSicluVWEn2FzKYv0ew+R/jEsWNNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi6x23LHCzhCI9PNb6KyTfXy99YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvODZhZmU0NmYtOTJiMC0z ZjZkLWI3NmEtNTg3MzM5NzdlMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/wPLUtIJHDExvfex25cnnCp8/2XdPmblzbXnhyOtWf9+MglazcklqM fZzT8MzRQ9dcHcytiIlq6FQTkvowGgBNtT/7+eqvvk11HNkem8x9PKS60nj0f77N 5Dz4N9uWiSj3T0IRZbbZRxbsSOl4OjbupOHgtYXqUYupNKIACZ0fYGtysQBWZC/0 5PkG2SpWGsoBUdEPZn4L65ZOQEdFPzMejYetAv3ZFCWfdaMBWN4FiD+Iau3m7N+Z FAkjwg/6YlzHtRQbRJL6gKz0F40PllO4nomyxFhaG8gL62Id9v4jS0ek3aHn4l24 sW4lCvEjv8vULk/eO0YzEHQQJ7vm0Kc= -----END CERTIFICATE-----Generated at Wed May 13 06:58:19 2026 by rpki-client