$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa File: aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa (raw, json) Hash identifier: m/X/8EkVA9crkiPJpr0Kv+6WkbLkvQCXRbpKBkQ68WY= Subject key identifier: 41:08:BF:F6:2E:28:BC:5A:DF:5F:A2:E9:66:E1:FC:69:A2:8E:94:7A Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584D2BDA20F13B702DABAA08BFC0 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:20:f1:3b:70:2d:ab:aa:08:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=553f8c8a-b707-4494-a8d7-220cda84c8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:db:32:6d:39:55:47:2a:5d:a4:a9:9c:a9:10: c9:eb:4f:6c:4a:6b:9f:e6:f2:07:3b:fd:b2:c3:87: 63:c2:54:8b:c8:a3:33:dd:55:e0:d5:44:99:0f:2b: 00:30:22:df:26:70:32:a4:73:61:5c:ca:c3:93:7b: 78:44:5f:c8:d7:6d:5b:a6:3f:ef:7f:56:65:ad:d4: 8f:c2:53:48:66:1d:96:14:02:55:ac:aa:90:0f:fa: de:d4:9e:9b:b9:58:ef:29:b0:2f:84:72:dc:82:63: 17:81:ce:24:93:7a:92:41:e0:21:c6:1a:cc:f9:7b: d4:55:a1:16:b6:e9:02:45:be:a0:34:6e:c5:d3:a3: c4:d3:16:8d:31:1e:d6:57:71:2d:9e:f2:8e:12:b3: 0b:76:55:45:02:16:80:1b:a8:84:94:84:2e:7b:7e: 85:7e:36:38:85:4f:5b:d7:0b:a1:08:1c:e6:9d:c6: eb:aa:31:61:09:25:03:84:3b:31:66:9d:33:19:8e: 82:86:70:88:5b:2e:07:a9:58:85:75:b9:72:29:ad: ad:57:f8:25:27:aa:48:53:13:2f:a8:32:59:22:2e: 5d:67:44:d1:04:2f:e4:00:2a:87:d6:e0:05:f8:87: 4b:3f:1a:b9:c7:2c:d2:9b:46:8a:a7:c9:77:ab:91: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:08:BF:F6:2E:28:BC:5A:DF:5F:A2:E9:66:E1:FC:69:A2:8E:94:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0c:95:9e:78:7f:5b:65:f8:ae:da:4c:42:43:99:17:e6:03: 7d:30:2a:27:cd:88:bb:9a:19:a2:06:d6:df:2b:81:71:b0:1c: 05:57:ef:b3:a4:56:af:7a:d9:3f:45:c2:33:ed:39:13:90:29: 0b:68:82:dd:b6:a4:ea:da:21:22:c9:29:08:1b:d8:45:c1:0f: 1f:61:00:17:f1:a2:76:ab:ce:c9:0e:de:3d:8d:18:ec:67:03: 38:15:ba:09:84:8f:7a:f3:0d:19:b1:5e:5b:53:ab:cd:f2:8e: 04:4f:25:e4:d4:ee:52:d5:0b:8a:a6:47:07:ea:6a:1c:8d:f4: f9:be:6b:9a:08:b5:3a:b1:ec:6d:f3:ce:91:f8:c8:04:c6:6c: 3b:96:76:c9:9e:0c:ed:d6:41:af:5b:83:3f:4d:a9:af:76:98: f8:28:84:bf:4e:53:33:5e:c6:39:40:54:57:65:f0:e2:dd:87: ee:8d:00:e7:c2:bc:3d:8e:d9:d4:3c:9d:31:85:10:0c:ff:07: d4:d1:ad:38:74:07:3f:9f:78:c8:17:84:c7:a6:8a:4f:79:fe: c3:94:66:18:ac:f9:c8:f2:24:20:45:5f:8d:f2:08:d8:94:a1: 8a:2c:65:7f:63:89:2a:5f:69:06:e4:a6:6a:73:9a:d7:90:7f: 89:66:e8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iDxO3Atq6oIv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NTUzZjhjOGEtYjcwNy00NDk0LWE4ZDctMjIwY2RhODRjOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tsybTlVRypdpKmcqRDJ609sSmuf5vIHO/2y w4djwlSLyKMz3VXg1USZDysAMCLfJnAypHNhXMrDk3t4RF/I121bpj/vf1ZlrdSP wlNIZh2WFAJVrKqQD/re1J6buVjvKbAvhHLcgmMXgc4kk3qSQeAhxhrM+XvUVaEW tukCRb6gNG7F06PE0xaNMR7WV3EtnvKOErMLdlVFAhaAG6iElIQue36FfjY4hU9b 1wuhCBzmncbrqjFhCSUDhDsxZp0zGY6ChnCIWy4HqViFdblyKa2tV/glJ6pIUxMv qDJZIi5dZ0TRBC/kACqH1uAF+IdLPxq5xyzSm0aKp8l3q5GM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEIv/YuKLxa31+i6Wbh/GmijpR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYWVhMjQ2ZGQtZjAyZS0z ZTUyLTgxODctZjFjZjI3MjJjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQMlZ54f1tl+K7aTEJDmRfmA30wKifNiLuaGaIG1t8rgXGwHAVX77Ok Vq962T9FwjPtOROQKQtogt22pOraISLJKQgb2EXBDx9hABfxonarzskO3j2NGOxn AzgVugmEj3rzDRmxXltTq83yjgRPJeTU7lLVC4qmRwfqahyN9Pm+a5oItTqx7G3z zpH4yATGbDuWdsmeDO3WQa9bgz9Nqa92mPgohL9OUzNexjlAVFdl8OLdh+6NAOfC vD2O2dQ8nTGFEAz/B9TRrTh0Bz+feMgXhMemik95/sOUZhis+cjyJCBFX43yCNiU oYosZX9jiSpfaQbkpmpzmteQf4lm6Jc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:03 2026 by rpki-client