$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa File: f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa (raw, json) Hash identifier: diolzuGJZb+t4gsk7twG+ZZmKhK59HjSL4KxiBMo7jU= Subject key identifier: 3F:61:19:2B:16:68:AA:C3:8F:3F:54:07:3F:EF:CD:26:12:42:51:BC Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584DCF2B19321D01A4CB56856E80 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 397391 IP address blocks: 68.233.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:19:32:1d:01:a4:cb:56:85:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=3b67b38e-c5c5-4ae8-bad4-07f33ee805ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:bc:33:bd:52:66:ab:eb:6d:38:1a:66:93: 68:82:bb:5c:f2:12:ff:50:21:c9:fe:6a:3f:08:ba: 9d:62:cc:18:f8:d9:c2:a5:e3:bb:d4:45:09:19:ec: 60:78:a1:dd:96:70:3a:5e:2e:da:c5:59:66:cb:21: 9e:ce:02:3a:37:1d:4f:2e:99:01:83:8b:75:fb:78: 3e:bd:b5:82:7f:6b:3c:38:66:59:d1:e0:c6:64:5f: 1b:05:b8:dc:c1:9a:fb:e5:b0:55:7b:de:c2:65:c5: 24:38:ec:46:ec:89:0b:2a:03:b4:a2:7b:db:5d:92: 49:f7:dd:2a:b3:e0:74:4e:4c:bb:47:df:33:3f:b9: 80:54:2f:91:05:a7:f3:9e:c4:40:46:7a:7b:9a:d9: 9d:4b:ff:2e:8e:75:69:3e:cd:ab:c2:6f:91:e1:b0: 95:db:1a:ab:e7:d4:e8:b2:cf:e3:8f:8d:d3:34:56: de:14:0a:f7:a7:b7:de:c0:8a:85:b9:1d:f5:86:aa: 6e:6f:d6:cd:77:66:e2:34:bf:50:8b:8a:e9:89:fc: d2:65:e4:20:f4:14:40:fa:db:0b:7a:3a:97:36:f5: 41:f3:2e:33:9b:71:e9:b3:2c:ab:ff:ce:48:b1:b7: 0a:f9:88:81:2e:70:5e:9b:0b:71:da:47:7f:24:99: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:61:19:2B:16:68:AA:C3:8F:3F:54:07:3F:EF:CD:26:12:42:51:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/f0824e0e-71f1-34c2-8c22-430fc5a84d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9c:c6:a0:7a:27:2c:82:0b:cc:0f:f5:0a:7e:b9:c1:72:a8: 4b:a0:40:f3:49:5f:90:40:ef:e5:46:93:d3:d6:7f:8d:37:74: 02:c6:ea:41:7a:39:b5:70:42:5f:a3:e3:6e:f8:e7:5d:4c:2c: 41:f9:75:a3:68:1f:92:64:16:94:95:f6:e9:d2:85:27:e6:b2: cf:1d:f4:81:e7:a0:94:c9:fe:b1:aa:3b:52:ff:14:4e:ce:a2: 1b:94:98:f3:00:ab:79:09:ff:c7:9e:62:69:39:4e:0b:4d:cd: dd:73:18:6d:8e:b9:97:92:71:4c:a9:fe:4b:eb:b4:68:b7:fb: fd:9a:aa:78:89:20:1b:78:90:f4:6a:4c:49:14:21:b2:3c:07: 68:85:3e:e8:47:81:30:d4:e3:11:53:88:a7:0d:8f:09:71:54: 66:74:09:47:fe:e8:e1:73:32:50:1e:51:b2:d5:28:44:2f:17: c0:45:6f:21:71:51:48:76:07:1c:f8:e6:f4:64:ff:c6:81:14: 5f:46:d3:4d:85:6f:5e:9e:a2:a2:1b:3e:fb:c5:8b:bd:1f:18: 94:f1:21:4f:2b:b9:46:7e:2c:81:bf:08:f3:4c:75:4e:d1:ae: 3d:91:ee:0b:73:69:e5:fb:ea:d5:7a:d5:d8:b2:76:8a:3f:4b: 41:b8:6a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxkyHQGky1aFboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk M2I2N2IzOGUtYzVjNS00YWU4LWJhZDQtMDdmMzNlZTgwNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22C8M71SZqvrbTgaZpNogrtc8hL/UCHJ/mo/ CLqdYswY+NnCpeO71EUJGexgeKHdlnA6Xi7axVlmyyGezgI6Nx1PLpkBg4t1+3g+ vbWCf2s8OGZZ0eDGZF8bBbjcwZr75bBVe97CZcUkOOxG7IkLKgO0onvbXZJJ990q s+B0Tky7R98zP7mAVC+RBafznsRARnp7mtmdS/8ujnVpPs2rwm+R4bCV2xqr59To ss/jj43TNFbeFAr3p7fewIqFuR31hqpub9bNd2biNL9Qi4rpifzSZeQg9BRA+tsL ejqXNvVB8y4zm3Hpsyyr/85IsbcK+YiBLnBemwtx2kd/JJkt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9hGSsWaKrDjz9UBz/vzSYSQlG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvZjA4MjRlMGUtNzFmMS0z NGMyLThjMjItNDMwZmM1YTg0ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACScxqB6JyyCC8wP9Qp+ucFyqEugQPNJX5BA7+VGk9PWf403dALG6kF6 ObVwQl+j4274511MLEH5daNoH5JkFpSV9unShSfmss8d9IHnoJTJ/rGqO1L/FE7O ohuUmPMAq3kJ/8eeYmk5TgtNzd1zGG2OuZeScUyp/kvrtGi3+/2aqniJIBt4kPRq TEkUIbI8B2iFPuhHgTDU4xFTiKcNjwlxVGZ0CUf+6OFzMlAeUbLVKEQvF8BFbyFx UUh2Bxz45vRk/8aBFF9G002Fb16eoqIbPvvFi70fGJTxIU8ruUZ+LIG/CPNMdU7R rj2R7gtzaeX76tV61diydoo/S0G4amg= -----END CERTIFICATE-----Generated at Wed May 13 07:30:44 2026 by rpki-client