$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/842a70d7-58aa-3b8c-a2ee-69fe37be4240.roa File: 842a70d7-58aa-3b8c-a2ee-69fe37be4240.roa (raw, json) Hash identifier: cyyRl2R3tTo+IS+QspPeZEXtGwcm+i7y8BOPxdZ0Ivk= Subject key identifier: 54:A7:09:B5:4D:1B:8D:4E:31:9D:2C:EE:CC:2D:E9:3A:CC:8F:9B:81 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584EA787FB2FD39FC55C5E407308 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/842a70d7-58aa-3b8c-a2ee-69fe37be4240.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46873 IP address blocks: 68.233.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:fb:2f:d3:9f:c5:5c:5e:40:73:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2d36fa51-2e22-4042-ba05-a9133c72cdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:2b:db:10:a1:c3:99:b8:aa:3b:d6:d9:2d: e6:99:d0:cf:3c:ef:36:05:36:e0:8d:96:16:d8:11: 2c:81:6c:33:df:0d:31:cf:49:d4:ae:02:40:4d:bb: 9d:0a:bc:51:09:16:3e:8e:12:50:2c:74:67:3d:67: b2:e7:ac:80:90:ed:89:25:bd:c3:9b:43:fc:e9:30: 7b:7c:e7:38:31:2a:aa:cf:fa:62:51:2b:b1:ec:f3: 82:dc:ed:ee:8b:af:d6:59:ed:76:f8:55:fd:33:7a: 18:60:cb:6e:bc:e9:57:da:f0:d1:03:50:51:62:0f: 86:f4:f3:bc:89:ea:fb:a5:55:d8:26:19:2b:25:28: 2a:de:f3:b3:4c:c6:0f:47:7d:1b:3f:5b:2a:6e:f7: 26:a4:91:ec:3b:57:ce:a6:3c:40:fa:a5:93:bb:bc: 90:6a:1a:c5:92:26:31:d2:48:02:db:de:cd:2f:e3: e6:e3:5d:20:b7:bf:f2:74:72:58:fc:22:30:43:95: 49:80:dc:2e:80:c3:99:11:1d:a6:2e:79:bf:73:00: 91:10:e6:ad:2a:2d:a7:65:a1:a8:46:e5:d1:38:81: 7a:65:95:37:73:e3:28:29:06:b7:aa:d3:1b:0a:b7: 8e:06:89:65:1a:be:f1:97:3a:f9:c7:56:7a:23:66: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A7:09:B5:4D:1B:8D:4E:31:9D:2C:EE:CC:2D:E9:3A:CC:8F:9B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/842a70d7-58aa-3b8c-a2ee-69fe37be4240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:09:7d:b9:63:d3:1b:66:4f:ca:6f:b7:e1:74:b7:52:8c:1a: a3:3c:99:f7:80:a9:22:3e:a3:ed:af:f6:50:b5:3f:c9:11:48: 94:4d:14:64:f9:82:2e:e1:a2:5a:ad:ed:4d:44:79:8c:80:7a: ed:8d:fd:42:a9:fc:e1:c0:5e:14:fd:3c:ce:d1:d8:3b:86:73: 53:2a:8e:bd:56:8f:5f:df:2f:bf:51:79:77:de:ab:af:70:cd: db:7d:50:f1:d3:72:ce:33:4a:e7:16:61:f4:f7:3c:be:bc:17: 55:9a:4f:ef:22:b5:06:af:fb:d5:16:f7:78:a1:7f:8f:a8:29: 91:5e:0b:54:7e:bf:e8:d2:b7:c1:95:d1:3f:fe:7a:e5:fd:86: 4c:c8:20:01:6f:fb:c9:42:85:87:c5:99:06:9e:86:4d:db:1e: 26:40:c9:55:fa:4d:4d:d3:be:ad:dd:3b:41:e1:ea:68:e9:42: 98:d6:88:6e:2e:af:9f:55:0e:8e:a3:01:6c:2c:69:86:0c:f4: e7:fc:aa:95:a6:bf:93:80:8b:82:3b:1b:9b:04:b5:30:ad:0c: f3:d7:73:4c:e2:70:a0:9c:96:f8:21:d3:e8:1d:ad:2e:98:b0: 9e:b5:4f:23:8f:c2:f6:00:43:29:42:e7:43:a8:3e:48:4c:81: 35:2f:2b:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/sv05/FXF5AcwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmQzNmZhNTEtMmUyMi00MDQyLWJhMDUtYTkxMzNjNzJjZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI4r2xChw5m4qjvW2S3mmdDPPO82BTbgjZYW 2BEsgWwz3w0xz0nUrgJATbudCrxRCRY+jhJQLHRnPWey56yAkO2JJb3Dm0P86TB7 fOc4MSqqz/piUSux7POC3O3ui6/WWe12+FX9M3oYYMtuvOlX2vDRA1BRYg+G9PO8 ier7pVXYJhkrJSgq3vOzTMYPR30bP1sqbvcmpJHsO1fOpjxA+qWTu7yQahrFkiYx 0kgC297NL+Pm410gt7/ydHJY/CIwQ5VJgNwugMOZER2mLnm/cwCREOatKi2nZaGo RuXROIF6ZZU3c+MoKQa3qtMbCreOBollGr7xlzr5x1Z6I2beswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSnCbVNG41OMZ0s7swt6TrMj5uBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvODQyYTcwZDctNThhYS0z YjhjLWEyZWUtNjlmZTM3YmU0MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwJfblj0xtmT8pvt+F0t1KMGqM8mfeAqSI+o+2v9lC1P8kRSJRNFGT5 gi7holqt7U1EeYyAeu2N/UKp/OHAXhT9PM7R2DuGc1Mqjr1Wj1/fL79ReXfeq69w zdt9UPHTcs4zSucWYfT3PL68F1WaT+8itQav+9UW93ihf4+oKZFeC1R+v+jSt8GV 0T/+euX9hkzIIAFv+8lChYfFmQaehk3bHiZAyVX6TU3Tvq3dO0Hh6mjpQpjWiG4u r59VDo6jAWwsaYYM9Of8qpWmv5OAi4I7G5sEtTCtDPPXc0zicKCclvgh0+gdrS6Y sJ61TyOPwvYAQylC50OoPkhMgTUvK7A= -----END CERTIFICATE-----Generated at Mon Aug 31 09:17:49 2026 by rpki-client