$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa File: a1da6f6b-ff4c-320f-ae27-198fcae45575.roa (raw, json) Hash identifier: 0DYyiQgVLH2VKDWM7AhogfUYdB08OFYdgO+AsMqHnYs= Subject key identifier: 8A:2D:B4:66:F8:62:E0:40:76:66:7A:09:46:0B:0B:03:CD:DA:C0:55 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F9BCDD445F9D01A7F1F8445B0 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 68.233.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d4:45:f9:d0:1a:7f:1f:84:45:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=3565ab68-704b-483e-b419-5aaf530e2c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:4d:a7:87:e1:0b:da:e6:59:90:bc:5d:69: e8:32:e3:5c:34:46:f8:a1:12:75:c1:5d:ce:c8:ad: 34:39:3b:d0:e8:9d:1a:ed:51:b1:59:7b:9a:28:a3: c7:fe:97:03:06:f8:4f:8a:97:9b:e1:55:b9:c1:23: 7a:8e:44:eb:09:fc:6e:b0:7c:df:7b:da:fa:e4:9c: 58:20:c2:6f:d4:fe:c3:8e:77:63:dc:b2:3a:cc:35: aa:5a:d7:33:fa:60:57:49:40:5e:4d:7f:95:a6:fc: 90:8b:69:9c:7e:0b:cd:d4:8d:7b:ab:ae:ac:be:88: d9:de:63:5f:9d:8c:c2:dc:b5:dc:8b:d2:8d:03:47: c4:d3:e0:12:9a:06:80:5c:76:3c:61:22:ba:a3:c3: 15:ab:61:6d:8b:6f:5f:e8:b7:78:7c:e1:cb:73:0d: ae:74:52:8d:96:d2:b7:1c:38:39:d1:37:ae:7b:98: 3d:3a:fd:fe:60:01:e2:f2:44:e6:58:0b:08:c0:9a: 6d:6f:74:0b:fd:ab:e5:3b:f9:db:52:31:d9:85:4c: e2:b9:17:63:5e:d9:fc:fc:e7:1a:ca:f1:45:f9:ba: 50:8b:c0:fd:d9:46:6c:4e:10:91:ae:8f:c1:5f:55: 98:14:d8:20:ff:ed:bd:fc:34:e0:07:fb:4e:d9:87: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:B4:66:F8:62:E0:40:76:66:7A:09:46:0B:0B:03:CD:DA:C0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a1da6f6b-ff4c-320f-ae27-198fcae45575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:09:f5:78:6c:8f:84:38:36:da:2a:fd:cf:1c:fc:b2:28:0c: c1:7e:31:c3:d7:9f:e7:3d:68:1b:09:ee:c2:4c:a6:2c:91:7e: 40:d5:d3:cd:c9:d0:f9:82:3f:42:0c:2c:5f:eb:32:53:c3:b2: c6:57:ee:22:78:e8:ac:46:40:b6:69:61:bc:66:5e:99:de:09: c6:6f:d4:e9:cd:2f:b7:42:ec:b3:80:3f:e4:dd:2c:c9:1c:6f: 39:12:3a:d8:22:5c:dd:aa:ab:9e:ab:1b:fa:00:2e:b2:2c:a5: 1e:1d:78:be:cb:54:94:11:02:4c:54:55:f1:2e:cd:0e:14:0c: 63:cd:ac:d4:d6:05:ce:15:c0:e4:3d:c3:15:6d:19:5c:89:5b: 02:2b:02:25:6e:e7:7b:cb:cd:0f:f8:af:85:15:1c:85:98:aa: 87:a5:e4:fb:8a:92:b1:2b:ca:01:63:d5:74:54:d3:e1:c2:b1: 11:ec:20:1b:35:a1:a2:52:f3:c1:e0:aa:9f:0b:22:3a:37:63: bd:51:bb:ef:5d:45:9d:fd:0d:0d:24:9a:08:6f:f8:7c:df:ee: e5:12:d7:51:97:95:9b:c1:a6:73:00:f0:48:b1:09:93:67:f1: 1b:c4:36:16:c3:ae:2c:41:77:d3:16:4e:29:b4:72:54:6b:d3: b5:16:9f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzdRF+dAafx+ERbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MzU2NWFiNjgtNzA0Yi00ODNlLWI0MTktNWFhZjUzMGUyYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BtNp4fhC9rmWZC8XWnoMuNcNEb4oRJ1wV3O yK00OTvQ6J0a7VGxWXuaKKPH/pcDBvhPipeb4VW5wSN6jkTrCfxusHzfe9r65JxY IMJv1P7Djndj3LI6zDWqWtcz+mBXSUBeTX+VpvyQi2mcfgvN1I17q66svojZ3mNf nYzC3LXci9KNA0fE0+ASmgaAXHY8YSK6o8MVq2Fti29f6Ld4fOHLcw2udFKNltK3 HDg50Teue5g9Ov3+YAHi8kTmWAsIwJptb3QL/avlO/nbUjHZhUziuRdjXtn8/Oca yvFF+bpQi8D92UZsThCRro/BX1WYFNgg/+29/DTgB/tO2YfvDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIottGb4YuBAdmZ6CUYLCwPN2sBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTFkYTZmNmItZmY0Yy0z MjBmLWFlMjctMTk4ZmNhZTQ1NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQJ9Xhsj4Q4Ntoq/c8c/LIoDMF+McPXn+c9aBsJ7sJMpiyRfkDV083J 0PmCP0IMLF/rMlPDssZX7iJ46KxGQLZpYbxmXpneCcZv1OnNL7dC7LOAP+TdLMkc bzkSOtgiXN2qq56rG/oALrIspR4deL7LVJQRAkxUVfEuzQ4UDGPNrNTWBc4VwOQ9 wxVtGVyJWwIrAiVu53vLzQ/4r4UVHIWYqoel5PuKkrErygFj1XRU0+HCsRHsIBs1 oaJS88Hgqp8LIjo3Y71Ru+9dRZ39DQ0kmghv+Hzf7uUS11GXlZvBpnMA8EixCZNn 8RvENhbDrixBd9MWTim0clRr07UWn34= -----END CERTIFICATE-----Generated at Sun Oct 25 04:58:01 2026 by rpki-client