$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa File: a20c2df9-68c3-3920-812e-1578e81c4ea6.roa (raw, json) Hash identifier: kdfM2OuCp9Ku6LAaBP/gyx3iOTrVcIKBCBdSbedglq4= Subject key identifier: 01:F3:E1:CB:82:17:29:CE:A4:04:FA:49:AC:E2:2E:DD:F7:AB:12:C9 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584D5234F5D46F143F4DCD6AF640 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa Signing time: Sat 28 Mar 2026 18:44:34 +0000 ROA not before: Sat 28 Mar 2026 18:44:34 +0000 ROA not after: Tue 05 May 2026 06:58:50 +0000 asID: 397423 IP address blocks: 68.233.43.0/24 maxlen: 24 2604:7580:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f5:d4:6f:14:3f:4d:cd:6a:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Mar 28 18:44:34 2026 GMT Not After : May 5 06:58:50 2026 GMT Subject: CN=6459d620-3a89-4a71-8477-349dde2d4a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:98:c3:2e:a8:b2:c7:e8:0d:99:f6:9d:6c: b2:b9:c4:4e:cf:70:50:f3:0d:5b:84:25:0f:74:e7: 38:4c:16:20:ca:e5:84:37:a5:14:b3:69:f2:7b:36: 82:35:2a:17:2f:8b:20:b2:a7:72:69:48:3d:f9:81: 58:1d:7a:0e:36:52:9a:0c:fd:ed:23:72:5d:31:7c: 31:f4:79:63:1d:1d:c6:9b:2a:62:fc:04:bc:01:2b: 27:c1:ad:67:0e:3a:67:93:18:71:b9:d8:06:22:82: 07:60:a0:57:b1:22:bc:ba:42:96:86:45:a1:4a:cd: b5:5a:6e:27:0a:54:d5:83:60:60:6c:59:80:d4:45: 95:61:af:c8:a2:99:da:16:3a:bf:e7:cb:45:84:0b: d5:c0:09:4c:ed:ad:7e:04:1b:ae:09:30:b7:d7:b6: c5:cd:0d:d1:fe:1a:7c:88:c4:52:57:ff:ea:fe:0c: 35:f8:a5:5d:88:34:5e:26:13:b6:a8:53:1f:85:b8: 7d:53:c5:63:95:17:3d:ca:69:ca:13:1f:91:ee:fb: 2f:8f:3f:a9:d5:c4:c9:84:26:1f:5c:55:e4:59:13: 29:e9:a6:0e:3c:1c:c6:d3:22:18:44:aa:4b:b7:40: df:3f:27:93:dd:04:5d:94:74:34:f5:5c:98:10:7a: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F3:E1:CB:82:17:29:CE:A4:04:FA:49:AC:E2:2E:DD:F7:AB:12:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.43.0/24 IPv6: 2604:7580:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5e:20:da:c8:ef:f5:af:03:e6:51:cf:78:f8:d2:4b:97:e2: e1:7d:81:dc:6c:e9:0e:1e:eb:b5:1b:e9:33:42:5e:c9:1c:39: f2:fd:e6:d2:12:f6:91:ee:3d:50:82:64:5a:1f:56:18:52:71: cb:60:0f:2d:ba:4a:70:83:c0:bc:0d:b1:88:90:20:ad:75:ce: 83:38:18:85:e8:fb:a1:b5:f2:43:04:a8:c9:6e:00:56:25:a8: 71:d8:ec:dc:6a:56:65:d8:ee:ee:02:7a:bf:a7:8f:31:e4:02: 24:45:d2:f9:6f:0a:b1:e0:94:b3:8a:45:97:eb:3b:18:13:cb: 2d:47:4f:44:5a:8a:97:e2:b8:fc:98:9e:a0:bd:ff:6b:fc:50: 6c:0b:3e:5e:5d:4d:57:09:ec:87:15:39:6a:dc:c3:e0:5e:4c: 30:81:c3:57:fe:09:3d:b3:b0:a8:f2:15:c2:93:8b:9f:8f:12: 85:01:4e:e9:ba:e1:5c:34:0f:88:57:03:83:f5:b4:c3:57:96: 66:03:48:fa:f7:16:c5:8b:16:ed:b0:8e:be:45:ca:7d:3d:cf: 21:81:0c:0f:61:40:79:6c:26:59:75:52:ba:24:b7:7f:a7:38: 58:3a:45:cf:eb:40:98:29:fb:0e:81:b1:00:25:78:6e:e5:1c: 7f:75:4b:26 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1SNPXUbxQ/Tc1q9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDMyODE4NDQzNFoXDTI2MDUwNTA2NTg1MFowLzEtMCsGA1UEAxMk NjQ1OWQ2MjAtM2E4OS00YTcxLTg0NzctMzQ5ZGRlMmQ0YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim6Ywy6ossfoDZn2nWyyucROz3BQ8w1bhCUP dOc4TBYgyuWEN6UUs2nyezaCNSoXL4sgsqdyaUg9+YFYHXoONlKaDP3tI3JdMXwx 9HljHR3Gmypi/AS8ASsnwa1nDjpnkxhxudgGIoIHYKBXsSK8ukKWhkWhSs21Wm4n ClTVg2BgbFmA1EWVYa/IopnaFjq/58tFhAvVwAlM7a1+BBuuCTC317bFzQ3R/hp8 iMRSV//q/gw1+KVdiDReJhO2qFMfhbh9U8VjlRc9ymnKEx+R7vsvjz+p1cTJhCYf XFXkWRMp6aYOPBzG0yIYRKpLt0DfPyeT3QRdlHQ09VyYEHq25QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAHz4cuCFynOpAT6SaziLt33qxLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYTIwYzJkZjktNjhjMy0z OTIwLTgxMmUtMTU3OGU4MWM0ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAROkrMA8E AgACMAkDBwAmBHWAAAkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABV4g2sjv9a8D5lHPePjSS5fi4X2B3Gzp Dh7rtRvpM0JeyRw58v3m0hL2ke49UIJkWh9WGFJxy2APLbpKcIPAvA2xiJAgrXXO gzgYhej7obXyQwSoyW4AViWocdjs3GpWZdju7gJ6v6ePMeQCJEXS+W8KseCUs4pF l+s7GBPLLUdPRFqKl+K4/JieoL3/a/xQbAs+Xl1NVwnshxU5atzD4F5MMIHDV/4J PbOwqPIVwpOLn48ShQFO6brhXDQPiFcDg/W0w1eWZgNI+vcWxYsW7bCOvkXKfT3P IYEMD2FAeWwmWXVSuiS3f6c4WDpFz+tAmCn7DoGxACV4buUcf3VLJg== -----END CERTIFICATE-----Generated at Thu Apr 9 16:07:37 2026 by rpki-client