$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa File: aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa (raw, json) Hash identifier: aaT6nnSvoXUhwnS/XFaS9GT3nMquMiEg7gZUdg7vQEQ= Subject key identifier: D2:8B:74:31:86:A0:9A:81:68:8C:49:C4:C7:CB:75:AE:3D:9A:A1:3F Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584E0C1EDC4C6C886F5D401D5400 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 14618 IP address blocks: 68.233.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:dc:4c:6c:88:6f:5d:40:1d:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=57344c86-98da-4289-9fd1-c7607cfc8985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:42:2e:40:5e:cf:eb:3c:86:55:de:99:d4: f9:de:cb:cc:fb:d9:8c:98:e1:de:ff:42:15:cc:cf: bf:65:e7:99:31:1e:3b:1b:d7:c7:2d:30:3e:46:d5: 78:3d:09:12:aa:1f:bc:1c:3f:35:9c:cf:80:62:00: 1a:95:76:da:ef:c9:d2:46:be:ef:a5:33:36:44:92: ea:3f:3f:9c:a9:d6:2b:29:74:06:eb:7c:65:41:9c: 3d:20:c2:75:23:fa:03:f0:35:0c:db:08:b6:bc:d3: cd:61:d6:9c:f6:f8:b0:f1:c1:41:a5:3a:3f:24:58: ee:bc:ae:aa:73:f4:2f:52:d0:e8:e2:e5:fe:5a:01: e8:dc:a1:c4:5d:60:5e:9a:85:05:9b:fd:9b:9a:8e: 7f:7a:4b:b9:1f:14:1f:1c:09:d5:ed:b6:23:ba:94: e1:cd:ba:86:5d:18:82:58:ae:5f:5a:65:6b:97:55: 39:b4:a4:d3:a3:98:65:65:19:ba:bb:75:da:cb:eb: 80:62:96:c7:67:e4:79:77:c4:ee:c0:09:b8:54:a1: 14:31:ba:98:2d:33:ea:76:7e:24:fd:ed:56:cf:82: cc:39:cd:82:f7:33:04:ee:27:b7:c5:1c:ce:1e:65: bc:7e:db:57:98:2d:16:13:98:64:74:44:de:d9:f0: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:74:31:86:A0:9A:81:68:8C:49:C4:C7:CB:75:AE:3D:9A:A1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/aea246dd-f02e-3e52-8187-f1cf2722c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv4: 68.233.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b9:9d:4a:57:9c:5a:b7:e3:18:52:98:c9:83:df:e7:b1:ca: 1c:d9:49:46:f5:db:6d:5f:38:10:14:9b:aa:5b:e3:cf:f3:70: c6:15:eb:9e:6e:46:79:d1:49:8d:41:35:1e:b1:e6:d1:2d:74: a3:b6:a8:71:a8:3a:4a:4a:90:4d:4d:66:42:b7:97:f8:b4:3e: 04:ad:bd:a4:74:5d:2a:bd:01:30:d0:c6:ac:d8:32:4a:03:f3: 16:23:e5:fa:40:03:96:39:7a:f0:43:58:cd:d7:6c:9b:9c:10: 60:4a:37:48:7b:65:29:e7:e2:e0:9d:4d:ac:7a:7a:17:9f:0e: d8:49:5d:24:0a:c6:41:71:1b:e7:40:40:10:22:f0:47:44:ff: 1d:0b:3e:6b:fa:c4:a9:2a:9b:1a:ae:c3:71:f2:24:15:3e:38: 8e:cc:14:96:7c:c1:66:56:46:32:4b:a8:21:65:86:36:3d:73: 52:0a:98:d6:65:2a:89:d8:01:9e:bb:12:e7:90:23:e6:12:67: 94:12:fe:8a:72:7a:33:27:c9:f6:4c:6a:e2:06:d2:65:8c:f0: ba:12:a9:68:66:90:41:36:f4:df:95:c7:a3:d2:04:97:7b:8c: 3a:64:27:ed:36:7a:d8:94:92:fd:ad:92:3c:f0:c9:ba:d4:de: 54:e5:e0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtxMbIhvXUAdVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk NTczNDRjODYtOThkYS00Mjg5LTlmZDEtYzc2MDdjZmM4OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTJCLkBez+s8hlXemdT53svM+9mMmOHe/0IV zM+/ZeeZMR47G9fHLTA+RtV4PQkSqh+8HD81nM+AYgAalXba78nSRr7vpTM2RJLq Pz+cqdYrKXQG63xlQZw9IMJ1I/oD8DUM2wi2vNPNYdac9viw8cFBpTo/JFjuvK6q c/QvUtDo4uX+WgHo3KHEXWBemoUFm/2bmo5/eku5HxQfHAnV7bYjupThzbqGXRiC WK5fWmVrl1U5tKTTo5hlZRm6u3Xay+uAYpbHZ+R5d8TuwAm4VKEUMbqYLTPqdn4k /e1Wz4LMOc2C9zME7ie3xRzOHmW8fttXmC0WE5hkdETe2fA05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKLdDGGoJqBaIxJxMfLda49mqE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYWVhMjQ2ZGQtZjAyZS0z ZTUyLTgxODctZjFjZjI3MjJjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS5nUpXnFq34xhSmMmD3+exyhzZSUb1221fOBAUm6pb48/zcMYV655u RnnRSY1BNR6x5tEtdKO2qHGoOkpKkE1NZkK3l/i0PgStvaR0XSq9ATDQxqzYMkoD 8xYj5fpAA5Y5evBDWM3XbJucEGBKN0h7ZSnn4uCdTax6ehefDthJXSQKxkFxG+dA QBAi8EdE/x0LPmv6xKkqmxquw3HyJBU+OI7MFJZ8wWZWRjJLqCFlhjY9c1IKmNZl KonYAZ67EueQI+YSZ5QS/opyejMnyfZMauIG0mWM8LoSqWhmkEE29N+Vx6PSBJd7 jDpkJ+02etiUkv2tkjzwybrU3lTl4GM= -----END CERTIFICATE-----Generated at Thu Jun 4 09:09:29 2026 by rpki-client