$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/f1baafdb-2854-375d-960a-595b519869b4.roa File: f1baafdb-2854-375d-960a-595b519869b4.roa (raw, json) Hash identifier: 4JG2GUfJWS8Qx3HOc014wekCIQy0LeIUHn69J6TlNWI= Subject key identifier: 2D:40:A0:BD:3A:9B:96:C2:D5:5A:DC:E9:57:0F:02:B4:FB:A9:43:2A Certificate issuer: /CN=bc769cb3-6db0-473f-8d72-194e7017b9ce Certificate serial: 010D0C9F4328584E26CC955C1E9FB4F9E3140880 Authority key identifier: 02:65:3A:B1:13:02:34:70:05:B4:E5:BC:F2:49:FD:65:84:67:34:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/f1baafdb-2854-375d-960a-595b519869b4.roa Signing time: Fri 12 Jun 2026 22:21:26 +0000 ROA not before: Fri 12 Jun 2026 22:21:26 +0000 ROA not after: Thu 10 Sep 2026 22:21:01 +0000 asID: 402628 IP address blocks: 23.142.132.0/24 maxlen: 24 2602:f614::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:26:cc:95:5c:1e:9f:b4:f9:e3:14:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc769cb3-6db0-473f-8d72-194e7017b9ce Validity Not Before: Jun 12 22:21:26 2026 GMT Not After : Sep 10 22:21:01 2026 GMT Subject: CN=f5559894-0721-4953-be92-e697194612c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:ee:72:99:f1:d8:33:cb:81:1d:9a:76:eb: 1e:13:12:1e:59:bc:1c:b8:7c:66:f0:0e:b5:e9:bb: 9f:7c:79:45:8e:d6:91:dd:27:d8:7e:12:13:89:94: 5f:37:72:6a:ee:b7:06:18:e1:cc:65:ce:87:66:a8: ef:bd:bf:c7:fa:3b:5b:f2:0c:80:6e:6d:1b:84:5d: 72:b8:80:43:a1:e0:59:00:8f:6c:2f:8c:bf:82:d8: 9b:3b:87:1c:aa:9f:01:f8:d9:d0:66:4b:1f:54:8c: 93:27:bf:57:e8:fa:b8:12:cb:a6:91:72:56:45:d3: 50:32:86:ff:9b:2d:2a:5f:a5:c2:44:73:61:72:2a: 45:8d:1e:17:06:54:66:e0:24:3e:d8:30:19:eb:97: 42:ce:50:48:eb:33:db:c8:da:f9:c8:b7:99:cc:91: a6:99:d8:11:6b:70:0b:ba:95:75:9a:56:85:a5:43: c0:35:39:e3:e3:24:85:7b:99:1e:19:90:81:17:9f: 80:47:2c:a8:eb:f2:93:b4:77:86:d5:4c:1b:06:ad: 75:b3:fc:f7:75:72:d4:9b:cf:77:d0:6d:c1:3b:bd: 0f:e5:81:63:ad:64:2d:2f:6d:72:8f:76:80:c4:50: d5:af:5d:5b:08:b3:9a:42:bd:ae:f3:14:41:09:c4: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:A0:BD:3A:9B:96:C2:D5:5A:DC:E9:57:0F:02:B4:FB:A9:43:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/f1baafdb-2854-375d-960a-595b519869b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.crl X509v3 Authority Key Identifier: keyid:02:65:3A:B1:13:02:34:70:05:B4:E5:BC:F2:49:FD:65:84:67:34:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer sbgp-ipAddrBlock: critical IPv4: 23.142.132.0/24 IPv6: 2602:f614::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2a:3d:d9:5a:8a:40:a7:75:a5:54:fb:42:a5:b6:f8:37:21: 23:56:01:6c:be:3a:e7:3d:5c:48:d4:69:50:a7:3f:39:eb:61: 2f:aa:2e:1d:48:99:8b:b5:7c:a0:5f:9d:9a:22:ec:1b:da:54: 6e:5f:76:37:c5:7b:0a:24:87:6b:97:01:aa:78:66:e0:c5:a5: 0c:5c:a0:07:b8:ed:88:d9:fd:76:16:e0:98:f0:ae:04:9d:43: 48:23:8a:05:ff:ef:4c:fe:0f:ff:ea:a5:37:ef:81:5a:8f:60: ff:8a:5d:73:31:b7:35:ae:bc:44:1f:fe:e5:a2:e1:d1:9a:84: b0:d0:f5:42:d1:89:fc:16:d2:5f:84:c6:1f:6b:57:48:eb:ee: 27:29:f1:11:19:36:43:1e:a5:94:65:02:67:f2:ff:1d:d1:c3: 0e:8e:42:07:05:6c:ed:e4:54:83:c7:c9:b8:56:86:9c:39:83: 19:04:9e:78:78:a3:08:9a:f1:d0:9f:58:9f:e8:8a:a4:9b:4c: 95:25:bf:a8:dc:b2:f4:40:65:ef:4c:42:cb:8c:c9:1a:61:fd: 67:be:90:69:7d:24:70:32:70:f2:a1:e1:26:31:ed:2e:0c:06: 2b:2d:e7:3a:5d:3e:37:f9:90:0d:59:3a:0f:14:4f:79:d7:e7: bd:a7:bd:69 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4mzJVcHp+0+eMUCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM3NjljYjMtNmRiMC00NzNmLThkNzItMTk0ZTcwMTdi OWNlMB4XDTI2MDYxMjIyMjEyNloXDTI2MDkxMDIyMjEwMVowLzEtMCsGA1UEAxMk ZjU1NTk4OTQtMDcyMS00OTUzLWJlOTItZTY5NzE5NDYxMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKTucpnx2DPLgR2aduseExIeWbwcuHxm8A61 6buffHlFjtaR3SfYfhITiZRfN3Jq7rcGGOHMZc6HZqjvvb/H+jtb8gyAbm0bhF1y uIBDoeBZAI9sL4y/gtibO4ccqp8B+NnQZksfVIyTJ79X6Pq4EsumkXJWRdNQMob/ my0qX6XCRHNhcipFjR4XBlRm4CQ+2DAZ65dCzlBI6zPbyNr5yLeZzJGmmdgRa3AL upV1mlaFpUPANTnj4ySFe5keGZCBF5+ARyyo6/KTtHeG1UwbBq11s/z3dXLUm893 0G3BO70P5YFjrWQtL21yj3aAxFDVr11bCLOaQr2u8xRBCcSvMQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC1AoL06m5bC1Vrc6VcPArT7qUMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzc2 OWNiMy02ZGIwLTQ3M2YtOGQ3Mi0xOTRlNzAxN2I5Y2UvZjFiYWFmZGItMjg1NC0z NzVkLTk2MGEtNTk1YjUxOTg2OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM3NjljYjMtNmRiMC00NzNmLThk NzItMTk0ZTcwMTdiOWNlL2JjNzY5Y2IzLTZkYjAtNDczZi04ZDcyLTE5NGU3MDE3 YjljZS5jcmwwHwYDVR0jBBgwFoAUAmU6sRMCNHAFtOW88kn9ZYRnNBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzc2OWNiMy02ZGIwLTQ3M2YtOGQ3Mi0xOTRl NzAxN2I5Y2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF46EMA4E AgACMAgDBgAmAvYUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKKj3ZWopAp3WlVPtCpbb4NyEjVgFsvjrn PVxI1GlQpz8562Evqi4dSJmLtXygX52aIuwb2lRuX3Y3xXsKJIdrlwGqeGbgxaUM XKAHuO2I2f12FuCY8K4EnUNII4oF/+9M/g//6qU374Faj2D/il1zMbc1rrxEH/7l ouHRmoSw0PVC0Yn8FtJfhMYfa1dI6+4nKfERGTZDHqWUZQJn8v8d0cMOjkIHBWzt 5FSDx8m4VoacOYMZBJ54eKMImvHQn1if6Iqkm0yVJb+o3LL0QGXvTELLjMkaYf1n vpBpfSRwMnDyoeEmMe0uDAYrLec6XT43+ZANWToPFE951+e9p71p -----END CERTIFICATE-----Generated at Sat Jun 13 16:10:57 2026 by rpki-client