$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa File: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (raw, json) Hash identifier: 01ltO7pb73fLYiqjnfnGs3O7C6NBD3Cm7DvOqKsJVTA= Subject key identifier: 4B:06:9D:38:40:9B:D7:29:E0:64:CD:E2:4A:17:3B:79:0B:1D:57:EA Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584E016B4F036578071D7A6EE9F0 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 400656 IP address blocks: 23.135.152.0/23 maxlen: 23 2606:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:4f:03:65:78:07:1d:7a:6e:e9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=3e607509-0262-429f-b161-b10c84f1ad37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:6b:65:42:39:2f:c4:50:06:d0:d0:20:61: 38:2f:71:ea:27:43:f8:5e:36:7b:57:90:b9:2d:8b: 3e:cd:ec:ac:4b:94:01:15:1f:5c:8e:35:d8:69:2c: 66:61:7e:9d:73:3f:0a:de:3d:22:4b:43:d7:35:1a: 09:e6:0a:b1:18:ff:87:b5:6a:ff:07:32:5b:b0:f1: c1:62:d9:db:2d:7f:d0:dd:20:f9:7e:d0:e9:ee:07: 18:ae:f7:a4:9c:30:0a:04:69:b0:1a:21:a2:e7:fd: 4d:0b:a1:3c:0d:fe:c2:7a:ca:93:7f:4e:8e:ee:6a: 96:18:e0:cd:c2:bd:44:c0:12:b7:0b:40:b2:a6:66: f8:bd:0b:fa:5b:25:6e:f3:0a:ed:df:c3:62:73:2e: 8f:82:81:2b:f5:60:d7:01:ad:1d:25:33:02:45:5e: d8:a5:8b:7f:8b:bb:32:18:c8:23:eb:c1:c6:86:87: a8:42:62:38:09:1e:f7:06:b6:c6:30:f6:e6:e3:b5: b3:be:2b:a1:a7:0f:00:e8:24:e7:98:dd:95:8f:ab: ce:60:23:77:41:3d:cf:5e:82:2d:c8:cb:00:5e:67: 9d:4e:91:d1:1c:1f:e4:17:b3:79:a6:37:f3:b8:90: c6:cd:d4:19:60:2d:87:7d:d1:20:5a:f3:8a:e5:b8: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:9D:38:40:9B:D7:29:E0:64:CD:E2:4A:17:3B:79:0B:1D:57:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: 23.135.152.0/23 IPv6: 2606:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6f:4c:f6:80:9c:d2:5d:27:ab:55:b8:b7:8a:f2:fc:28:65: 42:9a:90:ee:ee:d9:2c:7d:23:4c:0e:45:3f:46:28:48:cd:82: 78:87:8f:2b:2c:1b:06:bf:50:0c:b3:91:81:19:ab:46:37:75: 70:f0:57:15:c4:28:bc:5a:bc:1e:d4:57:42:54:1b:f9:6b:9e: 91:1a:b1:c4:66:df:97:c8:85:de:3c:7d:70:32:e3:da:ac:8c: 7e:e3:63:dc:57:99:94:69:3c:c1:92:44:13:0b:44:87:54:22: 8a:01:16:76:f0:69:d4:0d:ef:05:ca:f3:f3:e2:d6:78:ce:c6: 32:9b:73:8b:a9:7a:7b:67:e9:1c:11:eb:e4:12:ac:51:98:d0: 6e:66:d3:13:76:c7:44:a4:49:f4:e8:72:18:05:78:2e:01:0c: fd:1c:c1:69:25:cf:05:3a:d9:8e:b8:1a:d0:65:e2:a5:8e:61: 17:23:bd:e7:a3:14:d5:5f:c1:fa:79:95:3c:11:15:58:24:cb: 19:b3:de:35:73:d5:08:96:2c:44:35:db:66:b8:7f:fc:68:4d: 96:72:b7:69:03:a4:c8:9a:49:1c:43:e1:c8:9a:63:94:75:10: 71:0c:c7:18:2a:5a:22:56:9b:d3:5b:df:8b:9b:e8:18:30:0b: cb:e2:97:bb -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE4Ba08DZXgHHXpu6fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk M2U2MDc1MDktMDI2Mi00MjlmLWIxNjEtYjEwYzg0ZjFhZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qNrZUI5L8RQBtDQIGE4L3HqJ0P4XjZ7V5C5 LYs+zeysS5QBFR9cjjXYaSxmYX6dcz8K3j0iS0PXNRoJ5gqxGP+HtWr/BzJbsPHB YtnbLX/Q3SD5ftDp7gcYrveknDAKBGmwGiGi5/1NC6E8Df7CesqTf06O7mqWGODN wr1EwBK3C0Cypmb4vQv6WyVu8wrt38Nicy6PgoEr9WDXAa0dJTMCRV7YpYt/i7sy GMgj68HGhoeoQmI4CR73BrbGMPbm47Wzviuhpw8A6CTnmN2Vj6vOYCN3QT3PXoIt yMsAXmedTpHRHB/kF7N5pjfzuJDGzdQZYC2HfdEgWvOK5bjQTQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEsGnThAm9cp4GTN4koXO3kLHVfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvMmRmZTMxYzctNTRlZS0z MDE3LTg2MzctY2U2N2ZkNTNiNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4eYMA0E AgACMAcDBQAmBstAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAH1vTPaAnNJdJ6tVuLeK8vwoZUKakO7u2Sx9 I0wORT9GKEjNgniHjyssGwa/UAyzkYEZq0Y3dXDwVxXEKLxavB7UV0JUG/lrnpEa scRm35fIhd48fXAy49qsjH7jY9xXmZRpPMGSRBMLRIdUIooBFnbwadQN7wXK8/Pi 1njOxjKbc4upentn6RwR6+QSrFGY0G5m0xN2x0SkSfTochgFeC4BDP0cwWklzwU6 2Y64GtBl4qWOYRcjveejFNVfwfp5lTwRFVgkyxmz3jVz1QiWLEQ122a4f/xoTZZy t2kDpMiaSRxD4ciaY5R1EHEMxxgqWiJWm9Nb34ub6BgwC8vil7s= -----END CERTIFICATE-----Generated at Sun Jun 14 08:38:06 2026 by rpki-client