$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa File: 4b394ad3-feab-3d68-855a-82c3eb623e83.roa (raw, json) Hash identifier: r5VSVZlzF4kIPGgDFlosJOOwfrlQEYa4YbFx6yDHmGQ= Subject key identifier: B5:A4:D5:04:CA:C2:91:7D:DB:AF:9B:FA:E1:C8:D9:86:45:89:67:7D Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584DFA708061EB1624A21D326000 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 46824 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:80:61:eb:16:24:a2:1d:32:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=1036c191-3fc8-41ff-b197-14cc40ad1fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:f4:1e:5b:75:c1:01:86:59:3c:84:c1:f8: 34:d9:80:3d:a0:8a:c7:51:83:77:96:bc:79:c3:9d: 97:1e:3b:e2:fe:d3:32:5a:1d:cf:80:45:2c:69:f2: 4d:6b:ba:25:1e:6d:5f:ed:24:f1:84:0c:54:95:ca: 9c:24:1e:63:d3:76:a7:f0:86:54:2e:ed:23:af:48: 0e:c6:88:fb:cf:23:30:39:47:a9:a7:18:57:64:e7: 91:b8:31:4f:48:57:21:fb:56:d8:31:52:f8:7d:e5: 17:fe:ef:1f:e0:43:be:ce:f6:9d:be:6f:2c:f5:0d: f3:3c:ce:e9:2a:4a:ea:2a:59:75:85:65:6c:2e:a3: fc:83:e0:36:5a:45:2a:3a:0b:a0:fa:f6:20:90:fa: 1e:52:4b:df:4b:9f:f4:dd:e1:71:b1:64:23:76:e5: c6:60:1b:a3:aa:1f:b8:3d:86:c7:84:e3:02:b8:19: 38:3b:f5:fc:cc:c9:07:a7:55:ab:01:df:c7:96:55: e7:98:18:00:28:2b:74:f6:1a:67:be:33:ab:28:18: 82:28:bf:22:1b:d6:7b:34:97:48:b1:7a:61:8e:05: 82:50:a4:82:b9:2f:f7:65:3e:31:5c:3e:1d:65:ce: 35:63:53:12:49:9b:99:0c:34:30:71:62:66:ca:90: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A4:D5:04:CA:C2:91:7D:DB:AF:9B:FA:E1:C8:D9:86:45:89:67:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:6f:1d:ee:58:a1:9a:bb:31:1b:7e:95:a9:da:b7:ba:cf:87: dc:05:4a:fb:db:71:95:57:d2:98:1f:14:93:e1:5f:e3:83:38: cd:e2:29:a1:8a:29:ad:1d:8e:34:9d:91:1f:2f:49:3f:1f:75: 19:96:82:c1:f3:38:ab:c8:99:5d:e1:26:8a:b4:93:be:65:3f: 47:a6:e2:19:7c:35:72:44:2a:f0:a4:24:f3:20:a8:4d:1e:b9: 58:b5:68:b2:7a:1c:0b:e4:c3:8a:94:fb:d9:67:60:b3:d7:26: 4f:76:9a:70:70:36:9b:ef:48:a2:97:ca:c1:f6:3d:6b:92:b8: 6d:c3:df:98:0a:b8:a4:a0:a4:21:ba:28:1b:66:81:5c:8e:cd: 0c:94:5d:67:2a:b2:30:ed:2a:34:d1:da:ca:d4:38:4f:b2:97: f9:50:73:4c:81:01:3f:80:d1:c1:6b:b3:e3:34:29:15:fa:f0: e6:7b:ae:98:d9:27:ea:5a:39:dd:96:36:3c:f6:12:64:68:80: 02:c0:38:fd:ff:40:7b:e6:8c:83:42:02:e6:11:ec:8e:ba:0a: d8:cf:3c:03:c0:af:bb:77:98:fa:9a:8b:af:d7:b7:1a:64:5b: 71:3f:89:6a:7c:1e:5d:ef:22:b8:07:93:20:b8:48:a1:37:52: 2b:ea:ec:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIBh6xYkoh0yYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MTAzNmMxOTEtM2ZjOC00MWZmLWIxOTctMTRjYzQwYWQxZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXr0Hlt1wQGGWTyEwfg02YA9oIrHUYN3lrx5 w52XHjvi/tMyWh3PgEUsafJNa7olHm1f7STxhAxUlcqcJB5j03an8IZULu0jr0gO xoj7zyMwOUeppxhXZOeRuDFPSFch+1bYMVL4feUX/u8f4EO+zvadvm8s9Q3zPM7p KkrqKll1hWVsLqP8g+A2WkUqOgug+vYgkPoeUkvfS5/03eFxsWQjduXGYBujqh+4 PYbHhOMCuBk4O/X8zMkHp1WrAd/HllXnmBgAKCt09hpnvjOrKBiCKL8iG9Z7NJdI sXphjgWCUKSCuS/3ZT4xXD4dZc41Y1MSSZuZDDQwcWJmypCAoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWk1QTKwpF926+b+uHI2YZFiWd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNGIzOTRhZDMtZmVhYi0z ZDY4LTg1NWEtODJjM2ViNjIzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENvHe5YoZq7MRt+lanat7rPh9wFSvvbcZVX0pgfFJPhX+ODOM3iKaGK Ka0djjSdkR8vST8fdRmWgsHzOKvImV3hJoq0k75lP0em4hl8NXJEKvCkJPMgqE0e uVi1aLJ6HAvkw4qU+9lnYLPXJk92mnBwNpvvSKKXysH2PWuSuG3D35gKuKSgpCG6 KBtmgVyOzQyUXWcqsjDtKjTR2srUOE+yl/lQc0yBAT+A0cFrs+M0KRX68OZ7rpjZ J+paOd2WNjz2EmRogALAOP3/QHvmjINCAuYR7I66CtjPPAPAr7t3mPqai6/Xtxpk W3E/iWp8Hl3vIrgHkyC4SKE3Uivq7E0= -----END CERTIFICATE-----Generated at Sat Jun 13 10:12:42 2026 by rpki-client