$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa File: a611323c-5d49-3b79-a1f9-62dc57283557.roa (raw, json) Hash identifier: Eb45TjGRpneMxOcyFWvb9dFLySAf5GQKjunanP4Epfc= Subject key identifier: BC:F8:EB:1F:7D:58:7B:A3:00:E7:81:F3:CE:3B:5E:94:EC:2E:D9:8A Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F4328584DD8F05AD074319B9CA78FDD60 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 210000 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:5a:d0:74:31:9b:9c:a7:8f:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=8c84ec60-8c87-46de-8f61-e32589fa43bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:59:10:5a:55:19:a6:ee:17:84:01:15:2f:64: 36:43:36:d0:d3:ae:0d:46:c1:dc:ce:8d:bb:90:98: 61:ae:c6:be:0e:43:b1:f3:48:6c:03:9d:76:14:cc: b7:da:87:9c:7f:05:d2:cc:d0:21:73:22:4b:2b:aa: ff:13:f2:31:07:79:76:57:78:7a:d9:78:97:b8:f9: 97:5e:96:19:f7:3b:a1:24:e7:76:a1:c9:07:17:e1: 3c:cb:f3:10:97:7d:33:d8:98:f5:84:a4:05:eb:35: 9a:21:47:9f:ef:08:e5:80:1f:2a:53:11:cf:a3:75: a2:dd:0e:f2:00:f7:0f:7e:85:8f:ab:b7:56:8a:67: c4:2f:d9:5e:a5:af:ca:7b:02:34:01:87:db:f3:9b: 42:60:10:c1:3d:30:53:d8:71:aa:57:7f:4f:00:b1: 98:07:31:bf:91:d5:dd:68:dd:f6:25:49:a0:24:6a: 5e:3b:94:3a:3e:e7:9a:cd:bc:a5:ff:dc:a8:36:d1: 38:98:22:f9:53:95:ff:24:8a:6c:f4:4d:35:71:c9: 67:b5:e8:25:bd:6c:b4:69:9c:9c:70:d5:e3:39:13: 8a:2b:96:ac:e9:7c:bb:36:af:2e:e4:6d:f4:93:b9: 2f:ca:eb:76:c9:20:06:69:74:10:52:a3:73:72:96: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:EB:1F:7D:58:7B:A3:00:E7:81:F3:CE:3B:5E:94:EC:2E:D9:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:36:5f:e0:ae:69:23:d5:34:59:df:44:31:7b:13:cc:f0:96: 15:2d:cc:cc:29:29:c3:a9:34:56:ca:72:41:b6:a3:65:a2:75: 4c:20:51:43:5f:e1:b2:bb:3d:7d:a4:4a:18:ae:71:28:b5:9b: 1b:78:ec:ce:a6:af:3a:11:98:86:91:08:5a:c5:61:92:f4:13: 36:34:44:0e:c4:c2:be:9b:f4:c1:5e:58:a7:92:cb:84:3a:04: 14:25:48:d5:03:c9:1c:3f:e9:d5:f3:54:e7:87:11:31:33:a1: 8c:bc:2f:27:07:bb:a6:ac:e5:1c:a9:f9:00:ee:3c:a9:8a:40: d0:4b:7c:53:a3:4c:a6:9a:4c:a7:0e:8c:72:c3:c5:81:e9:c2: e8:c3:fd:93:ab:0b:4f:8c:48:a9:00:8d:6b:06:0b:29:03:7d: 08:90:bd:13:b9:d2:14:2a:20:d5:83:1b:4f:50:cf:7a:25:0b: 6f:ff:fb:f5:c8:13:d7:73:e0:44:47:b3:01:7f:ac:09:0f:dd: ba:42:9d:88:c6:ed:86:88:1a:7e:b8:61:ae:78:98:26:c8:f4: 2d:b0:be:de:10:c0:ee:27:b6:3b:44:d6:6c:79:8b:70:c3:f9: f4:0f:d6:bb:7e:e8:96:ca:44:f0:b5:ef:32:74:8b:bb:e4:c7: 74:7e:8f:c2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3Y8FrQdDGbnKeP3WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk OGM4NGVjNjAtOGM4Ny00NmRlLThmNjEtZTMyNTg5ZmE0M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1kQWlUZpu4XhAEVL2Q2QzbQ064NRsHczo27 kJhhrsa+DkOx80hsA512FMy32oecfwXSzNAhcyJLK6r/E/IxB3l2V3h62XiXuPmX XpYZ9zuhJOd2ockHF+E8y/MQl30z2Jj1hKQF6zWaIUef7wjlgB8qUxHPo3Wi3Q7y APcPfoWPq7dWimfEL9lepa/KewI0AYfb85tCYBDBPTBT2HGqV39PALGYBzG/kdXd aN32JUmgJGpeO5Q6Pueazbyl/9yoNtE4mCL5U5X/JIps9E01cclnteglvWy0aZyc cNXjOROKK5as6Xy7Nq8u5G30k7kvyut2ySAGaXQQUqNzcpZmkQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLz46x99WHujAOeB8847XpTsLtmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvYTYxMTMyM2MtNWQ0OS0z Yjc5LWExZjktNjJkYzU3MjgzNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBNl/grmkj1TRZ30QxexPM8JYVLczMKSnD qTRWynJBtqNlonVMIFFDX+Gyuz19pEoYrnEotZsbeOzOpq86EZiGkQhaxWGS9BM2 NEQOxMK+m/TBXlinksuEOgQUJUjVA8kcP+nV81TnhxExM6GMvC8nB7umrOUcqfkA 7jypikDQS3xTo0ymmkynDoxyw8WB6cLow/2TqwtPjEipAI1rBgspA30IkL0TudIU KiDVgxtPUM96JQtv//v1yBPXc+BER7MBf6wJD926Qp2Ixu2GiBp+uGGueJgmyPQt sL7eEMDuJ7Y7RNZseYtww/n0D9a7fuiWykTwte8ydIu75Md0fo/C -----END CERTIFICATE-----Generated at Sat Jun 13 21:26:07 2026 by rpki-client