$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa File: 2f411f0a-4589-3467-ac67-d972f19f437f.roa (raw, json) Hash identifier: G43m+zURnSbLyzfZarcoslym4Ho1xFYTjDctYc88OsY= Subject key identifier: 49:AB:42:D5:7C:A2:1F:0B:37:58:16:0C:79:05:EF:3D:08:80:C5:24 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584E08665E0A3097D04FDBA32D80 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 399861 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:5e:0a:30:97:d0:4f:db:a3:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=3838b917-ca31-4f29-9d07-54ccbeb6b12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:4d:7d:1c:4e:24:f1:ea:2b:92:a1:c7:9a: be:d7:3a:78:2b:74:a7:2d:48:58:ee:48:83:fb:f8: f1:f9:09:11:01:80:70:75:eb:a1:cc:b9:b2:32:fe: 87:a3:12:a4:7f:15:77:8a:a6:d6:44:09:ed:8b:21: 93:5d:91:b2:01:84:fa:25:cd:51:ce:89:92:ae:e5: 3f:47:b1:05:3a:56:c7:64:d2:28:be:1f:29:9d:9b: 3d:3b:fa:6f:f2:78:5e:5c:0d:04:9c:d6:59:4a:23: 2c:d2:19:7e:76:1e:cd:e2:2e:11:84:91:e3:26:0b: fd:8d:f5:25:0a:85:99:8a:ba:7a:53:22:5b:15:e4: 8d:a1:7d:e4:e5:bc:ba:05:cf:15:a1:81:59:da:cc: e7:7e:30:b6:7a:c7:6b:2e:ae:46:76:8e:ed:ff:75: af:bc:9d:48:7b:0c:e7:11:9a:2e:64:22:38:1a:58: e9:da:7e:97:e1:b3:fe:24:4e:09:c0:e2:b8:bf:04: 5e:11:36:4b:d2:1c:7b:1a:b4:e0:22:6d:e7:a1:4e: ab:6f:6c:b2:13:1c:38:22:3a:5b:e3:78:64:57:3c: 31:0a:a7:51:43:53:98:f3:2f:51:51:1b:4e:54:fd: 5a:19:9f:ac:ae:45:d6:56:e6:2f:3f:c3:a1:c5:3d: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:42:D5:7C:A2:1F:0B:37:58:16:0C:79:05:EF:3D:08:80:C5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:aa:f0:62:9f:cc:88:a1:dd:77:0b:80:9b:f4:95:d8:5a:57: 38:40:95:42:4b:45:f8:5e:97:7a:b6:1a:07:6f:df:b2:13:9e: 3e:f0:55:96:31:1f:98:36:45:bf:3b:ac:09:2f:4d:87:27:e1: 3a:b0:6f:d4:4d:82:9b:77:9c:71:9e:01:38:96:08:91:9d:e1: 50:c3:b5:8e:f2:d5:38:c9:5c:ec:31:0c:cf:88:4f:d4:ea:bd: e5:ac:1a:9f:64:31:d7:4b:10:45:83:d6:2d:4d:3e:1d:39:e7: 9f:2c:ff:3f:44:9e:b1:93:53:34:a6:a5:f0:cd:aa:22:cb:76: 9f:de:97:13:82:71:6a:89:a6:20:6e:96:48:fb:ee:73:6b:81: 96:91:da:7f:32:0d:dd:48:17:b6:04:e0:4c:ad:96:41:b0:c7: 05:69:7e:fb:6f:b6:b4:d6:d8:49:ca:0b:87:f8:99:61:ab:d2: d5:ae:82:08:be:52:53:ca:a1:b3:83:77:39:e3:ec:0e:21:77: 9e:0f:ee:12:c9:d2:7d:95:eb:2e:fc:a2:25:d4:48:7f:a9:eb: 77:05:38:b3:73:3c:8e:02:17:5b:9c:b8:e8:13:fd:15:0d:72: a0:06:ac:9e:d4:8e:18:b1:18:3b:ca:62:44:07:c8:cb:ba:34: 92:d9:19:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZl4KMJfQT9ujLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MzgzOGI5MTctY2EzMS00ZjI5LTlkMDctNTRjY2JlYjZiMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgpNfRxOJPHqK5Khx5q+1zp4K3SnLUhY7kiD +/jx+QkRAYBwdeuhzLmyMv6HoxKkfxV3iqbWRAntiyGTXZGyAYT6Jc1RzomSruU/ R7EFOlbHZNIovh8pnZs9O/pv8nheXA0EnNZZSiMs0hl+dh7N4i4RhJHjJgv9jfUl CoWZirp6UyJbFeSNoX3k5by6Bc8VoYFZ2sznfjC2esdrLq5Gdo7t/3WvvJ1Iewzn EZouZCI4Gljp2n6X4bP+JE4JwOK4vwReETZL0hx7GrTgIm3noU6rb2yyExw4Ijpb 43hkVzwxCqdRQ1OY8y9RURtOVP1aGZ+srkXWVuYvP8OhxT3O8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmrQtV8oh8LN1gWDHkF7z0IgMUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvMmY0MTFmMGEtNDU4OS0z NDY3LWFjNjctZDk3MmYxOWY0MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESq8GKfzIih3XcLgJv0ldhaVzhAlUJLRfhel3q2Ggdv37ITnj7wVZYx H5g2Rb87rAkvTYcn4Tqwb9RNgpt3nHGeATiWCJGd4VDDtY7y1TjJXOwxDM+IT9Tq veWsGp9kMddLEEWD1i1NPh05558s/z9EnrGTUzSmpfDNqiLLdp/elxOCcWqJpiBu lkj77nNrgZaR2n8yDd1IF7YE4EytlkGwxwVpfvtvtrTW2EnKC4f4mWGr0tWuggi+ UlPKobODdznj7A4hd54P7hLJ0n2V6y78oiXUSH+p63cFOLNzPI4CF1ucuOgT/RUN cqAGrJ7UjhixGDvKYkQHyMu6NJLZGec= -----END CERTIFICATE-----Generated at Sat Jun 13 14:51:23 2026 by rpki-client