$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa File: 3b3526a8-4570-3977-a83c-fd552e5012a1.roa (raw, json) Hash identifier: cnNi92CZvqppIfNlGioMOOCwAJaypWAcJ4qinrIJ7WI= Subject key identifier: 03:86:2E:CC:55:3F:E5:3B:EA:DC:3C:32:94:E9:72:BC:DF:05:A5:90 Certificate issuer: /CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b Certificate serial: 010D0C9F4328584DE150A88DB56A2A847AD61080 Authority key identifier: 6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 401632 IP address blocks: 23.132.188.0/24 maxlen: 24 2602:f72a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a8:8d:b5:6a:2a:84:7a:d6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=9975834b-fb6e-4c3e-9a88-beabaf8ab390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:8f:df:3c:ee:64:a5:70:a1:77:b3:72:5a: 3f:e6:a0:c1:08:22:a7:c9:14:0d:75:a5:17:da:da: a3:87:31:5d:cf:99:6b:69:55:a6:0a:4d:21:6c:2a: b0:d4:85:9d:6a:00:f7:2b:9d:5f:0e:12:69:8a:3b: 8e:11:a2:11:26:94:b5:ed:ec:a5:3d:1e:3d:69:89: 79:e3:39:94:56:4c:87:cf:fe:6e:0b:a9:1b:e9:f1: 2c:1d:b7:5e:d6:24:10:a2:b7:dd:4b:c7:8f:48:9c: d7:60:8a:2e:35:c3:3e:63:a7:7a:42:c3:30:84:5d: fb:e7:e1:c2:88:4c:60:3b:e1:9f:31:79:ec:42:8c: 9a:79:31:ae:ca:2c:6b:85:70:4b:b9:86:06:03:79: 96:d1:84:16:4a:4c:ad:9f:6c:84:c3:13:8d:bb:80: 41:2b:ae:a6:72:07:f6:c8:b3:d4:1a:d0:f5:f3:b6: 56:bd:cd:ab:b8:3f:48:98:fe:9b:73:f7:37:79:25: e6:59:da:ad:9b:00:70:6e:a2:3a:d8:ea:4b:16:be: c1:8f:b2:5d:27:e0:d2:09:cb:2d:b4:ff:fa:38:84: 74:4c:d8:84:6f:5d:03:f8:82:63:3e:9b:bc:d5:19: e1:5e:61:5b:76:09:9d:b8:1f:d2:2c:e1:ae:74:ae: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:2E:CC:55:3F:E5:3B:EA:DC:3C:32:94:E9:72:BC:DF:05:A5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl X509v3 Authority Key Identifier: keyid:6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer sbgp-ipAddrBlock: critical IPv4: 23.132.188.0/24 IPv6: 2602:f72a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:3f:d3:e8:36:19:ca:5c:9c:46:18:ef:0e:eb:0c:81:29:31: 1c:14:1d:a6:e3:13:89:de:44:d2:02:54:0f:80:2f:c6:a1:e5: eb:ba:59:03:70:da:9f:0a:16:d1:38:2b:32:db:c6:c2:e9:91: 7f:95:1b:a0:43:1a:3f:61:5b:59:eb:8e:2d:dc:4c:a3:ed:a7: e3:84:12:8c:72:eb:82:fb:34:60:ff:cf:6d:0f:b0:85:10:41: fa:55:2d:b7:ca:99:72:f4:c0:f7:5c:f3:6b:fb:3e:9d:a1:b7: e0:ef:87:ca:d7:de:20:38:33:00:59:a5:c6:e6:89:75:39:ca: 69:e0:f5:b1:bd:49:b2:0e:32:ad:cc:22:11:25:85:13:f9:22: 51:77:13:07:4a:be:91:19:79:29:af:6b:da:db:17:ae:2d:95: 73:7d:68:c3:c9:ba:06:a5:b0:e2:a7:8d:cb:42:11:c2:64:60: 35:3d:e6:01:17:39:bc:a8:a4:9a:b2:cc:d7:4c:23:6f:50:5a: 4d:08:e9:01:2f:19:90:fa:9c:17:8c:1a:4c:e3:a2:17:89:6b: bf:3a:d9:1f:22:e2:79:66:03:69:d5:be:f1:96:2e:38:b8:67: 77:32:7f:46:46:86:ed:66:73:0b:7c:88:f1:c0:27:9b:90:64: 77:f5:8d:d2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3hUKiNtWoqhHrWEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhYzcyY2EtMzA2ZS00YjEwLTkxZmQtZjRmZDU2ZTUx MjRiMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTk3NTgzNGItZmI2ZS00YzNlLTlhODgtYmVhYmFmOGFiMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihuP3zzuZKVwoXezclo/5qDBCCKnyRQNdaUX 2tqjhzFdz5lraVWmCk0hbCqw1IWdagD3K51fDhJpijuOEaIRJpS17eylPR49aYl5 4zmUVkyHz/5uC6kb6fEsHbde1iQQorfdS8ePSJzXYIouNcM+Y6d6QsMwhF375+HC iExgO+GfMXnsQoyaeTGuyixrhXBLuYYGA3mW0YQWSkytn2yEwxONu4BBK66mcgf2 yLPUGtD187ZWvc2ruD9ImP6bc/c3eSXmWdqtmwBwbqI62OpLFr7Bj7JdJ+DSCcst tP/6OIR0TNiEb10D+IJjPpu81RnhXmFbdgmduB/SLOGudK4iewIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAOGLsxVP+U76tw8MpTpcrzfBaWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82OWFj NzJjYS0zMDZlLTRiMTAtOTFmZC1mNGZkNTZlNTEyNGIvM2IzNTI2YTgtNDU3MC0z OTc3LWE4M2MtZmQ1NTJlNTAxMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjlhYzcyY2EtMzA2ZS00YjEwLTkx ZmQtZjRmZDU2ZTUxMjRiLzY5YWM3MmNhLTMwNmUtNGIxMC05MWZkLWY0ZmQ1NmU1 MTI0Yi5jcmwwHwYDVR0jBBgwFoAUavDcZmKBhPfyY8ilzXNr6ls8yr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82OWFjNzJjYS0zMDZlLTRiMTAtOTFmZC1mNGZk NTZlNTEyNGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4S8MA4E AgACMAgDBgQmAvcqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDEP9PoNhnKXJxGGO8O6wyBKTEcFB2m4xOJ 3kTSAlQPgC/GoeXrulkDcNqfChbROCsy28bC6ZF/lRugQxo/YVtZ644t3Eyj7afj hBKMcuuC+zRg/89tD7CFEEH6VS23yply9MD3XPNr+z6dobfg74fK194gODMAWaXG 5ol1Ocpp4PWxvUmyDjKtzCIRJYUT+SJRdxMHSr6RGXkpr2va2xeuLZVzfWjDyboG pbDip43LQhHCZGA1PeYBFzm8qKSasszXTCNvUFpNCOkBLxmQ+pwXjBpM46IXiWu/ OtkfIuJ5ZgNp1b7xli44uGd3Mn9GRobtZnMLfIjxwCebkGR39Y3S -----END CERTIFICATE-----Generated at Sat Jun 13 21:13:09 2026 by rpki-client