$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa File: 2b69ec88-0999-3936-983b-14aa048586b6.roa (raw, json) Hash identifier: G97Ub/1G9tAWJcH5AAMSRnZ2XGdh8YsNTuIRGTp3y4o= Subject key identifier: 90:48:49:A6:65:A4:58:B6:28:85:08:DC:6D:95:CE:60:D9:9D:39:56 Certificate issuer: /CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Certificate serial: 010D0C9F4328584CFC823D53C1B86E9C65C6F3C0 Authority key identifier: 82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 397617 IP address blocks: 23.136.240.0/24 maxlen: 24 2602:fdce::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:3d:53:c1:b8:6e:9c:65:c6:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=daf78e1b-5e1e-49b6-97d8-771dfebd7ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:63:a1:e9:6e:b4:d2:21:bb:1e:63:79:9b:37: 64:44:a7:77:83:c8:5e:38:1c:21:12:5a:65:4a:3d: fd:bf:79:9f:28:21:31:be:42:5a:48:93:88:7c:ef: 43:92:4a:d8:9a:26:d2:47:8c:4c:ae:9e:87:46:ae: 16:95:dc:84:23:ed:bd:fc:3c:91:d5:7d:52:12:9c: 6a:0c:98:bc:f4:54:be:ed:60:a3:4d:f9:19:c3:e9: ee:e6:92:52:20:14:a8:23:05:e6:81:a6:08:6c:da: a2:46:0e:dc:00:4d:5c:89:8e:30:21:d1:bb:ae:dd: de:e3:d6:a1:54:66:46:c7:a6:33:5f:e3:4c:b1:40: ec:df:00:0b:a7:44:93:03:93:ef:6b:98:b9:82:23: 13:86:ff:d5:ca:5c:9d:2a:8e:a7:42:7a:e3:ca:9b: f1:fb:4c:88:d6:bc:35:6f:34:fa:75:e5:d6:d3:cc: 20:e8:ed:01:f3:5c:11:fa:bf:40:da:99:ce:f4:64: f6:63:b2:45:48:86:dc:ef:59:69:dc:44:80:8f:72: 89:4e:d9:dd:1b:d0:e8:23:cf:34:54:62:5e:5f:45: f1:8c:50:43:15:0a:8d:ad:e8:07:39:61:b8:67:96: 42:44:da:1b:39:13:5a:a6:f6:b0:db:18:2f:3a:5d: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:48:49:A6:65:A4:58:B6:28:85:08:DC:6D:95:CE:60:D9:9D:39:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl X509v3 Authority Key Identifier: keyid:82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer sbgp-ipAddrBlock: critical IPv4: 23.136.240.0/24 IPv6: 2602:fdce::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2d:1d:fd:a9:93:1a:1f:48:10:2f:d4:ef:0b:33:b7:ee:4c: 1e:32:1b:94:ba:18:ff:b9:11:db:a1:60:d7:df:48:d1:cf:59: ea:33:ca:41:85:a4:c8:de:69:ee:3f:31:6a:68:93:e7:66:84: 7a:54:66:d8:0b:43:5d:e6:1a:f7:13:96:69:e5:18:bd:dd:87: 52:00:23:02:07:79:7b:51:06:48:59:11:ba:29:7e:bf:6f:4e: 90:b0:88:b7:e3:1b:35:a8:14:20:fc:3c:37:5f:97:9c:98:bc: f4:40:e6:2e:31:f8:86:ce:9c:a8:66:a7:74:43:14:36:c3:62: a0:c4:3f:4b:74:1a:f2:a5:5c:45:da:63:4e:e0:bf:21:51:d6: 68:b4:db:28:7a:ff:2a:6d:d2:ab:14:5f:ef:43:97:6f:d6:22: e8:cd:19:bb:c0:58:20:bf:a5:90:8a:2a:1a:96:d7:ba:0d:97: 3a:ed:dc:1b:b2:46:b6:67:48:9e:0e:2c:81:fb:55:09:01:07: d9:3a:dc:85:87:27:cf:3e:d6:10:d4:1b:d9:8d:c8:a2:de:d5: b7:5e:92:a4:9a:f5:c0:3a:06:b1:44:79:2b:48:83:97:09:d2: 8c:c1:9e:11:4d:b7:32:f0:f2:45:33:3b:a7:b5:53:86:b9:85: 43:2c:62:41 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEz8gj1TwbhunGXG88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMmExZTUtNjJjZC00NjA4LWE1ODQtYTNkMDhiZTA3 MWQ4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk ZGFmNzhlMWItNWUxZS00OWI2LTk3ZDgtNzcxZGZlYmQ3Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WOh6W600iG7HmN5mzdkRKd3g8heOBwhElpl Sj39v3mfKCExvkJaSJOIfO9DkkrYmibSR4xMrp6HRq4WldyEI+29/DyR1X1SEpxq DJi89FS+7WCjTfkZw+nu5pJSIBSoIwXmgaYIbNqiRg7cAE1ciY4wIdG7rt3e49ah VGZGx6YzX+NMsUDs3wALp0STA5Pva5i5giMThv/VylydKo6nQnrjypvx+0yI1rw1 bzT6deXW08wg6O0B81wR+r9A2pnO9GT2Y7JFSIbc71lp3ESAj3KJTtndG9DoI880 VGJeX0XxjFBDFQqNregHOWG4Z5ZCRNobORNapvaw2xgvOl0A5QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJBISaZlpFi2KIUI3G2VzmDZnTlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzIy YTFlNS02MmNkLTQ2MDgtYTU4NC1hM2QwOGJlMDcxZDgvMmI2OWVjODgtMDk5OS0z OTM2LTk4M2ItMTRhYTA0ODU4NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWMyMmExZTUtNjJjZC00NjA4LWE1 ODQtYTNkMDhiZTA3MWQ4L2FjMjJhMWU1LTYyY2QtNDYwOC1hNTg0LWEzZDA4YmUw NzFkOC5jcmwwHwYDVR0jBBgwFoAUgkbXmAZUuK7KBNsSfpxxXzSXSpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzIyYTFlNS02MmNkLTQ2MDgtYTU4NC1hM2Qw OGJlMDcxZDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4jwMA4E AgACMAgDBgQmAv3OADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5LR39qZMaH0gQL9TvCzO37kweMhuUuhj/ uRHboWDX30jRz1nqM8pBhaTI3mnuPzFqaJPnZoR6VGbYC0Nd5hr3E5Zp5Ri93YdS ACMCB3l7UQZIWRG6KX6/b06QsIi34xs1qBQg/Dw3X5ecmLz0QOYuMfiGzpyoZqd0 QxQ2w2KgxD9LdBrypVxF2mNO4L8hUdZotNsoev8qbdKrFF/vQ5dv1iLozRm7wFgg v6WQiioalte6DZc67dwbska2Z0ieDiyB+1UJAQfZOtyFhyfPPtYQ1BvZjcii3tW3 XpKkmvXAOgaxRHkrSIOXCdKMwZ4RTbcy8PJFMzuntVOGuYVDLGJB -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:29 2026 by rpki-client