$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/bb74af24-27d5-34db-8146-a4678d71475a.roa File: bb74af24-27d5-34db-8146-a4678d71475a.roa (raw, json) Hash identifier: NF0XgrgjtyytxCuWVQGnVIxn0kz6QO+6Dnw1YKXbLpM= Subject key identifier: FC:61:01:AC:5B:5F:5B:F2:BB:B6:42:73:A0:5C:C1:E9:21:D3:AF:ED Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Certificate serial: 010D0C9F4328584DDE87F9BEE1D7AAD5F7A65120 Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/bb74af24-27d5-34db-8146-a4678d71475a.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 213683 IP address blocks: 23.134.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:f9:be:e1:d7:aa:d5:f7:a6:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=b505a08f-5aa3-47ea-82f9-272b59a7a31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:83:88:47:14:36:aa:30:07:a1:55:b0:14: fa:a5:8d:1b:fb:18:91:65:46:8a:01:72:c9:49:b2: 90:8a:c9:d1:b8:30:13:9d:cf:44:ca:1f:7c:81:36: 10:d5:8c:3f:51:a6:f7:b7:94:aa:9c:e4:27:cb:54: 42:fc:1b:ef:5e:20:1e:59:cf:6e:00:88:fb:aa:f3: 99:7a:71:68:72:1b:e9:a6:ae:91:6c:70:47:b5:33: 9b:10:db:a4:fe:08:2d:0b:90:f2:d7:4a:fd:76:ad: a6:83:c0:d1:91:22:67:58:3b:d6:51:b8:ea:81:0f: 71:3b:19:fd:c9:3f:82:51:ce:86:77:d5:6e:7b:99: 51:98:67:b0:00:ee:80:1a:2d:81:d7:05:9e:0d:c5: d6:8e:1a:17:6d:06:a1:ab:44:43:54:3c:3d:2d:dd: 28:57:28:1a:3d:2b:d7:30:31:4b:c0:6e:d7:5e:51: 9e:1b:7c:cf:5c:d6:48:27:93:c4:61:e1:00:df:a7: 23:22:3f:bb:1f:19:20:6a:6e:02:70:18:be:c8:8d: fa:39:57:15:a7:44:d7:38:47:aa:1a:75:1b:c7:da: a1:c6:c3:c7:27:4a:55:4b:e6:ff:5f:67:c1:83:f5: 6a:ce:6d:b2:00:1e:f0:2c:75:8f:35:f6:31:52:92: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:61:01:AC:5B:5F:5B:F2:BB:B6:42:73:A0:5C:C1:E9:21:D3:AF:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/bb74af24-27d5-34db-8146-a4678d71475a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl X509v3 Authority Key Identifier: keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer sbgp-ipAddrBlock: critical IPv4: 23.134.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:51:46:c7:9f:b2:0c:52:89:99:1b:51:3d:2a:9c:9a:d1:ab: c0:76:72:3b:e4:0d:0c:38:4a:03:aa:35:df:42:71:fe:02:b4: 3a:a6:33:3c:c7:cf:e2:58:86:40:87:22:a0:36:7c:7a:3a:53: 4c:ea:52:5b:c6:3e:ce:23:2f:49:7f:64:2e:dc:e2:b8:7b:23: a0:c2:ca:09:c2:db:b1:16:30:ba:8f:ac:8c:92:cb:5f:6f:b8: 6e:c1:4c:fa:29:e8:70:e1:62:13:42:13:e0:8b:b5:1b:bc:4f: 24:af:8a:85:a4:3f:56:2e:7f:cd:21:82:4c:3d:9b:ef:da:59: 98:d4:4c:ba:2d:06:4c:72:69:ce:ef:4a:04:25:b5:5f:ef:80: d4:f2:3f:d1:99:08:1b:af:eb:47:9e:d8:ce:c8:03:d0:a2:03: b2:b0:fe:ee:1f:15:6c:bb:9c:52:d3:da:23:a1:30:b3:89:95: d4:fd:11:a5:8a:26:e5:ac:3f:9a:b4:35:30:14:af:ac:9f:f4: a4:b8:24:85:33:1b:70:ab:2a:5c:9b:39:ba:30:1e:e0:ce:a3: 77:ee:1c:d7:17:a2:4e:83:0a:cc:30:8a:21:bd:41:86:b0:81: 33:a8:42:1d:18:55:d4:8a:1d:dc:56:b4:83:fc:67:59:13:26: 1a:50:42:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eh/m+4deq1femUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz ZjA5MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YjUwNWEwOGYtNWFhMy00N2VhLTgyZjktMjcyYjU5YTdhMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX6DiEcUNqowB6FVsBT6pY0b+xiRZUaKAXLJ SbKQisnRuDATnc9Eyh98gTYQ1Yw/Uab3t5SqnOQny1RC/BvvXiAeWc9uAIj7qvOZ enFochvppq6RbHBHtTObENuk/ggtC5Dy10r9dq2mg8DRkSJnWDvWUbjqgQ9xOxn9 yT+CUc6Gd9Vue5lRmGewAO6AGi2B1wWeDcXWjhoXbQahq0RDVDw9Ld0oVygaPSvX MDFLwG7XXlGeG3zPXNZIJ5PEYeEA36cjIj+7Hxkgam4CcBi+yI36OVcVp0TXOEeq GnUbx9qhxsPHJ0pVS+b/X2fBg/Vqzm2yAB7wLHWPNfYxUpJrrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxhAaxbX1vyu7ZCc6Bcwekh06/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1 ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvYmI3NGFmMjQtMjdkNS0z NGRiLTgxNDYtYTQ2NzhkNzE0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw M2M4YjNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNRRsefsgxSiZkbUT0qnJrRq8B2cjvkDQw4SgOqNd9Ccf4CtDqmMzzH z+JYhkCHIqA2fHo6U0zqUlvGPs4jL0l/ZC7c4rh7I6DCygnC27EWMLqPrIySy19v uG7BTPop6HDhYhNCE+CLtRu8TySvioWkP1Yuf80hgkw9m+/aWZjUTLotBkxyac7v SgQltV/vgNTyP9GZCBuv60ee2M7IA9CiA7Kw/u4fFWy7nFLT2iOhMLOJldT9EaWK JuWsP5q0NTAUr6yf9KS4JIUzG3CrKlybObowHuDOo3fuHNcXok6DCswwiiG9QYaw gTOoQh0YVdSKHdxWtIP8Z1kTJhpQQj4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:25:12 2026 by rpki-client