$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa File: a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa (raw, json) Hash identifier: PGLav/am0RGON5u7xPPFPPrSPD1v7Jc3IiVF3q1u2Pw= Subject key identifier: 60:C7:CA:37:98:CF:39:EF:AF:F0:0F:E8:BF:1B:4C:E0:84:27:3F:B4 Certificate issuer: /CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Certificate serial: 010D0C9F4328584E083D58D6B6F2E65386E56800 Authority key identifier: A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa Signing time: Mon 01 Jun 2026 23:38:35 +0000 ROA not before: Mon 01 Jun 2026 23:38:35 +0000 ROA not after: Sun 30 Aug 2026 15:49:05 +0000 asID: 393775 IP address blocks: 24.235.14.0/23 maxlen: 24 65.61.48.0/23 maxlen: 24 143.223.142.0/23 maxlen: 24 192.103.11.0/24 maxlen: 24 199.116.136.0/21 maxlen: 24 209.127.254.0/23 maxlen: 24 2604:9d00::/32 maxlen: 36 2606:4180::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:3d:58:d6:b6:f2:e6:53:86:e5:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Validity Not Before: Jun 1 23:38:35 2026 GMT Not After : Aug 30 15:49:05 2026 GMT Subject: CN=ff9703ee-2a50-4fda-bd1c-71eafae16c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:79:ea:de:9d:6b:4b:c8:56:d1:2e:1b:a8: f6:96:42:2c:9c:c4:e4:9c:94:3d:f0:a1:fd:47:be: e1:3a:ed:d4:60:88:e1:de:af:63:9e:2d:c3:3f:41: 40:7e:a8:99:10:67:11:16:5e:b7:7d:19:65:f2:e7: e6:38:f5:50:3a:97:d3:57:9c:af:69:fe:db:89:89: f1:6b:a9:74:36:03:09:3a:ee:3d:ab:a7:17:f4:25: 9e:85:87:11:3f:1f:76:07:60:28:07:c8:19:d2:b5: 0c:26:a7:68:ce:e5:d7:fe:0c:df:ea:8f:e5:5c:23: 88:ff:c3:b6:f0:2f:01:71:ae:64:c2:98:8c:f3:5d: 5e:20:fa:31:52:e3:de:85:8b:a4:ce:b4:83:83:d9: 7c:cd:31:dc:a0:46:e6:7c:50:98:05:57:f4:15:e0: d2:77:76:ee:19:39:06:b0:05:be:85:fb:dd:0a:ad: b4:73:fe:c3:69:ba:92:ea:31:8d:46:79:2d:69:d0: 12:aa:6b:52:0c:cb:fc:b2:29:ca:87:f1:21:c5:01: 92:b0:56:e3:fd:90:93:66:04:e4:2b:3d:01:f7:4d: 79:df:ec:3a:54:fe:88:f5:d7:58:51:a8:d5:0d:54: 96:10:d2:0b:bf:7f:2c:c4:de:2b:dc:77:13:3d:50: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C7:CA:37:98:CF:39:EF:AF:F0:0F:E8:BF:1B:4C:E0:84:27:3F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl X509v3 Authority Key Identifier: keyid:A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer sbgp-ipAddrBlock: critical IPv4: 24.235.14.0/23 65.61.48.0/23 143.223.142.0/23 192.103.11.0/24 199.116.136.0/21 209.127.254.0/23 IPv6: 2604:9d00::/32 2606:4180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:43:8f:7d:c3:e2:43:af:00:3d:1d:8f:cf:1d:b5:65:6f:b2: c8:d8:2c:7f:30:ca:10:13:5c:13:ef:08:c9:de:d4:f7:2b:34: e6:3c:1c:b3:a5:86:95:1a:fa:d0:10:ab:03:aa:df:a0:03:ee: 1d:99:4d:8c:f3:be:2d:ae:ae:01:39:48:fd:44:bb:dd:50:f0: 6b:e3:77:2f:47:a1:7f:76:02:ff:fd:3c:3e:9b:06:ec:5e:15: ac:58:28:6d:e3:aa:c6:a8:66:34:17:3a:91:85:2d:d9:f9:dd: 48:7c:0c:45:5e:a4:e9:f9:1c:cd:07:9c:c5:d7:c4:c0:bd:c7: 2a:b1:60:ad:55:7e:fc:b5:0c:63:45:dd:b8:e2:a8:be:36:d4: 2b:2b:0a:e0:28:37:4c:e1:b2:71:0a:cd:6f:d8:ec:7d:fa:c2: e4:8f:bb:60:9a:a4:49:e8:ce:c7:52:02:c7:4c:bc:93:92:87: a4:28:2d:60:3c:16:3d:c9:c9:e6:c4:57:5e:4a:0f:f8:2f:7f: 77:8a:91:59:68:b1:f0:53:62:90:93:6f:5a:64:3d:ea:4f:bd: 31:ea:33:04:30:08:09:74:c9:fd:bb:3d:0f:f9:2c:ea:0d:f2: ec:40:13:07:38:42:7c:78:3c:a5:eb:29:ca:5a:3f:a6:f7:43: 62:53:ec:3f -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWE4IPVjWtvLmU4blaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiOTM4NmEtNWMyYS00YTY5LWJkNDQtYzkwNzZmNTEz MDFmMB4XDTI2MDYwMTIzMzgzNVoXDTI2MDgzMDE1NDkwNVowLzEtMCsGA1UEAxMk ZmY5NzAzZWUtMmE1MC00ZmRhLWJkMWMtNzFlYWZhZTE2YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7d56t6da0vIVtEuG6j2lkIsnMTknJQ98KH9 R77hOu3UYIjh3q9jni3DP0FAfqiZEGcRFl63fRll8ufmOPVQOpfTV5yvaf7biYnx a6l0NgMJOu49q6cX9CWehYcRPx92B2AoB8gZ0rUMJqdozuXX/gzf6o/lXCOI/8O2 8C8Bca5kwpiM811eIPoxUuPehYukzrSDg9l8zTHcoEbmfFCYBVf0FeDSd3buGTkG sAW+hfvdCq20c/7DabqS6jGNRnktadASqmtSDMv8sinKh/EhxQGSsFbj/ZCTZgTk Kz0B90153+w6VP6I9ddYUajVDVSWENILv38sxN4r3HcTPVCrSwIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFGDHyjeYzznvr/AP6L8bTOCEJz+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yM2I5 Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3NmY1MTMwMWYvYTJkNGNjYjUtYzgwZi0z YjUyLWFiZjMtYzVjZjMyZGViNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjNiOTM4NmEtNWMyYS00YTY5LWJk NDQtYzkwNzZmNTEzMDFmLzIzYjkzODZhLTVjMmEtNGE2OS1iZDQ0LWM5MDc2ZjUx MzAxZi5jcmwwHwYDVR0jBBgwFoAUplHrKxsIi1+5DPOI0liLf2il8aMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yM2I5Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3 NmY1MTMwMWYuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQBGOsOAwQB QT0wAwQBj9+OAwQAwGcLAwQDx3SIAwQB0X/+MBQEAgACMA4DBQAmBJ0AAwUAJgZB gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAhQ499w+JDrwA9HY/PHbVlb7LI2Cx/MMoQE1wT7wjJ3tT3KzTm PByzpYaVGvrQEKsDqt+gA+4dmU2M874trq4BOUj9RLvdUPBr43cvR6F/dgL//Tw+ mwbsXhWsWCht46rGqGY0FzqRhS3Z+d1IfAxFXqTp+RzNB5zF18TAvccqsWCtVX78 tQxjRd244qi+NtQrKwrgKDdM4bJxCs1v2Ox9+sLkj7tgmqRJ6M7HUgLHTLyTkoek KC1gPBY9ycnmxFdeSg/4L393ipFZaLHwU2KQk29aZD3qT70x6jMEMAgJdMn9uz0P +SzqDfLsQBMHOEJ8eDyl6ynKWj+m90NiU+w/ -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:19 2026 by rpki-client