$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa File: a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa (raw, json) Hash identifier: ShcBvzSdthLUgvC5GnY2EgKbmQOCpCRXgqxsDbBwgD8= Subject key identifier: 81:0A:91:4D:D6:84:18:0C:07:A5:8B:F2:69:90:97:24:DC:AB:0C:2F Certificate issuer: /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Certificate serial: 010D0C9F4328584DEDE0A72BEE4CC7ED56213C00 Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 401473 IP address blocks: 23.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:a7:2b:ee:4c:c7:ed:56:21:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=02722398-84af-4364-a419-e131fd88b403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:91:2c:1c:05:bc:cb:32:ee:2f:93:f1:25: a6:b9:62:7e:54:5b:f5:2f:57:93:75:82:1c:5c:7f: 76:8a:e9:08:4c:09:64:0d:02:e3:20:36:07:66:42: 8d:16:bf:49:2a:0f:fa:28:aa:a4:82:9e:1e:46:b1: c5:4e:cf:0f:55:30:d2:75:a4:0f:37:f6:b5:ff:84: 87:c9:86:7d:3d:1b:21:bc:7e:6a:9b:7d:df:c2:12: 6b:9e:ee:87:01:54:67:77:c0:d0:79:a0:b6:dc:7b: a9:2d:65:13:21:79:df:f9:4e:4a:1e:ba:16:08:86: 5d:70:96:7d:c6:19:92:cf:6b:fe:ed:da:e8:f5:8a: 41:38:ff:d5:00:9d:c8:fb:72:a9:c9:8c:6f:0e:0e: 3f:83:3b:0b:e2:e2:5f:da:67:ed:f9:d7:92:1f:ad: 01:40:9c:21:46:c4:e7:6b:2f:24:84:9e:7c:06:6f: 3b:f9:a0:c2:43:b8:cc:37:a0:a6:17:f4:6c:8a:3e: 39:b9:ac:70:29:01:18:c5:20:5b:a9:92:5b:09:9a: 54:bb:98:0d:71:98:93:68:6f:66:56:89:36:5f:fd: 30:3b:7e:d2:0a:47:e2:6e:5b:ae:28:bf:85:b6:35: ff:0c:c4:17:45:06:ca:52:69:b5:be:9f:60:c4:7f: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:91:4D:D6:84:18:0C:07:A5:8B:F2:69:90:97:24:DC:AB:0C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl X509v3 Authority Key Identifier: keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:05:46:80:c1:8f:74:27:e1:4a:bb:a3:e4:b8:e1:60:47:91: 6c:c4:1e:c7:fe:77:19:a8:ab:45:ab:a2:23:94:0d:02:13:29: 54:07:ae:5c:0c:a9:b3:b6:46:04:ad:13:a2:cb:21:00:7b:3f: 2c:e9:5c:56:2b:e5:4f:cf:ed:12:80:1f:8d:55:f7:85:4b:d2: 05:b7:08:3b:c5:5f:75:7f:53:dc:43:f3:74:3e:77:c6:8c:e1: 08:a1:44:e0:98:de:90:c7:9e:7d:6f:99:85:61:ee:04:75:8b: 3d:58:b7:3b:03:f6:38:f9:bf:0a:6c:42:1e:78:04:d4:9e:4b: d2:ca:f4:3e:5f:75:65:75:4a:1b:18:23:4d:4d:24:af:4d:9c: a0:15:67:0d:74:a3:b7:e8:be:94:5f:fb:56:cc:2b:0e:14:1d: bb:97:25:81:86:16:3e:35:58:5d:6c:9e:a1:11:73:d8:6f:84: 84:91:4b:13:f5:57:94:c0:7a:60:5c:bb:8d:1d:86:0e:8f:b4: 47:c5:f3:99:2c:0b:c0:3d:aa:aa:ea:7f:56:69:7e:cb:63:e8: ab:29:4b:0d:b2:5e:4c:cb:71:41:19:fa:04:be:6b:78:df:b0: 7a:e9:ac:8c:6d:c3:cc:77:36:31:7f:44:dc:8c:5c:ed:e3:ef: 07:46:3e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4Kcr7kzH7VYhPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0 NjgzMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk MDI3MjIzOTgtODRhZi00MzY0LWE0MTktZTEzMWZkODhiNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzWRLBwFvMsy7i+T8SWmuWJ+VFv1L1eTdYIc XH92iukITAlkDQLjIDYHZkKNFr9JKg/6KKqkgp4eRrHFTs8PVTDSdaQPN/a1/4SH yYZ9PRshvH5qm33fwhJrnu6HAVRnd8DQeaC23HupLWUTIXnf+U5KHroWCIZdcJZ9 xhmSz2v+7dro9YpBOP/VAJ3I+3KpyYxvDg4/gzsL4uJf2mft+deSH60BQJwhRsTn ay8khJ58Bm87+aDCQ7jMN6CmF/Rsij45uaxwKQEYxSBbqZJbCZpUu5gNcZiTaG9m Vok2X/0wO37SCkfibluuKL+FtjX/DMQXRQbKUmm1vp9gxH+QTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEKkU3WhBgMB6WL8mmQlyTcqwwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFj NDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvYTM1MDhhY2YtNmFjZi0z MGY3LWI4YzAtYThkODFiMGU0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxYzQwNmMtZmNhZS00ZDgzLTlj MWEtNWM5MzBlODE0NjgzLzNkMWM0MDZjLWZjYWUtNGQ4My05YzFhLTVjOTMwZTgx NDY4My5jcmwwHwYDVR0jBBgwFoAUmuQWvmKOqdLt6p/XSIGytTENoVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01Yzkz MGU4MTQ2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwFRoDBj3Qn4Uq7o+S44WBHkWzEHsf+dxmoq0WroiOUDQITKVQHrlwM qbO2RgStE6LLIQB7PyzpXFYr5U/P7RKAH41V94VL0gW3CDvFX3V/U9xD83Q+d8aM 4QihROCY3pDHnn1vmYVh7gR1iz1YtzsD9jj5vwpsQh54BNSeS9LK9D5fdWV1ShsY I01NJK9NnKAVZw10o7fovpRf+1bMKw4UHbuXJYGGFj41WF1snqERc9hvhISRSxP1 V5TAemBcu40dhg6PtEfF85ksC8A9qqrqf1Zpfstj6KspSw2yXkzLcUEZ+gS+a3jf sHrprIxtw8x3NjF/RNyMXO3j7wdGPls= -----END CERTIFICATE-----Generated at Sun May 24 06:46:05 2026 by rpki-client