$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa File: 5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa (raw, json) Hash identifier: oVCAzRewUbtSmZQ2dr5oO95GfBVTGwChWxSfVbnX3Nc= Subject key identifier: 8E:91:76:34:2B:25:99:D7:66:4B:3F:EE:1C:36:11:D2:75:10:9C:5E Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584E024D248FA4AF002FC6843E00 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa Signing time: Sat 30 May 2026 20:35:34 +0000 ROA not before: Sat 30 May 2026 20:35:34 +0000 ROA not after: Fri 28 Aug 2026 20:35:34 +0000 asID: 398741 IP address blocks: 23.172.216.0/24 maxlen: 24 2602:f959::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:02:4d:24:8f:a4:af:00:2f:c6:84:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: May 30 20:35:34 2026 GMT Not After : Aug 28 20:35:34 2026 GMT Subject: CN=a37003f8-c69c-4a89-b8f8-fba42bc51822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:2b:6c:15:71:ee:a2:62:74:04:23:2a:99: 72:3f:4b:53:ab:5d:8e:bc:c5:a4:83:c6:db:b5:01: ec:35:1e:33:6b:59:c7:f9:91:ed:4e:a0:35:d1:0d: 5c:8f:a1:23:63:e5:43:a1:08:df:e8:25:3b:23:ed: c4:5e:ed:5f:07:5a:78:47:f3:2b:9f:8e:41:12:2e: 16:cc:9c:c8:ca:30:b8:f7:b5:16:c7:1e:27:4e:0b: da:74:cc:f7:20:dc:73:8f:ef:20:d8:93:95:e4:10: 3a:c9:97:dc:7c:3c:6b:51:95:46:bf:16:d8:03:bc: 40:e9:58:3b:91:e9:1a:1a:8f:08:83:0d:db:4c:be: 61:3b:65:a2:c0:55:06:e4:ed:35:62:0b:68:f1:14: 3d:d7:c0:b8:9d:cc:8f:30:be:ab:58:c1:65:f0:2c: 20:a7:ea:38:1e:a2:fc:69:06:64:e3:bc:34:91:3d: f6:69:a3:a5:f1:01:0e:1b:e8:20:b3:c6:50:5e:f3: 91:80:4b:ad:d1:40:7a:43:63:ac:cf:5a:62:9e:c0: 4c:3a:a4:b6:d4:46:31:6d:54:dd:5c:6f:7b:96:54: 21:76:7a:55:8e:de:5f:b2:b5:77:32:d0:c3:c3:4f: 2c:5e:c2:c0:be:5a:b1:75:23:96:79:6a:6e:d6:41: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:91:76:34:2B:25:99:D7:66:4B:3F:EE:1C:36:11:D2:75:10:9C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.216.0/24 IPv6: 2602:f959::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6b:64:32:6a:79:f3:28:63:1b:e8:7e:e1:8b:80:3d:c9:a6: a6:33:a2:85:f6:53:e3:eb:cb:1a:8c:80:33:86:ef:f0:5b:27: be:7b:d6:6f:da:f0:ff:74:c7:3d:54:13:21:0b:16:b1:53:07: 01:e8:d7:43:22:d9:7d:2a:05:c6:d8:fc:78:04:2b:d2:33:99: e8:65:40:5f:22:b8:e0:b3:c9:9f:94:79:a9:fb:35:cd:1f:4a: 73:cd:e6:d2:4c:ac:16:53:8f:b1:69:ba:3d:a2:d7:4e:55:f8: 74:e7:0f:5f:cf:b1:d5:ff:df:1c:d3:93:55:d8:c8:7c:4d:12: 83:7c:8f:9f:ef:c2:32:6f:f3:42:24:a4:b9:09:47:bb:9d:42: 12:58:65:90:45:62:1e:d2:82:c0:16:af:d6:12:b2:15:8c:86: 5d:a7:29:85:68:ef:d8:a3:08:7b:9d:1d:34:e7:24:2a:ed:96: bf:15:61:a4:82:e0:07:cd:6e:7a:90:ec:76:0d:85:b0:ee:a8: 6f:0d:b9:cd:55:03:22:88:1c:8e:81:5e:22:c5:fc:2a:f3:2c: bb:93:78:bf:a7:52:f9:c9:81:80:ff:38:23:ab:3d:9c:2e:48: a0:7b:9c:16:b6:49:94:67:3b:43:7d:03:17:3f:5e:01:d7:30: 40:d7:a8:77 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4CTSSPpK8AL8aEPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDUzMDIwMzUzNFoXDTI2MDgyODIwMzUzNFowLzEtMCsGA1UEAxMk YTM3MDAzZjgtYzY5Yy00YTg5LWI4ZjgtZmJhNDJiYzUxODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDgrbBVx7qJidAQjKplyP0tTq12OvMWkg8bb tQHsNR4za1nH+ZHtTqA10Q1cj6EjY+VDoQjf6CU7I+3EXu1fB1p4R/Mrn45BEi4W zJzIyjC497UWxx4nTgvadMz3INxzj+8g2JOV5BA6yZfcfDxrUZVGvxbYA7xA6Vg7 kekaGo8Igw3bTL5hO2WiwFUG5O01Ygto8RQ918C4ncyPML6rWMFl8Cwgp+o4HqL8 aQZk47w0kT32aaOl8QEOG+ggs8ZQXvORgEut0UB6Q2Osz1pinsBMOqS21EYxbVTd XG97llQhdnpVjt5fsrV3MtDDw08sXsLAvlqxdSOWeWpu1kGJywIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI6RdjQrJZnXZks/7hw2EdJ1EJxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNWYwYTZkNzgtZTZlNC0z NDFjLWEzZDUtOTc5YWFhODViMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6zYMA4E AgACMAgDBgAmAvlZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBza2QyannzKGMb6H7hi4A9yaamM6KF9lPj 68sajIAzhu/wWye+e9Zv2vD/dMc9VBMhCxaxUwcB6NdDItl9KgXG2Px4BCvSM5no ZUBfIrjgs8mflHmp+zXNH0pzzebSTKwWU4+xabo9otdOVfh05w9fz7HV/98c05NV 2Mh8TRKDfI+f78Iyb/NCJKS5CUe7nUISWGWQRWIe0oLAFq/WErIVjIZdpymFaO/Y owh7nR005yQq7Za/FWGkguAHzW56kOx2DYWw7qhvDbnNVQMiiByOgV4ixfwq8yy7 k3i/p1L5yYGA/zgjqz2cLkige5wWtkmUZztDfQMXP14B1zBA16h3 -----END CERTIFICATE-----Generated at Fri Jun 12 02:40:45 2026 by rpki-client