$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa File: 0bd8ae8c-926a-3326-b752-65b165f04694.roa (raw, json) Hash identifier: r45TlXlb+3MX5fXBFt2TACXUwrco4DoOhdb4I0UgW4Q= Subject key identifier: 74:80:C1:09:FD:CB:17:92:9B:AA:EF:0E:FB:BE:D6:12:34:58:03:5B Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584E0005CA7AC793EEFE3CAC1A3C Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 46365 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:ca:7a:c7:93:ee:fe:3c:ac:1a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=3b24198a-168f-4d93-9f4a-f98c95ade3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:33:8b:95:21:67:38:3e:30:b8:45:d7:3a: 2f:e9:62:00:5e:b0:2f:c8:5d:fc:01:71:bb:48:a9: 2a:b1:50:59:5c:30:97:07:ba:9a:e2:ba:8d:ad:a6: ce:52:60:b5:79:e5:ce:58:54:aa:53:25:30:b2:76: c4:8a:6b:c1:36:60:79:e8:ff:57:69:98:f5:c2:33: 02:bc:71:d2:68:ef:9a:48:f1:6f:a1:90:ef:98:28: ff:68:0a:be:11:2f:2e:70:33:a6:66:00:ae:0c:61: a7:1e:f7:99:de:a6:0f:1c:ce:4b:7d:0f:58:b6:cd: e5:ba:42:b1:ea:65:c9:3e:31:aa:9c:0b:79:34:05: 31:72:23:60:c7:f6:2c:d6:f7:5c:68:b8:4c:cc:04: a8:d4:b3:89:70:24:71:85:d7:98:1d:df:21:42:d1: 5f:bc:51:4a:81:6d:2d:23:b8:e5:4e:9f:0d:f8:85: d7:74:ea:29:3f:06:57:e7:3e:30:9d:d4:b7:77:c3: 55:a2:8b:21:f8:89:a9:40:7f:97:30:28:f3:f7:db: 8d:b8:95:63:de:e5:89:80:f5:6a:a0:0b:c4:7f:ac: 80:ed:8d:e4:d2:c9:eb:d5:d2:48:1e:7d:90:04:9e: eb:35:e7:e8:48:cb:ba:71:45:54:00:94:87:52:b1: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:80:C1:09:FD:CB:17:92:9B:AA:EF:0E:FB:BE:D6:12:34:58:03:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:51:5e:95:d1:1a:62:f1:5d:ce:de:22:76:18:ff:31:8e:4a: 0c:c6:f2:11:c5:f5:d6:6c:8b:53:f6:ed:ed:f4:dc:fd:c9:f4: e6:40:08:13:af:2c:f9:96:f6:78:70:72:41:9e:59:c3:e6:0f: 28:2c:8b:97:25:89:15:e0:b3:89:b8:ac:fa:24:3e:6e:a3:31: 4d:ac:f0:08:d8:ac:97:78:ca:1e:64:8a:9d:8a:01:59:8e:26: 66:aa:2c:e5:4d:56:20:ff:fd:fc:78:ca:bb:65:4f:2a:4a:9e: bb:24:91:ff:5e:47:5e:c0:2a:26:84:35:a4:e0:28:79:c4:fa: 49:5c:62:be:8f:82:a0:a4:e6:e5:f7:23:5f:4c:3e:1c:e5:bd: 25:bc:bb:89:f4:0d:60:e6:8e:55:f8:a7:f2:ea:f9:03:2c:5d: 14:bd:2a:19:ea:40:d7:09:47:22:a8:cd:62:40:9e:00:2b:7b: 95:e4:0b:a2:ec:86:5c:72:96:5a:47:1c:c6:a8:2d:47:2e:10: a7:28:23:b6:59:3c:df:07:0b:16:44:7c:83:6e:ff:84:78:a5: bc:a9:7c:42:57:f8:16:85:d6:07:a1:0a:f0:28:31:c2:ea:92: 1f:06:a5:a4:7c:71:0f:4d:4e:13:18:9a:74:1a:40:03:9d:3f: 6f:22:9c:cc -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE4ABcp6x5Pu/jysGjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk M2IyNDE5OGEtMTY4Zi00ZDkzLTlmNGEtZjk4Yzk1YWRlM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoUzi5UhZzg+MLhF1zov6WIAXrAvyF38AXG7 SKkqsVBZXDCXB7qa4rqNrabOUmC1eeXOWFSqUyUwsnbEimvBNmB56P9XaZj1wjMC vHHSaO+aSPFvoZDvmCj/aAq+ES8ucDOmZgCuDGGnHveZ3qYPHM5LfQ9Yts3lukKx 6mXJPjGqnAt5NAUxciNgx/Ys1vdcaLhMzASo1LOJcCRxhdeYHd8hQtFfvFFKgW0t I7jlTp8N+IXXdOopPwZX5z4wndS3d8NVoosh+ImpQH+XMCjz99uNuJVj3uWJgPVq oAvEf6yA7Y3k0snr1dJIHn2QBJ7rNefoSMu6cUVUAJSHUrEuNQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFHSAwQn9yxeSm6rvDvu+1hI0WANbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMGJkOGFlOGMtOTI2YS0z MzI2LWI3NTItNjViMTY1ZjA0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwUV6V0Rpi8V3O3iJ2GP8xjkoM xvIRxfXWbItT9u3t9Nz9yfTmQAgTryz5lvZ4cHJBnlnD5g8oLIuXJYkV4LOJuKz6 JD5uozFNrPAI2KyXeMoeZIqdigFZjiZmqizlTVYg//38eMq7ZU8qSp67JJH/Xkde wComhDWk4Ch5xPpJXGK+j4KgpObl9yNfTD4c5b0lvLuJ9A1g5o5V+Kfy6vkDLF0U vSoZ6kDXCUciqM1iQJ4AK3uV5Aui7IZccpZaRxzGqC1HLhCnKCO2WTzfBwsWRHyD bv+EeKW8qXxCV/gWhdYHoQrwKDHC6pIfBqWkfHEPTU4TGJp0GkADnT9vIpzM -----END CERTIFICATE-----Generated at Sat Jun 6 14:03:10 2026 by rpki-client