$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa File: 466907d0-f56d-36c2-88cd-f7f59fa888e2.roa (raw, json) Hash identifier: akAFklbLjBHNn+LvIgyohwN34TzKkoIZ85bYU4QJ2fY= Subject key identifier: 2B:DE:A0:F6:DB:0D:17:AB:EA:FF:58:ED:8E:E8:2A:CE:3D:00:E1:C2 Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584E0005CC8E114C2AA103AACC40 Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 394144 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:cc:8e:11:4c:2a:a1:03:aa:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=ccb04ccc-883f-4805-956d-bc6f5bbfdfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:48:8e:38:01:5e:0c:89:04:fc:58:26:f6: 4b:da:fd:aa:cf:1e:92:0f:cb:d0:39:1a:d0:96:cc: 37:6a:67:8a:9f:cf:45:a8:65:d7:42:9b:c9:a4:a3: 3f:e6:e5:59:be:92:b5:4e:49:3c:50:a9:3d:5c:8a: 68:92:cf:80:ce:7b:c6:e6:c5:bc:bc:7e:6e:07:af: a5:2e:5b:0b:98:cf:76:5a:b9:0e:48:1b:6b:e9:d9: 2c:7a:cd:98:63:e8:af:4e:d5:3e:48:f7:68:b6:a6: e8:4f:16:e6:f7:18:ae:67:5f:7b:8a:f2:44:e2:11: b7:7e:32:5e:0d:28:d6:8f:8d:2d:7f:76:47:f2:84: b3:4f:c6:73:0a:36:2b:65:65:6f:cc:5e:be:bb:e8: 4d:8a:00:db:98:e1:92:e6:9a:10:64:7e:f8:21:50: 8b:8a:a3:e7:2d:82:0a:6f:12:a0:e8:03:00:b3:14: 9f:60:5f:4b:78:5b:60:54:43:b2:b9:0b:01:b5:dc: 3c:e8:a1:49:1b:78:7b:63:41:9b:bb:71:4e:97:13: ce:2f:74:5f:76:56:80:34:f2:cc:38:77:1d:20:a0: 5a:ca:c0:cb:ba:b5:62:e3:1c:ce:2f:01:ef:db:0c: 07:e7:87:bc:b6:f9:d3:cd:45:22:78:79:c4:94:0c: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:A0:F6:DB:0D:17:AB:EA:FF:58:ED:8E:E8:2A:CE:3D:00:E1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:90:60:da:16:64:d2:b5:cc:6a:1f:13:0c:0c:53:87:75:cf: 6d:4c:25:96:73:ac:37:24:3b:4e:38:7c:dc:42:93:0a:c4:f0: 1a:a7:d6:27:49:ff:8d:dc:4d:a9:8b:1f:99:cc:e5:47:71:af: 15:70:f2:0a:29:6c:27:96:a4:a2:f8:90:be:f2:b5:19:50:44: 98:c0:bc:4e:9a:f2:f2:cb:9f:44:f7:c6:04:c5:20:b3:32:e8: f3:02:54:ca:35:fd:4f:36:4b:94:e7:ae:ee:70:27:b9:88:49: b3:e8:de:d8:dc:ca:88:74:7b:d1:19:dc:b8:4e:aa:cb:ad:42: b9:77:b9:b0:0f:37:da:a5:77:ae:ba:fe:74:60:c4:03:ac:c3: 34:10:e8:fd:20:ca:23:30:0a:4b:20:e3:c0:cf:e9:da:34:22: 63:29:9e:a9:5d:5b:32:aa:e3:d7:ea:2d:21:6e:3e:d6:2f:91: e1:c7:de:87:92:d0:18:c9:94:75:73:69:36:1f:6d:7c:0f:af: 0a:da:68:9d:66:e8:c5:a8:c0:8f:0c:4f:d0:62:db:2c:c7:f3: 89:b8:21:a4:68:2e:6b:75:5a:37:3b:da:9f:81:a6:09:89:21: f8:41:89:4b:e7:c6:28:a9:08:e1:bd:9f:37:bc:51:8b:cc:3d: 18:9d:9a:34 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE4ABcyOEUwqoQOqzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk Y2NiMDRjY2MtODgzZi00ODA1LTk1NmQtYmM2ZjViYmZkZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5BIjjgBXgyJBPxYJvZL2v2qzx6SD8vQORrQ lsw3ameKn89FqGXXQpvJpKM/5uVZvpK1Tkk8UKk9XIpoks+AznvG5sW8vH5uB6+l LlsLmM92WrkOSBtr6dkses2YY+ivTtU+SPdotqboTxbm9xiuZ197ivJE4hG3fjJe DSjWj40tf3ZH8oSzT8ZzCjYrZWVvzF6+u+hNigDbmOGS5poQZH74IVCLiqPnLYIK bxKg6AMAsxSfYF9LeFtgVEOyuQsBtdw86KFJG3h7Y0Gbu3FOlxPOL3RfdlaANPLM OHcdIKBaysDLurVi4xzOLwHv2wwH54e8tvnTzUUieHnElAzUYQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFCveoPbbDRer6v9Y7Y7oKs49AOHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvNDY2OTA3ZDAtZjU2ZC0z NmMyLTg4Y2QtZjdmNTlmYTg4OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOkGDaFmTStcxqHxMMDFOHdc9t TCWWc6w3JDtOOHzcQpMKxPAap9YnSf+N3E2pix+ZzOVHca8VcPIKKWwnlqSi+JC+ 8rUZUESYwLxOmvLyy59E98YExSCzMujzAlTKNf1PNkuU567ucCe5iEmz6N7Y3MqI dHvRGdy4TqrLrUK5d7mwDzfapXeuuv50YMQDrMM0EOj9IMojMApLIOPAz+naNCJj KZ6pXVsyquPX6i0hbj7WL5Hhx96HktAYyZR1c2k2H218D68K2midZujFqMCPDE/Q Ytssx/OJuCGkaC5rdVo3O9qfgaYJiSH4QYlL58YoqQjhvZ83vFGLzD0YnZo0 -----END CERTIFICATE-----Generated at Sat Jun 6 11:15:52 2026 by rpki-client