$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa File: dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa (raw, json) Hash identifier: isOEN5etmaFR6ceqQCrqqJz1fPJwutlrwBs9PLNS/Rk= Subject key identifier: 81:27:EA:16:71:8E:3E:9B:C1:C1:47:F7:6B:20:AE:A6:1D:F4:C2:A7 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584E08665DFED0E7056848007900 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 401561 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:5d:fe:d0:e7:05:68:48:00:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=6dcd9af0-70b7-419a-b929-ed7176f216ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:6c:4b:16:ff:61:9e:aa:0a:1d:45:a9:7e: 14:4b:46:7b:4b:a4:6e:64:eb:56:96:60:77:63:d7: 30:5c:74:6c:b3:b3:e8:6a:df:92:c8:e8:ce:8f:c9: 3c:4e:b5:5b:aa:cb:1b:12:65:5f:1a:35:79:af:e5: 41:9d:7b:23:46:f8:63:c0:c7:f3:54:19:94:8c:c3: 84:6a:b7:8d:a6:60:89:c0:f9:bc:af:1b:c9:4f:cb: f7:62:95:02:8e:b4:36:f6:1b:6b:76:05:0b:4a:7a: 50:f9:f1:79:6a:25:56:e6:5b:23:4f:11:54:7a:9d: cd:0d:b5:d0:c5:96:10:cd:d0:7a:e0:3c:80:71:36: e5:62:97:d7:74:e2:8d:3c:1d:8b:7c:89:c3:e8:05: 7f:8b:6f:ab:db:d1:88:e2:d4:eb:ed:3d:0f:9c:0a: 7e:89:31:68:8a:b8:f4:79:6b:d7:9b:91:cf:ad:a2: 5a:80:42:f5:7a:6e:e4:6c:89:ae:84:84:63:51:9a: a8:17:b0:3f:9e:52:09:78:e1:50:9f:0b:43:b1:1a: c6:ff:35:2f:68:46:1b:59:66:b4:96:04:3e:82:07: f2:16:71:29:9a:4c:9d:c9:41:24:ba:fd:43:d6:85: 04:ae:e6:3a:53:39:cb:fb:a9:f0:0f:17:8b:7b:dc: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:EA:16:71:8E:3E:9B:C1:C1:47:F7:6B:20:AE:A6:1D:F4:C2:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:62:f3:82:5c:cd:8f:d5:37:af:70:61:66:e4:c1:e1:3d:12: 65:1b:e1:9a:3f:f9:f4:cc:68:d5:f6:4d:e9:22:1c:26:58:e7: 0a:5d:fb:82:f7:3a:12:49:a1:44:99:55:0b:a6:96:7c:0b:88: 65:b5:d6:2e:e6:e1:a0:96:d7:65:97:c5:b3:32:b2:c7:61:53: 0a:c5:3e:6c:85:50:9c:83:bb:ff:bb:f1:78:e4:f0:6c:4c:e3: 0d:5d:a4:4a:9c:b4:e1:0c:9c:d4:ed:80:16:4c:c5:c6:cf:70: c6:58:4d:98:9e:a3:32:16:ea:3b:44:2f:d1:2c:b3:bb:f3:bf: 37:8e:4f:52:39:c1:c9:96:bc:08:54:77:c2:b3:4c:70:f8:43: 2d:0a:5b:34:7e:7f:78:66:6c:af:1d:dd:bc:7b:bf:b7:06:7f: 89:51:c8:99:91:e9:d4:44:00:9f:a1:b4:47:df:3d:d8:24:ed: 47:09:df:7a:d1:24:11:ba:06:49:51:70:3a:73:d2:ef:d5:00: f2:54:f7:0a:5e:94:ca:cf:ad:83:f8:f0:6d:64:ce:e1:99:b4: cf:d5:74:20:75:41:9e:0b:b9:cf:d9:25:d8:2d:86:49:93:fd: 9b:23:0c:f3:a5:44:08:3a:2d:7a:f3:f6:d0:92:c1:b6:82:74: 05:c3:36:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZl3+0OcFaEgAeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk NmRjZDlhZjAtNzBiNy00MTlhLWI5MjktZWQ3MTc2ZjIxNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP9sSxb/YZ6qCh1FqX4US0Z7S6RuZOtWlmB3 Y9cwXHRss7Poat+SyOjOj8k8TrVbqssbEmVfGjV5r+VBnXsjRvhjwMfzVBmUjMOE areNpmCJwPm8rxvJT8v3YpUCjrQ29htrdgULSnpQ+fF5aiVW5lsjTxFUep3NDbXQ xZYQzdB64DyAcTblYpfXdOKNPB2LfInD6AV/i2+r29GI4tTr7T0PnAp+iTFoirj0 eWvXm5HPraJagEL1em7kbImuhIRjUZqoF7A/nlIJeOFQnwtDsRrG/zUvaEYbWWa0 lgQ+ggfyFnEpmkydyUEkuv1D1oUEruY6UznL+6nwDxeLe9xG6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEn6hZxjj6bwcFH92sgrqYd9MKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvZGFiNDJiNmUtZTc4OS0z ZjBhLWJiNzEtZjNiMzExYWI0ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxi84JczY/VN69wYWbkweE9EmUb4Zo/+fTMaNX2TekiHCZY5wpd+4L3 OhJJoUSZVQumlnwLiGW11i7m4aCW12WXxbMyssdhUwrFPmyFUJyDu/+78Xjk8GxM 4w1dpEqctOEMnNTtgBZMxcbPcMZYTZieozIW6jtEL9Ess7vzvzeOT1I5wcmWvAhU d8KzTHD4Qy0KWzR+f3hmbK8d3bx7v7cGf4lRyJmR6dREAJ+htEffPdgk7UcJ33rR JBG6BklRcDpz0u/VAPJU9wpelMrPrYP48G1kzuGZtM/VdCB1QZ4Luc/ZJdgthkmT /ZsjDPOlRAg6LXrz9tCSwbaCdAXDNkc= -----END CERTIFICATE-----Generated at Fri Jun 5 18:32:27 2026 by rpki-client