$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa File: 2b69ec88-0999-3936-983b-14aa048586b6.roa (raw, json) Hash identifier: 1WUvpoIFbR2ODRLrO7DU8ptXOUlIYb+kiXiXnGzkupw= Subject key identifier: 38:23:28:80:CF:39:CB:81:26:50:43:4B:31:13:59:C1:7C:2E:00:CC Certificate issuer: /CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Certificate serial: 010D0C9F4328584DDD208388969F7972B2FA14D0 Authority key identifier: 82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 397617 IP address blocks: 23.136.240.0/24 maxlen: 24 2602:fdce::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:83:88:96:9f:79:72:b2:fa:14:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=6fb76a14-d3ea-4bba-94e4-c18be05ec899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:e3:48:15:b1:57:81:c2:0b:a1:2e:14:19: 31:34:ad:76:44:9c:11:1a:a9:4f:02:b2:e8:1c:0a: 3b:ea:8c:16:38:ed:41:23:6a:4f:e0:80:0a:f9:3a: a4:e6:77:69:9c:25:b6:cd:a9:6b:dc:f8:48:fb:e0: 42:c9:c6:4e:79:9c:30:da:e6:83:a0:8c:18:b1:e6: 93:64:05:08:bf:3f:3c:c1:9a:cc:a3:57:57:92:05: a6:df:f0:89:61:d7:9f:81:94:90:ed:cb:7d:43:8a: 14:bc:6e:07:ae:fb:38:66:1e:b7:e3:72:22:ae:c0: 28:e1:cc:01:6c:f1:7b:9b:80:bd:96:bd:53:95:21: 98:b2:35:ad:98:e5:5c:5f:7b:8d:48:5b:a1:1e:de: 65:52:b6:78:96:0d:89:4a:cd:bb:b5:b0:f5:c6:c1: c1:8c:32:fb:cd:d9:89:44:19:3d:90:59:68:df:ad: bb:e4:a9:e6:2e:da:a9:5b:3f:be:de:66:8b:f3:0f: cc:42:7a:44:92:4a:b9:29:d3:ea:57:01:4a:3d:de: 96:74:e4:8b:99:b1:20:58:51:d3:65:65:a7:b7:98: 7e:20:d1:04:3d:cd:eb:f8:9b:ac:40:6a:77:76:f3: 88:25:0b:87:90:87:1e:f9:24:8e:3b:b0:16:0c:c8: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:23:28:80:CF:39:CB:81:26:50:43:4B:31:13:59:C1:7C:2E:00:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl X509v3 Authority Key Identifier: keyid:82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer sbgp-ipAddrBlock: critical IPv4: 23.136.240.0/24 IPv6: 2602:fdce::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:92:63:ca:2f:8c:36:5d:63:85:ce:6c:2e:cb:11:16:b4:fa: 27:06:15:f8:21:f9:74:58:78:ad:82:cb:bb:f9:43:ba:39:33: f8:e7:90:e0:5a:c8:9f:a3:e7:fb:68:92:51:9d:e8:6b:bb:ba: ec:af:0f:8e:98:05:df:3c:a8:e9:52:30:53:13:52:4f:fa:99: 76:ba:92:42:2d:c4:5d:5e:e0:9a:0b:bf:49:24:8c:9a:cb:17: 67:e5:fd:10:1d:ab:d3:8a:a1:5b:cd:58:86:e9:f9:3d:88:56: 3c:f4:dd:45:f5:18:c0:9d:3f:62:96:03:df:b8:88:a2:59:e5: 00:5e:e6:d0:15:d5:64:15:4b:0e:f6:59:47:1e:10:9e:a3:d2: 60:22:77:e6:1f:01:b9:66:e0:9e:dd:6d:45:d0:67:d4:1e:06: 19:9a:d3:5b:1d:28:c5:1a:e7:7f:9a:78:7e:f4:34:9c:7b:9a: 99:58:a9:ed:c9:8b:0a:db:45:eb:c6:3f:80:ff:cc:88:9f:53: 92:97:b1:a8:8a:b5:0a:ea:e3:9d:f0:68:d6:f9:0b:b5:23:5f: 09:d9:71:53:6d:68:1b:ea:72:1a:d1:b4:81:da:2d:6d:5a:71: 3b:f7:01:93:5a:7a:a2:d3:48:97:fc:e8:a0:77:9c:eb:ab:77: e0:3e:89:07 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3dIIOIlp95crL6FNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMmExZTUtNjJjZC00NjA4LWE1ODQtYTNkMDhiZTA3 MWQ4MB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk NmZiNzZhMTQtZDNlYS00YmJhLTk0ZTQtYzE4YmUwNWVjODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4DjSBWxV4HCC6EuFBkxNK12RJwRGqlPArLo HAo76owWOO1BI2pP4IAK+Tqk5ndpnCW2zalr3PhI++BCycZOeZww2uaDoIwYseaT ZAUIvz88wZrMo1dXkgWm3/CJYdefgZSQ7ct9Q4oUvG4Hrvs4Zh6343IirsAo4cwB bPF7m4C9lr1TlSGYsjWtmOVcX3uNSFuhHt5lUrZ4lg2JSs27tbD1xsHBjDL7zdmJ RBk9kFlo36275KnmLtqpWz++3maL8w/MQnpEkkq5KdPqVwFKPd6WdOSLmbEgWFHT ZWWnt5h+INEEPc3r+JusQGp3dvOIJQuHkIce+SSOO7AWDMiBrwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDgjKIDPOcuBJlBDSzETWcF8LgDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzIy YTFlNS02MmNkLTQ2MDgtYTU4NC1hM2QwOGJlMDcxZDgvMmI2OWVjODgtMDk5OS0z OTM2LTk4M2ItMTRhYTA0ODU4NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWMyMmExZTUtNjJjZC00NjA4LWE1 ODQtYTNkMDhiZTA3MWQ4L2FjMjJhMWU1LTYyY2QtNDYwOC1hNTg0LWEzZDA4YmUw NzFkOC5jcmwwHwYDVR0jBBgwFoAUgkbXmAZUuK7KBNsSfpxxXzSXSpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzIyYTFlNS02MmNkLTQ2MDgtYTU4NC1hM2Qw OGJlMDcxZDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4jwMA4E AgACMAgDBgQmAv3OADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRkmPKL4w2XWOFzmwuyxEWtPonBhX4Ifl0 WHitgsu7+UO6OTP455DgWsifo+f7aJJRnehru7rsrw+OmAXfPKjpUjBTE1JP+pl2 upJCLcRdXuCaC79JJIyayxdn5f0QHavTiqFbzViG6fk9iFY89N1F9RjAnT9ilgPf uIiiWeUAXubQFdVkFUsO9llHHhCeo9JgInfmHwG5ZuCe3W1F0GfUHgYZmtNbHSjF Gud/mnh+9DSce5qZWKntyYsK20Xrxj+A/8yIn1OSl7GoirUK6uOd8GjW+Qu1I18J 2XFTbWgb6nIa0bSB2i1tWnE79wGTWnqi00iX/Oigd5zrq3fgPokH -----END CERTIFICATE-----Generated at Mon May 25 05:46:02 2026 by rpki-client