$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa File: 1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa (raw, json) Hash identifier: tD7s1wpStKmRqcu+9JSuNnNV8D94fcMiomOjA+28moE= Subject key identifier: 39:4C:C3:53:1F:75:2C:B4:83:2E:6A:82:B7:AA:1E:2D:57:85:20:50 Certificate issuer: /CN=13d94d84-ae52-41c8-8236-9b11fdb2c4e4 Certificate serial: 010D0C9F4328584DFBD5DC95AC5EA4325990E3E0 Authority key identifier: F0:52:63:C2:28:AA:96:56:8C:E8:D5:4A:78:08:2A:D7:00:19:4F:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 401561 IP address blocks: 23.131.196.0/24 maxlen: 24 2602:f751::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:dc:95:ac:5e:a4:32:59:90:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d94d84-ae52-41c8-8236-9b11fdb2c4e4 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=0b6cde79-a05e-4fba-8039-5827402696bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:1b:16:cd:d3:c5:f9:cd:c1:4d:6e:10:40: 8a:8d:43:6d:1b:b5:65:ce:31:eb:e2:ea:a0:a1:d7: 47:ed:39:b9:1e:1b:98:ec:d3:16:a5:c0:ac:1b:f6: 61:15:a1:eb:fe:2d:d0:b5:30:73:3b:5e:2b:e0:48: 2c:1a:82:ce:aa:e1:11:d9:40:ac:c9:17:fb:fc:92: c7:c5:b0:e3:48:09:7a:3c:e7:fb:ea:2d:13:6a:5b: a6:ff:d0:c3:a3:cc:c4:c5:b0:ae:06:87:a8:c4:25: 31:fa:d2:9f:15:75:b5:ab:f8:79:7b:9d:19:e9:40: b8:dc:07:1c:73:66:5d:94:1b:1d:5f:47:2e:28:14: 48:05:cb:e7:aa:9e:bc:0e:bc:df:69:6b:9c:80:f4: 70:ce:05:a1:93:40:d2:c9:79:d5:5e:3c:22:fe:76: d3:ec:f1:1d:aa:2a:4f:2e:09:bd:22:5a:03:e5:f6: 39:d1:2c:00:70:2a:13:f7:17:e3:d4:8a:19:aa:e1: 9d:a6:06:0b:74:a2:76:ab:91:02:32:d0:4d:f9:a5: cd:6b:4d:b3:8f:a5:8b:cc:ef:17:6d:32:e7:15:29: 11:3f:79:8c:0d:94:9d:1f:b7:eb:79:b7:f5:92:36: 58:ab:e6:45:f4:8f:82:92:3e:40:50:1f:1c:cb:41: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4C:C3:53:1F:75:2C:B4:83:2E:6A:82:B7:AA:1E:2D:57:85:20:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/1f9a3bc1-07a9-30b4-a52b-9f4b6e2afc7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.crl X509v3 Authority Key Identifier: keyid:F0:52:63:C2:28:AA:96:56:8C:E8:D5:4A:78:08:2A:D7:00:19:4F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/13d94d84-ae52-41c8-8236-9b11fdb2c4e4.cer sbgp-ipAddrBlock: critical IPv4: 23.131.196.0/24 IPv6: 2602:f751::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7d:9d:f2:c0:24:24:ad:f5:87:3e:11:c2:9e:7d:63:8b:3d: 1b:ff:15:9d:65:89:cc:a0:af:95:3b:fc:b3:0e:73:1d:8b:85: a5:2d:01:c3:34:b2:9d:3c:e2:c5:4c:d3:12:94:13:b3:6f:cf: 62:d3:be:d6:f5:84:2a:ef:53:f2:c0:c6:38:a5:44:08:0c:33: b9:1c:b0:d0:65:cf:2a:cc:9b:a6:96:b6:2e:98:d2:2b:52:01: 69:2a:11:3f:06:5d:21:4f:33:47:cf:f7:88:41:8a:9e:03:19: c8:80:da:b2:67:94:ba:aa:92:61:bb:78:25:c7:59:c6:f5:5e: e3:c1:5e:8c:c1:8b:c1:cb:95:f0:ed:19:00:9d:c0:7c:33:29: a6:5e:b8:b0:d6:72:39:97:ee:bf:ac:96:1b:32:26:34:ba:05: f9:a3:67:88:d5:45:c8:7e:03:87:f9:ba:ac:ad:60:71:ce:2d: 60:44:2c:70:98:06:1a:dc:17:9a:23:0f:93:66:72:82:d2:7a: 8b:3c:65:fe:7b:ee:83:65:73:54:b5:9e:10:a1:41:81:cf:4b: 9f:f9:c3:69:ff:0a:99:ce:6e:04:58:41:d1:ae:a4:77:30:69: 9e:d5:2a:6f:fc:38:1e:e5:56:17:8d:c2:c3:1d:15:d3:d4:ec: 66:43:b0:b3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE371dyVrF6kMlmQ4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNkOTRkODQtYWU1Mi00MWM4LTgyMzYtOWIxMWZkYjJj NGU0MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MGI2Y2RlNzktYTA1ZS00ZmJhLTgwMzktNTgyNzQwMjY5NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9cbFs3TxfnNwU1uEECKjUNtG7VlzjHr4uqg oddH7Tm5HhuY7NMWpcCsG/ZhFaHr/i3QtTBzO14r4EgsGoLOquER2UCsyRf7/JLH xbDjSAl6POf76i0Talum/9DDo8zExbCuBoeoxCUx+tKfFXW1q/h5e50Z6UC43Acc c2ZdlBsdX0cuKBRIBcvnqp68DrzfaWucgPRwzgWhk0DSyXnVXjwi/nbT7PEdqipP Lgm9IloD5fY50SwAcCoT9xfj1IoZquGdpgYLdKJ2q5ECMtBN+aXNa02zj6WLzO8X bTLnFSkRP3mMDZSdH7frebf1kjZYq+ZF9I+Ckj5AUB8cy0FFBQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDlMw1MfdSy0gy5qgreqHi1XhSBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xM2Q5 NGQ4NC1hZTUyLTQxYzgtODIzNi05YjExZmRiMmM0ZTQvMWY5YTNiYzEtMDdhOS0z MGI0LWE1MmItOWY0YjZlMmFmYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTNkOTRkODQtYWU1Mi00MWM4LTgy MzYtOWIxMWZkYjJjNGU0LzEzZDk0ZDg0LWFlNTItNDFjOC04MjM2LTliMTFmZGIy YzRlNC5jcmwwHwYDVR0jBBgwFoAU8FJjwiiqllaM6NVKeAgq1wAZT3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xM2Q5NGQ4NC1hZTUyLTQxYzgtODIzNi05YjEx ZmRiMmM0ZTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4PEMA4E AgACMAgDBgQmAvdRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOfZ3ywCQkrfWHPhHCnn1jiz0b/xWdZYnM oK+VO/yzDnMdi4WlLQHDNLKdPOLFTNMSlBOzb89i077W9YQq71PywMY4pUQIDDO5 HLDQZc8qzJumlrYumNIrUgFpKhE/Bl0hTzNHz/eIQYqeAxnIgNqyZ5S6qpJhu3gl x1nG9V7jwV6MwYvBy5Xw7RkAncB8MymmXriw1nI5l+6/rJYbMiY0ugX5o2eI1UXI fgOH+bqsrWBxzi1gRCxwmAYa3BeaIw+TZnKC0nqLPGX+e+6DZXNUtZ4QoUGBz0uf +cNp/wqZzm4EWEHRrqR3MGme1Spv/Dge5VYXjcLDHRXT1OxmQ7Cz -----END CERTIFICATE-----Generated at Fri Jun 5 18:33:12 2026 by rpki-client