$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa File: 9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa (raw, json) Hash identifier: rtDCPB98o2Md8WJGUiCirTqXKCG4NIY77ptf2zP/lls= Subject key identifier: 4D:BA:20:1F:3E:28:BA:BB:39:F9:97:E9:E0:38:F9:CE:DE:45:17:D1 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584D8EF55E214CE52B70C537CC00 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 13780 IP address blocks: 23.128.88.0/24 maxlen: 24 2602:fc09::/36 maxlen: 36 2602:fc09::/40 maxlen: 40 2602:fc09:800::/40 maxlen: 40 2602:fc09:805::/48 maxlen: 48 2602:fc09:818::/48 maxlen: 48 2602:fc09:a00::/40 maxlen: 40 2602:fc09:d2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5e:21:4c:e5:2b:70:c5:37:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1e515ae2-bd8e-4f7f-ba1a-2718720404d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:0b:b5:25:1b:b1:8e:41:4c:27:2c:7d:81: 1d:66:d6:66:7f:f6:ce:44:02:e4:46:f9:92:f4:c1: a3:5b:7e:0c:ea:2c:00:e2:0a:62:e4:3b:d2:e0:f3: 12:bf:75:a8:f7:1c:79:25:a4:12:8b:b5:03:93:cb: 33:e2:15:af:f7:1d:33:2a:93:b7:56:5f:21:d5:25: 47:75:6f:fa:02:26:eb:70:d5:ea:60:52:7f:88:b1: 54:e9:e7:cf:47:d5:f1:ae:c1:67:60:31:70:47:37: c8:10:b7:f7:c7:ce:31:ab:1a:6f:8f:67:7a:84:0b: 70:e2:57:e2:14:fb:ff:4b:78:11:83:2f:c9:fc:fd: 0c:8f:35:e1:c8:1e:b0:03:11:ea:d4:9e:1b:48:41: ac:04:55:1f:21:8b:95:08:d4:57:cf:7b:d4:82:a8: d2:fe:61:22:58:02:02:a7:04:85:31:59:81:f7:f4: cd:99:24:ce:c0:4a:a3:e8:2e:7d:41:f3:8c:c2:cb: cc:61:9f:b5:f1:75:5d:1d:66:4c:cc:56:11:50:c2: a7:9b:81:b9:3b:82:7c:b6:29:00:03:59:1d:ad:80: 19:a1:3a:d5:1b:f2:cd:9c:bd:c7:50:eb:3c:dc:75: 29:9a:8b:73:6c:6b:6b:b4:9b:03:c3:f0:9e:04:95: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:20:1F:3E:28:BA:BB:39:F9:97:E9:E0:38:F9:CE:DE:45:17:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.128.88.0/24 IPv6: 2602:fc09::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1a:79:a2:94:d1:0f:01:f8:69:c0:18:a4:13:a4:81:eb:1e: 75:d3:ac:b4:f4:8f:f5:1c:00:1e:cd:d1:02:3c:e8:4a:8e:15: af:51:e1:dd:a9:9b:c9:81:f4:8a:20:ce:40:1a:ad:31:ad:a5: dc:f6:b4:5a:7e:f1:4c:df:45:3b:8c:ac:12:a2:eb:05:2c:73: 3d:42:ce:3a:9e:19:35:ee:23:bc:0a:3d:93:8e:5c:9a:15:1e: a5:93:3a:eb:43:36:59:64:32:cf:02:ac:7a:01:1b:e7:b2:94: cb:1d:43:41:0b:a3:e3:9e:87:e0:73:d4:66:b7:5d:e4:f2:60: 62:eb:5d:6d:73:00:df:df:8e:a9:53:91:7f:6f:66:15:e5:02: 8d:1b:92:01:c3:41:2a:ea:6c:1a:c4:03:65:47:9e:53:cd:58: c7:46:fd:6d:db:1f:9a:b3:44:26:14:0b:1e:ed:bb:c2:15:90: 91:7a:dc:34:07:27:43:6c:f2:05:93:72:f3:8e:46:1f:da:a3: d4:3a:17:4e:f1:7e:b9:ef:95:a5:5f:9d:ee:3f:5c:e0:2d:e2: 66:7f:42:64:4b:a1:1b:29:d7:80:f1:26:9b:3b:cf:ad:af:69: 3c:52:37:c1:65:1b:20:6d:b7:f1:67:42:eb:99:71:ed:6e:d8: b6:56:a0:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2O9V4hTOUrcMU3zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MWU1MTVhZTItYmQ4ZS00ZjdmLWJhMWEtMjcxODcyMDQwNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliELtSUbsY5BTCcsfYEdZtZmf/bORALkRvmS 9MGjW34M6iwA4gpi5DvS4PMSv3Wo9xx5JaQSi7UDk8sz4hWv9x0zKpO3Vl8h1SVH dW/6AibrcNXqYFJ/iLFU6efPR9XxrsFnYDFwRzfIELf3x84xqxpvj2d6hAtw4lfi FPv/S3gRgy/J/P0MjzXhyB6wAxHq1J4bSEGsBFUfIYuVCNRXz3vUgqjS/mEiWAIC pwSFMVmB9/TNmSTOwEqj6C59QfOMwsvMYZ+18XVdHWZMzFYRUMKnm4G5O4J8tikA A1kdrYAZoTrVG/LNnL3HUOs83HUpmotzbGtrtJsDw/CeBJVCNQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFE26IB8+KLq7OfmX6eA4+c7eRRfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOWZkZTJhNjktYzUzZi0z M2JmLWI5M2UtNmFlYWFkMzBkMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BYMA4E AgACMAgDBgQmAvwJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABGnmilNEPAfhpwBikE6SB6x5106y09I/1 HAAezdECPOhKjhWvUeHdqZvJgfSKIM5AGq0xraXc9rRafvFM30U7jKwSousFLHM9 Qs46nhk17iO8Cj2TjlyaFR6lkzrrQzZZZDLPAqx6ARvnspTLHUNBC6Pjnofgc9Rm t13k8mBi611tcwDf346pU5F/b2YV5QKNG5IBw0Eq6mwaxANlR55TzVjHRv1t2x+a s0QmFAse7bvCFZCRetw0BydDbPIFk3LzjkYf2qPUOhdO8X6575WlX53uP1zgLeJm f0JkS6EbKdeA8SabO8+tr2k8UjfBZRsgbbfxZ0LrmXHtbti2VqC2 -----END CERTIFICATE-----Generated at Wed May 13 08:43:57 2026 by rpki-client