$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa File: bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json) Hash identifier: 3Fi9vDCEnBbjJLKnAHMnm6MH44X4Tnf3HF86zsKqB0Y= Subject key identifier: 9D:C5:19:64:09:6E:BD:EF:AD:FF:E4:E8:49:2B:BC:CF:2C:38:B5:5C Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Certificate serial: 010D0C9F4328584D3DFF8526F3649C8321253710 Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 399624 IP address blocks: 23.129.68.0/24 maxlen: 24 2602:f7a7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:85:26:f3:64:9c:83:21:25:37:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9d55b69f-71b6-4522-a43b-9e6abb12108f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:74:5d:17:c9:1a:55:d8:c0:98:68:13:1c: c3:a3:cd:b4:28:c3:82:f9:2a:5e:7b:1f:a8:5b:e8: 14:e5:3d:60:80:2f:ab:c1:e0:3e:79:4c:e2:5e:8c: f9:db:8e:31:30:43:ac:2c:0f:39:f6:8f:3d:d5:53: c4:68:73:c5:89:f8:96:ac:ca:84:67:79:e9:17:cb: cd:05:78:03:22:e5:2e:d1:ae:c2:73:fd:1d:57:24: 12:ee:72:db:af:d5:3d:66:bd:81:07:3d:9d:c2:e2: c1:4f:7e:95:e0:22:40:60:cb:59:90:2a:9f:e1:98: 31:04:a5:5c:a8:cd:f9:22:65:16:6f:4c:79:58:54: 66:66:1b:b5:4f:d5:af:aa:d2:ad:66:3a:a5:b6:aa: b7:4e:8f:df:48:dc:be:c2:4a:46:a8:a1:51:e3:25: bb:1f:eb:c6:fd:59:79:c3:51:31:13:d1:5f:65:08: 02:61:2b:cc:c8:0a:98:42:42:59:2d:2f:65:fc:d5: e2:01:99:20:ea:68:06:7a:e9:c6:b1:a3:de:e3:45: 07:fd:de:d3:64:66:8b:42:41:61:c9:14:b7:51:ad: 14:a3:8f:97:ff:a1:66:a0:43:7b:36:93:d2:b9:0e: e2:fa:e1:dd:cf:84:8b:d0:12:f1:5d:0c:60:33:53: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C5:19:64:09:6E:BD:EF:AD:FF:E4:E8:49:2B:BC:CF:2C:38:B5:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl X509v3 Authority Key Identifier: keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 IPv6: 2602:f7a7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f1:22:ca:61:3a:f9:af:59:82:64:9e:b3:59:54:ab:19:66: 5e:07:78:e9:f2:1d:2d:59:92:0f:70:4f:40:8f:3c:2d:0f:0d: a5:cb:ae:6a:a8:48:8b:6a:2c:bd:32:ac:62:eb:4b:e8:12:6d: 31:26:3f:3f:44:a8:7e:2d:99:d0:78:4e:4d:eb:f9:a1:4a:49: 6d:30:7d:54:98:ac:e1:f6:ed:28:4e:57:95:40:87:4a:e9:f9: bd:ed:45:5e:92:d3:26:b4:71:ba:eb:e0:32:65:a6:c5:71:cd: 3b:7f:01:6c:23:7a:a5:0f:72:2d:a1:81:7d:1a:de:01:1c:9c: 2b:c7:fe:16:3e:83:a2:cc:0b:98:20:78:02:3e:26:74:ca:f7: ca:60:31:d2:e7:21:0c:a2:a7:35:82:be:02:17:f2:60:39:47: 39:c4:cb:d8:6d:a3:1e:bf:d6:fa:e8:92:87:58:b9:b1:7d:e2: 2f:3b:f4:b1:13:c0:3d:9c:53:8f:6e:98:a1:b2:22:69:40:7f: 7a:14:0e:6e:5a:f7:0d:64:49:1b:46:99:b9:71:64:50:81:12: 0a:b6:b7:b9:fd:fa:20:18:10:69:37:a3:50:e6:05:45:b2:c4: 92:f1:0c:b5:81:79:90:86:29:5e:41:ff:cd:e1:ac:75:9d:20: 0a:9f:05:e0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE09/4Um82ScgyElNxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0 NmNjMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWQ1NWI2OWYtNzFiNi00NTIyLWE0M2ItOWU2YWJiMTIxMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiB0XRfJGlXYwJhoExzDo820KMOC+Speex+o W+gU5T1ggC+rweA+eUziXoz5244xMEOsLA859o891VPEaHPFifiWrMqEZ3npF8vN BXgDIuUu0a7Cc/0dVyQS7nLbr9U9Zr2BBz2dwuLBT36V4CJAYMtZkCqf4ZgxBKVc qM35ImUWb0x5WFRmZhu1T9WvqtKtZjqltqq3To/fSNy+wkpGqKFR4yW7H+vG/Vl5 w1ExE9FfZQgCYSvMyAqYQkJZLS9l/NXiAZkg6mgGeunGsaPe40UH/d7TZGaLQkFh yRS3Ua0Uo4+X/6FmoEN7NpPSuQ7i+uHdz4SL0BLxXQxgM1MIbwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJ3FGWQJbr3vrf/k6EkrvM8sOLVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvYmQ5ZmE1MTAtNGNiMS0z NmFjLWI2ZWYtZDQ3NDhjMDk0ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5 NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD8SLKYTr5r1mCZJ6zWVSrGWZeB3jp8h0t WZIPcE9AjzwtDw2ly65qqEiLaiy9Mqxi60voEm0xJj8/RKh+LZnQeE5N6/mhSklt MH1UmKzh9u0oTleVQIdK6fm97UVektMmtHG66+AyZabFcc07fwFsI3qlD3ItoYF9 Gt4BHJwrx/4WPoOizAuYIHgCPiZ0yvfKYDHS5yEMoqc1gr4CF/JgOUc5xMvYbaMe v9b66JKHWLmxfeIvO/SxE8A9nFOPbpihsiJpQH96FA5uWvcNZEkbRpm5cWRQgRIK tre5/fogGBBpN6NQ5gVFssSS8Qy1gXmQhileQf/N4ax1nSAKnwXg -----END CERTIFICATE-----Generated at Thu Mar 26 22:03:57 2026 by rpki-client