$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa File: 5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa (raw, json) Hash identifier: memJayJIv4fhOOYK6GkZoLfrKIEwz6cTO57QIkfyk6c= Subject key identifier: 18:AA:C5:4A:CF:5D:1A:30:3B:40:6A:55:76:46:EF:11:F7:D7:6B:80 Certificate issuer: /CN=3e3dd181-6bf9-437c-8807-1849db23c718 Certificate serial: 010D0C9F4328584DCDC59ADF75497849DF514390 Authority key identifier: 13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 395047 IP address blocks: 23.134.20.0/24 maxlen: 24 2602:f6f8::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:9a:df:75:49:78:49:df:51:43:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3dd181-6bf9-437c-8807-1849db23c718 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=20a1b09d-6a3c-4e4b-b7ad-fddaea941a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:18:66:21:08:d8:bb:81:61:1a:f9:73:ea: 96:23:57:6b:3b:4b:a8:73:21:79:1a:cd:a3:ae:70: 6e:0b:28:c2:16:4b:81:f3:84:74:c9:b6:46:b3:ba: 79:7b:9d:46:61:51:22:39:d4:b8:a3:21:81:24:25: 2b:88:b3:94:ef:a4:cf:28:24:1e:8b:64:e0:80:45: a2:0d:6e:cf:9d:f6:28:44:4e:de:fc:ee:f4:43:71: e4:74:b9:77:1a:90:4e:52:87:04:40:31:44:de:54: 6d:c1:5b:7b:92:28:ac:3f:e0:e8:a8:54:53:31:f7: 02:d4:ca:c3:dc:3d:8c:90:59:a0:8c:80:f9:4b:51: 06:fd:46:7b:39:bd:e6:1b:df:7d:18:a8:04:49:7b: e9:82:b0:3e:51:64:d7:4c:65:e4:83:9a:44:c0:8d: 06:e7:0e:c9:b8:88:14:de:b3:2b:e6:96:7e:42:4a: 84:ec:52:f5:19:db:65:d9:f3:c8:b8:69:74:ec:2b: c8:02:c6:2f:dd:3a:03:91:a1:6b:46:1e:d7:e1:ff: 92:c2:68:02:36:be:94:34:6e:07:56:2e:69:86:63: c6:dc:74:dd:ba:e4:b3:b6:16:da:cb:e2:e4:d3:5f: 94:6d:19:da:ad:57:4f:1f:65:2f:9c:db:10:22:d3: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AA:C5:4A:CF:5D:1A:30:3B:40:6A:55:76:46:EF:11:F7:D7:6B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/5aacb72c-6a46-3289-b1a0-38d05bf4f44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718/3e3dd181-6bf9-437c-8807-1849db23c718.crl X509v3 Authority Key Identifier: keyid:13:14:C7:3E:88:A7:5C:70:23:EA:16:47:F6:B3:FD:F7:F1:4A:3B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e3dd181-6bf9-437c-8807-1849db23c718.cer sbgp-ipAddrBlock: critical IPv4: 23.134.20.0/24 IPv6: 2602:f6f8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3a:5c:ee:98:de:da:03:79:12:44:c3:d1:52:20:10:90:82: 31:89:52:f7:51:64:f7:13:3f:7d:b8:2f:a2:c4:32:25:51:9b: bc:7a:ae:e7:6d:da:b5:2c:89:fc:b9:81:d1:07:e7:46:0b:d8: 0f:f4:a3:4a:9c:2d:a9:70:55:7c:ca:1f:dc:97:3c:62:99:0f: 11:3e:9d:b2:36:49:36:c5:1b:f1:27:bd:6d:d0:9b:a8:89:6f: 22:f9:27:9e:aa:81:61:85:55:44:e1:ce:9c:02:d4:4c:bb:6b: c6:88:f5:07:53:4a:3e:0c:54:52:1d:05:3d:ce:79:88:e6:b8: fc:e3:f2:0c:ad:92:f7:41:14:0b:de:8a:4c:ec:b2:b5:80:83: 51:93:a7:66:37:5e:c9:09:09:b9:e9:d7:ab:9b:ff:69:d0:9e: 1b:fb:99:63:e9:4a:d9:07:d4:5b:63:ae:02:0f:ba:2f:61:e4: 9e:ba:3b:94:0b:9d:ca:1f:77:d4:0c:46:cc:c6:14:51:1b:d5: 73:3d:c1:c8:05:1d:27:3a:49:d0:4c:45:1b:6f:10:87:cd:fb: db:df:e1:99:48:0c:26:e7:b1:47:5a:80:bf:b3:65:f2:bc:fa: be:0b:9a:33:ac:3b:ae:47:5f:a6:ab:26:87:a2:31:a7:59:63: d1:c9:5e:9a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3NxZrfdUl4Sd9RQ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzZGQxODEtNmJmOS00MzdjLTg4MDctMTg0OWRiMjNj NzE4MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk MjBhMWIwOWQtNmEzYy00ZTRiLWI3YWQtZmRkYWVhOTQxYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xcYZiEI2LuBYRr5c+qWI1drO0uocyF5Gs2j rnBuCyjCFkuB84R0ybZGs7p5e51GYVEiOdS4oyGBJCUriLOU76TPKCQei2TggEWi DW7PnfYoRE7e/O70Q3HkdLl3GpBOUocEQDFE3lRtwVt7kiisP+DoqFRTMfcC1MrD 3D2MkFmgjID5S1EG/UZ7Ob3mG999GKgESXvpgrA+UWTXTGXkg5pEwI0G5w7JuIgU 3rMr5pZ+QkqE7FL1Gdtl2fPIuGl07CvIAsYv3ToDkaFrRh7X4f+SwmgCNr6UNG4H Vi5phmPG3HTduuSzthbay+Lk01+UbRnarVdPH2UvnNsQItMhKwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBiqxUrPXRowO0BqVXZG7xH312uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZTNk ZDE4MS02YmY5LTQzN2MtODgwNy0xODQ5ZGIyM2M3MTgvNWFhY2I3MmMtNmE0Ni0z Mjg5LWIxYTAtMzhkMDViZjRmNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2UzZGQxODEtNmJmOS00MzdjLTg4 MDctMTg0OWRiMjNjNzE4LzNlM2RkMTgxLTZiZjktNDM3Yy04ODA3LTE4NDlkYjIz YzcxOC5jcmwwHwYDVR0jBBgwFoAUExTHPoinXHAj6hZH9rP99/FKO80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZTNkZDE4MS02YmY5LTQzN2MtODgwNy0xODQ5 ZGIyM2M3MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4YUMA4E AgACMAgDBgAmAvb4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfOlzumN7aA3kSRMPRUiAQkIIxiVL3UWT3 Ez99uC+ixDIlUZu8eq7nbdq1LIn8uYHRB+dGC9gP9KNKnC2pcFV8yh/clzximQ8R Pp2yNkk2xRvxJ71t0JuoiW8i+SeeqoFhhVVE4c6cAtRMu2vGiPUHU0o+DFRSHQU9 znmI5rj84/IMrZL3QRQL3opM7LK1gINRk6dmN17JCQm56derm/9p0J4b+5lj6UrZ B9RbY64CD7ovYeSeujuUC53KH3fUDEbMxhRRG9VzPcHIBR0nOknQTEUbbxCHzfvb 3+GZSAwm57FHWoC/s2XyvPq+C5ozrDuuR1+mqyaHojGnWWPRyV6a -----END CERTIFICATE-----Generated at Wed May 13 15:07:46 2026 by rpki-client