$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa File: 4006a66d-6da1-3667-95e8-2ae868c8c68e.roa (raw, json) Hash identifier: jWk4m1eAMmGVXVGC2dqPuedIW8r2bgGEbzG0PPWfarc= Subject key identifier: B9:44:84:A8:AC:40:8D:B9:F6:C7:26:3F:94:0C:D5:ED:E2:04:D1:1A Certificate issuer: /CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Certificate serial: 010D0C9F4328584D95F01E9B58BA3E2E5C91DBC0 Authority key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 399587 IP address blocks: 23.139.228.0/24 maxlen: 24 2602:f623::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1e:9b:58:ba:3e:2e:5c:91:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=cbc6672b-d376-4573-ba74-173cb9cf1a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:9a:7c:9d:cb:b2:81:bd:b9:56:ad:81:ec: cf:41:b8:45:80:bd:1e:2c:a4:d2:b1:98:3c:8b:ad: b8:f5:5d:81:f6:fb:cd:28:f8:c6:33:0f:cc:61:08: 40:5c:0f:10:ef:2d:33:2f:1b:c5:81:ee:e0:f1:1c: da:ae:7c:2b:45:96:b0:a5:96:8d:ff:5c:08:32:b8: 72:96:01:4e:56:c3:8a:83:82:69:5c:5a:ed:45:c8: 03:cc:7a:01:9d:ea:06:f4:eb:37:c6:a3:de:c9:95: ba:f7:09:04:05:0f:d2:43:6c:9f:d9:dd:80:2a:e2: 4d:d8:5c:d5:e3:03:c9:0b:af:35:fb:e7:d5:46:23: 8c:eb:ac:9b:fc:65:97:54:d2:2b:a1:7f:0f:2b:48: 50:01:23:32:2f:c6:0d:5b:e7:1d:8d:c3:5d:f5:57: d1:96:09:d4:9c:58:52:2e:df:05:67:0f:13:6f:81: 63:45:dd:1e:80:a0:3f:c1:56:10:fe:1e:fc:97:2d: 99:c8:f3:95:f5:8f:79:94:98:55:dc:aa:79:c3:63: 04:18:42:cf:de:a3:82:86:9a:d3:d5:9b:77:a7:d8: 08:67:6c:d9:b8:aa:ca:00:77:42:8e:d4:3f:4a:01: 3f:a9:49:e2:46:e5:04:9a:15:4d:2a:4b:67:8c:39: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:44:84:A8:AC:40:8D:B9:F6:C7:26:3F:94:0C:D5:ED:E2:04:D1:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl X509v3 Authority Key Identifier: keyid:14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer sbgp-ipAddrBlock: critical IPv4: 23.139.228.0/24 IPv6: 2602:f623::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:aa:82:ea:64:1e:df:28:ac:22:63:62:21:30:fe:16:29:08: a0:ff:15:3d:54:16:7e:16:4b:b4:60:d9:5c:c9:40:6b:14:15: 70:26:13:31:e5:e6:51:2b:87:0f:8a:f4:53:de:36:9c:ef:6a: e6:dc:74:d4:3d:b5:49:2a:c6:c5:7c:44:d9:12:fd:57:1a:7e: b5:84:3f:68:64:26:f1:1c:c9:d4:a3:13:e2:47:58:7e:a6:97: 5f:ae:de:bc:62:ac:9a:c2:af:ad:c8:84:28:36:1e:43:f2:23: d2:76:b1:3d:7a:ac:f9:dc:fc:cb:19:2e:ed:03:50:32:d5:c2: f5:35:15:ca:ce:a3:35:e7:88:f5:f1:60:09:f4:3d:b9:df:17: 06:53:c7:6a:67:87:ca:c4:04:14:ea:5f:b5:a0:0c:ae:39:c9: 30:aa:6c:dc:d4:56:28:c7:a8:ae:61:81:ec:7e:08:aa:d6:ca: 4f:0f:c7:ba:b8:39:49:7f:f3:aa:64:40:c6:6f:a6:bb:0a:f1: e6:57:88:e0:70:3b:b8:0f:f4:39:b4:a5:79:72:5a:3b:2b:21: ef:be:cb:26:76:ab:2f:78:5b:b9:bb:b5:0e:67:f3:9c:59:3b: cf:e6:50:28:45:d8:6b:27:03:73:6a:b9:0f:6d:c8:17:a0:e8: a4:b0:b6:e1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2V8B6bWLo+LlyR28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5 MTljMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk Y2JjNjY3MmItZDM3Ni00NTczLWJhNzQtMTczY2I5Y2YxYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBmafJ3LsoG9uVatgezPQbhFgL0eLKTSsZg8 i6249V2B9vvNKPjGMw/MYQhAXA8Q7y0zLxvFge7g8RzarnwrRZawpZaN/1wIMrhy lgFOVsOKg4JpXFrtRcgDzHoBneoG9Os3xqPeyZW69wkEBQ/SQ2yf2d2AKuJN2FzV 4wPJC681++fVRiOM66yb/GWXVNIroX8PK0hQASMyL8YNW+cdjcNd9VfRlgnUnFhS Lt8FZw8Tb4FjRd0egKA/wVYQ/h78ly2ZyPOV9Y95lJhV3Kp5w2MEGELP3qOChprT 1Zt3p9gIZ2zZuKrKAHdCjtQ/SgE/qUniRuUEmhVNKktnjDl65QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLlEhKisQI259scmP5QM1e3iBNEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZm NTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvNDAwNmE2NmQtNmRhMS0z NjY3LTk1ZTgtMmFlODY4YzhjNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDk2ZjU5MmEtOGZhOS00ZWM4LWEy NzItYjU2YzI1Mzc5MTljL2Q5NmY1OTJhLThmYTktNGVjOC1hMjcyLWI1NmMyNTM3 OTE5Yy5jcmwwHwYDVR0jBBgwFoAUFJ7+v2rZASg6Fn5McNNjQUeAQvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZj MjUzNzkxOWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4vkMA4E AgACMAgDBgQmAvYjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTqoLqZB7fKKwiY2IhMP4WKQig/xU9VBZ+ Fku0YNlcyUBrFBVwJhMx5eZRK4cPivRT3jac72rm3HTUPbVJKsbFfETZEv1XGn61 hD9oZCbxHMnUoxPiR1h+ppdfrt68Yqyawq+tyIQoNh5D8iPSdrE9eqz53PzLGS7t A1Ay1cL1NRXKzqM154j18WAJ9D253xcGU8dqZ4fKxAQU6l+1oAyuOckwqmzc1FYo x6iuYYHsfgiq1spPD8e6uDlJf/OqZEDGb6a7CvHmV4jgcDu4D/Q5tKV5clo7KyHv vssmdqsveFu5u7UOZ/OcWTvP5lAoRdhrJwNzarkPbcgXoOiksLbh -----END CERTIFICATE-----Generated at Wed May 13 12:33:43 2026 by rpki-client