$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa File: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (raw, json) Hash identifier: BQ1l1PV104Y2a1gRCM+64mBQ65ixhnBRMoWeU8qoSHE= Subject key identifier: 5A:4E:1E:C0:FC:40:BD:37:23:46:4C:FF:41:FF:5C:DF:CB:82:69:29 Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584DBA3AFC3714154093AF04C040 Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 401328 IP address blocks: 23.131.20.0/24 maxlen: 32 2602:f769::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:fc:37:14:15:40:93:af:04:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=306ee1c9-7595-45a5-86db-97f3710d3458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:22:e1:5a:f7:5d:33:07:eb:e0:8f:9c:fe: 02:45:b4:97:7b:01:c8:19:5b:81:e0:98:fe:7b:7f: 0a:e1:8d:3e:4e:7a:bf:9c:df:f6:d2:52:4e:d1:1a: 27:37:9f:e7:cc:f9:92:7c:3d:23:24:94:b3:3c:3b: 94:8d:c3:a1:3e:fb:b0:d7:04:2c:5b:42:4c:e4:93: 06:8a:66:33:93:14:c2:1e:3a:e5:3e:c3:b3:48:23: 30:c0:5c:43:d2:ee:15:b2:92:53:c0:97:9c:f7:07: 45:73:fb:91:28:3a:a1:b9:45:f7:cd:57:22:8d:0c: 36:bb:e0:f6:60:ee:12:7e:d0:66:bc:79:41:7a:b0: c4:26:b5:78:30:93:87:75:65:08:e6:4f:4e:54:64: f0:f9:7f:e6:31:d5:14:a1:c0:3e:14:1d:56:17:f3: 03:0d:74:fd:e3:c3:e1:68:a9:6a:ee:38:c2:c8:63: a1:99:b4:73:ee:f3:8a:93:9c:df:40:39:6d:e5:06: 6f:51:48:cc:82:db:5c:59:c6:d9:f0:93:45:b4:7b: fb:c7:17:00:16:7e:80:fa:41:49:25:bd:03:3b:25: ab:72:c6:e5:25:25:52:ea:0e:95:52:90:16:60:bf: fb:03:59:01:de:2e:66:5e:ce:c6:b4:63:ce:a8:76: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4E:1E:C0:FC:40:BD:37:23:46:4C:FF:41:FF:5C:DF:CB:82:69:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:87:d8:9b:8e:24:14:9f:8f:5b:46:68:4c:30:01:7d:c0:42: 53:ae:27:94:c9:0c:4c:0a:68:e2:98:e3:7d:86:3b:1e:7a:40: ec:59:95:de:dc:21:0a:c0:ee:e6:b9:d1:e6:91:ca:ac:91:f9: c7:01:41:60:6d:bc:13:3c:e4:04:60:c5:04:3e:ee:e0:e4:dc: ba:c6:3d:75:b9:a0:9c:99:a5:71:57:49:f7:c9:a3:8b:2d:8c: 57:48:66:30:0c:b3:cb:64:3e:cb:f3:49:75:3f:55:1f:bb:26: 3b:a0:09:1c:ae:07:09:2b:16:8f:8e:2f:58:b8:8a:54:75:f5: 7e:b4:fb:ee:e6:e2:67:bb:22:14:b3:a0:9a:d4:2f:be:26:b9: bc:1d:e2:7e:9d:f8:04:71:0f:0a:44:2c:09:fd:e2:59:b2:06: bd:46:4c:1e:ec:dc:b1:a6:d7:4e:49:c7:e4:a5:6b:a3:50:bc: 58:99:e2:d6:44:5d:1d:42:7c:ee:d4:cb:fb:6e:f9:75:5d:b9: 4b:70:92:0f:f7:95:0f:b6:29:77:b7:35:f4:1f:8e:6d:f0:65: d4:3f:22:47:1c:59:e2:9a:c9:53:45:10:22:a4:66:da:55:d8: 60:3b:7b:e7:ae:0a:ca:4d:05:c2:f9:32:f2:40:b6:dc:1b:20: 8e:8c:1e:67 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE26Ovw3FBVAk68EwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MzA2ZWUxYzktNzU5NS00NWE1LTg2ZGItOTdmMzcxMGQzNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIki4Vr3XTMH6+CPnP4CRbSXewHIGVuB4Jj+ e38K4Y0+Tnq/nN/20lJO0RonN5/nzPmSfD0jJJSzPDuUjcOhPvuw1wQsW0JM5JMG imYzkxTCHjrlPsOzSCMwwFxD0u4VspJTwJec9wdFc/uRKDqhuUX3zVcijQw2u+D2 YO4SftBmvHlBerDEJrV4MJOHdWUI5k9OVGTw+X/mMdUUocA+FB1WF/MDDXT948Ph aKlq7jjCyGOhmbRz7vOKk5zfQDlt5QZvUUjMgttcWcbZ8JNFtHv7xxcAFn6A+kFJ Jb0DOyWrcsblJSVS6g6VUpAWYL/7A1kB3i5mXs7GtGPOqHb1uwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFpOHsD8QL03I0ZM/0H/XN/LgmkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMTRiMzhlMzctYjVmZS0z ZDAxLTk3ZGItM2I3ZGUxY2ViNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4MUMA4E AgACMAgDBgQmAvdpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuh9ibjiQUn49bRmhMMAF9wEJTrieUyQxM CmjimON9hjseekDsWZXe3CEKwO7mudHmkcqskfnHAUFgbbwTPOQEYMUEPu7g5Ny6 xj11uaCcmaVxV0n3yaOLLYxXSGYwDLPLZD7L80l1P1UfuyY7oAkcrgcJKxaPji9Y uIpUdfV+tPvu5uJnuyIUs6Ca1C++Jrm8HeJ+nfgEcQ8KRCwJ/eJZsga9Rkwe7Nyx ptdOScfkpWujULxYmeLWRF0dQnzu1Mv7bvl1XblLcJIP95UPtil3tzX0H45t8GXU PyJHHFnimslTRRAipGbaVdhgO3vnrgrKTQXC+TLyQLbcGyCOjB5n -----END CERTIFICATE-----Generated at Wed May 13 05:35:35 2026 by rpki-client