$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa File: 0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa (raw, json) Hash identifier: wEdInYfmb3J65jNyG3qZ7uW8dpxM9Z5+10fUvHspvw4= Subject key identifier: 47:0D:DF:10:BD:11:A4:BA:C8:13:5E:D5:BF:E1:E8:69:6C:2D:9C:F6 Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584CAA2721B92E9D6E175B49B9A0 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 215475 IP address blocks: 23.161.24.0/24 maxlen: 24 2602:2f2:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:21:b9:2e:9d:6e:17:5b:49:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=845a183c-e622-4c5b-90b5-79c09e78c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:f9:1e:93:c9:a0:8a:bc:63:f3:fb:ba:81: 92:87:7b:e4:07:d5:ed:a1:6a:7d:61:b3:26:1b:de: f0:d4:74:98:1f:36:b4:a0:0b:74:97:a6:79:8e:2e: 3b:3c:5f:55:04:4a:b8:54:84:73:b3:36:7c:37:db: 84:b7:9f:27:4e:9c:74:fe:fb:23:df:fa:e9:5b:ac: fd:25:85:11:4c:80:82:eb:aa:c8:ce:28:dc:fc:cd: 1a:eb:6b:47:c1:2c:6d:55:e3:01:2a:6c:52:c6:f6: 4d:72:02:8e:2c:0d:1b:29:97:68:49:56:25:84:a5: 2b:0f:4b:ad:41:51:26:9f:ac:ff:83:0e:10:07:0f: 8f:0a:c6:25:d4:16:73:2f:14:f7:93:b4:77:51:cd: 2d:50:b2:20:46:0a:d1:da:69:d7:37:9a:80:38:26: 91:3e:8f:12:58:f6:f8:ae:70:15:09:c6:fe:e0:68: 6b:1d:65:62:08:e7:15:e8:9e:53:d3:3c:39:7c:85: a2:12:dc:21:9f:07:19:21:0a:18:10:62:4a:65:89: 4d:78:03:9d:de:0a:09:e8:a6:16:85:06:c7:7f:9d: ed:75:bc:f0:6c:cd:94:e8:04:5c:fa:b8:80:1f:ea: 82:11:83:bf:98:74:21:58:10:37:23:1e:09:ef:b1: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:DF:10:BD:11:A4:BA:C8:13:5E:D5:BF:E1:E8:69:6C:2D:9C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.161.24.0/24 IPv6: 2602:2f2:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:09:67:90:ac:30:17:60:35:9d:83:d1:33:41:dd:87:48:a0: af:0b:4b:4e:c8:b9:15:31:3f:ef:70:07:ff:5a:8c:25:14:86: 97:4e:21:61:c8:0e:c4:94:c3:06:e9:60:6e:df:81:8c:2f:b3: 17:13:3b:7a:69:0a:3d:e2:87:31:89:af:35:a7:10:f1:ee:2b: 3f:45:5c:44:d1:35:58:9f:c2:0a:84:ab:06:2a:ce:dc:db:62: cf:b8:63:61:82:a8:cd:00:bc:7f:3b:0b:37:e7:cd:86:99:cc: e9:7d:12:ad:8f:e8:39:f7:56:b6:70:e4:ca:f5:3f:92:69:6b: ee:32:51:6a:d2:6b:5d:ec:f2:2b:bf:39:88:96:07:26:c0:c7: ca:5c:dd:55:57:85:3a:7f:8e:d6:3f:ba:ab:67:47:97:a4:92: ea:1c:fe:b9:76:1f:5c:58:66:26:ce:11:a4:97:2a:50:06:9b: 90:b5:af:01:c0:5b:f3:1a:f5:e7:73:90:46:2b:e6:46:ef:b8: bc:ed:d2:e0:82:21:25:ad:aa:79:db:aa:89:3e:a9:5f:0f:27: 7a:ad:25:ca:57:d0:d4:01:02:e8:90:0f:9a:12:9f:6f:04:fc: 65:bd:e2:8d:bb:8e:d4:95:e0:e9:5f:7a:df:83:74:07:f7:65: 92:bf:6d:05 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEyqJyG5Lp1uF1tJuaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ODQ1YTE4M2MtZTYyMi00YzViLTkwYjUtNzljMDllNzhjMDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNz5HpPJoIq8Y/P7uoGSh3vkB9XtoWp9YbMm G97w1HSYHza0oAt0l6Z5ji47PF9VBEq4VIRzszZ8N9uEt58nTpx0/vsj3/rpW6z9 JYURTICC66rIzijc/M0a62tHwSxtVeMBKmxSxvZNcgKOLA0bKZdoSVYlhKUrD0ut QVEmn6z/gw4QBw+PCsYl1BZzLxT3k7R3Uc0tULIgRgrR2mnXN5qAOCaRPo8SWPb4 rnAVCcb+4GhrHWViCOcV6J5T0zw5fIWiEtwhnwcZIQoYEGJKZYlNeAOd3goJ6KYW hQbHf53tdbzwbM2U6ARc+riAH+qCEYO/mHQhWBA3Ix4J77EE6wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEcN3xC9EaS6yBNe1b/h6GlsLZz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvMGRmY2UxMjEtNmYxZC0z NzcxLWFhYTctMGQ4YTc2ZDYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6EYMA8E AgACMAkDBwAmAgLyAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFwlnkKwwF2A1nYPRM0Hdh0igrwtLTsi5 FTE/73AH/1qMJRSGl04hYcgOxJTDBulgbt+BjC+zFxM7emkKPeKHMYmvNacQ8e4r P0VcRNE1WJ/CCoSrBirO3Ntiz7hjYYKozQC8fzsLN+fNhpnM6X0SrY/oOfdWtnDk yvU/kmlr7jJRatJrXezyK785iJYHJsDHylzdVVeFOn+O1j+6q2dHl6SS6hz+uXYf XFhmJs4RpJcqUAabkLWvAcBb8xr153OQRivmRu+4vO3S4IIhJa2qeduqiT6pXw8n eq0lylfQ1AEC6JAPmhKfbwT8Zb3ijbuO1JXg6V9634N0B/dlkr9tBQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:38 2026 by rpki-client