$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa File: 0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa (raw, json) Hash identifier: ZjNiM0j3hgdX9h6wj6b2nQmPqfUy5LKMRLY+CZ9n6L8= Subject key identifier: C5:CE:B9:C5:43:27:14:1F:F7:BB:F1:A6:4B:50:10:A9:28:71:1A:F3 Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584F0D6CEE1C1B7F222D14E29360 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 215475 IP address blocks: 23.161.24.0/24 maxlen: 24 2602:2f2:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ee:1c:1b:7f:22:2d:14:e2:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=cf7b8cad-db25-46b4-bdf7-a6dea6024ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:1e:7f:e6:f8:a1:55:c6:25:e3:7d:90:b3: d5:48:97:9b:c8:73:7b:e5:5e:ff:ff:90:a5:50:48: a4:5c:ae:c5:01:75:5d:67:cc:6d:0f:63:e5:b1:fd: a6:23:1e:9e:f9:e0:38:c2:2e:00:93:9a:c6:31:04: 7a:ea:88:29:87:4d:32:1a:be:9d:60:ac:c2:cc:d4: b9:ac:a8:0a:d7:9b:22:98:95:07:fe:f3:61:97:9b: 8f:26:a2:86:05:07:31:1e:a6:4a:58:65:85:01:fb: 54:16:b2:72:75:af:a8:bb:4b:6e:15:41:16:52:fb: b3:68:0a:1b:81:83:51:49:6c:ac:e9:e1:4b:2c:cb: 6d:d5:37:5c:d5:b3:aa:e2:25:dd:7a:7a:96:11:30: 0e:c4:6d:49:09:3f:6f:b1:10:15:44:7f:c6:cd:91: e0:d3:1f:d7:28:e5:10:57:4c:be:c8:8c:c8:36:99: cd:4a:0e:fb:ef:fe:21:b4:b9:76:f2:c5:ae:8f:e7: 68:6e:a4:f2:79:0b:92:0d:00:d5:d4:03:bd:e5:4b: 2f:4c:88:7f:df:00:e3:c9:d7:e8:a3:4d:e5:21:95: 44:ec:b7:34:41:9b:80:47:04:c4:d1:3c:d8:62:e2: 9a:46:c5:89:7a:a8:33:e1:99:4c:b7:a2:50:ab:72: bd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CE:B9:C5:43:27:14:1F:F7:BB:F1:A6:4B:50:10:A9:28:71:1A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.161.24.0/24 IPv6: 2602:2f2:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:39:4f:95:ec:a4:76:8d:dd:8a:28:92:9e:27:52:84:ed:6b: 35:cc:f5:93:2c:5e:40:3c:f1:55:08:4b:71:b0:0a:c1:1a:11: 5a:11:4e:d3:89:d1:24:e9:ed:f6:87:ba:60:25:ea:a0:76:df: 0d:84:92:83:57:d9:d9:7a:42:92:4a:38:5f:85:82:82:31:88: 94:01:7c:b9:c9:8b:c1:98:a6:b1:88:a8:7e:ff:48:08:f5:17: 76:d2:46:66:f4:2d:d8:f9:57:01:39:54:81:ce:f9:4f:cf:c8: ef:0a:d0:fb:e0:fc:a3:50:d7:3f:da:c8:4f:cc:9f:b3:ed:85: b4:a8:31:d5:6f:28:ac:18:42:78:2e:a4:eb:f5:5f:dc:02:57: 8b:69:24:05:b5:ae:37:c9:0e:4e:2e:f8:ec:07:8c:83:ee:7c: 94:04:f7:8f:5c:fd:79:7e:16:fb:2d:88:7d:64:0e:6b:62:46: 10:9b:22:3e:00:b7:53:02:4a:57:6a:41:38:1b:76:0e:d5:f8: 92:81:d5:39:fb:d7:8a:c3:fd:86:25:f1:ab:2e:1e:cc:f3:a2: c0:b2:30:63:e4:51:24:97:e7:a1:16:04:6b:bc:6e:ac:36:1d: 9f:38:08:73:5a:c2:d5:89:c8:05:73:4b:ae:8b:36:d2:54:61: f3:f5:94:7c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8NbO4cG38iLRTik2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y3YjhjYWQtZGIyNS00NmI0LWJkZjctYTZkZWE2MDI0YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGAef+b4oVXGJeN9kLPVSJebyHN75V7//5Cl UEikXK7FAXVdZ8xtD2Plsf2mIx6e+eA4wi4Ak5rGMQR66ogph00yGr6dYKzCzNS5 rKgK15simJUH/vNhl5uPJqKGBQcxHqZKWGWFAftUFrJyda+ou0tuFUEWUvuzaAob gYNRSWys6eFLLMtt1Tdc1bOq4iXdenqWETAOxG1JCT9vsRAVRH/GzZHg0x/XKOUQ V0y+yIzINpnNSg777/4htLl28sWuj+dobqTyeQuSDQDV1AO95UsvTIh/3wDjydfo o03lIZVE7Lc0QZuARwTE0TzYYuKaRsWJeqgz4ZlMt6JQq3K9xwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMXOucVDJxQf97vxpktQEKkocRrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvMGRmY2UxMjEtNmYxZC0z NzcxLWFhYTctMGQ4YTc2ZDYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6EYMA8E AgACMAkDBwAmAgLyAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACzlPleykdo3diiiSnidShO1rNcz1kyxe QDzxVQhLcbAKwRoRWhFO04nRJOnt9oe6YCXqoHbfDYSSg1fZ2XpCkko4X4WCgjGI lAF8ucmLwZimsYiofv9ICPUXdtJGZvQt2PlXATlUgc75T8/I7wrQ++D8o1DXP9rI T8yfs+2FtKgx1W8orBhCeC6k6/Vf3AJXi2kkBbWuN8kOTi747AeMg+58lAT3j1z9 eX4W+y2IfWQOa2JGEJsiPgC3UwJKV2pBOBt2DtX4koHVOfvXisP9hiXxqy4ezPOi wLIwY+RRJJfnoRYEa7xurDYdnzgIc1rC1YnIBXNLros20lRh8/WUfA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:56:35 2026 by rpki-client