$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa File: 829029bf-93c1-3123-a84b-0e8364d0d0e8.roa (raw, json) Hash identifier: I8NSJdGRS5puc6nf+qV5tzJ0TGZYhk3ihi7dRhAoc0Q= Subject key identifier: B7:16:13:C0:A3:2A:D8:22:50:0D:5E:6B:07:42:A7:4D:17:8C:DA:27 Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584CB551DD14889CB262DA2F9DC0 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 200510 IP address blocks: 23.144.152.0/24 maxlen: 24 2602:2f2::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:dd:14:88:9c:b2:62:da:2f:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=2dc7a26b-ec7c-45da-aed0-b9de4ba725b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:39:90:f0:62:06:fb:21:0d:3d:0c:c2:e2: 3f:19:f4:55:7e:02:6a:98:c5:7c:1a:55:94:01:19: 15:3c:21:e7:48:50:88:48:2b:50:af:28:8b:d6:8e: fb:ce:69:0b:0f:51:40:cf:79:01:87:b1:ea:0a:dd: 6b:fc:f3:14:f2:19:61:16:1d:06:09:e8:c1:de:9a: 75:ee:6a:ae:7c:13:cb:bd:bc:73:8b:3d:eb:38:2e: 59:fd:b2:3d:ac:c5:6f:91:bf:9a:12:30:e0:b2:f3: dd:28:74:de:f5:8c:1c:0c:32:51:a3:07:4f:95:9a: 26:39:ab:b5:6b:aa:3b:b9:36:08:1a:61:24:8b:2c: 1f:67:ef:33:3f:a5:60:e0:bb:6e:13:a9:b3:e5:49: 8b:94:0a:1c:6c:e0:70:55:82:0b:62:aa:c5:df:96: 02:20:08:26:17:51:0a:b8:a3:66:c6:d4:cc:81:bc: 08:d5:74:3e:2a:1b:69:7e:71:e9:e6:27:eb:22:33: be:b4:48:70:7b:d2:b8:70:1b:e2:f4:4d:ef:62:77: 0d:d6:05:c5:cd:45:9a:64:cc:0e:8d:ac:00:41:d0: 81:19:5c:9b:f3:cc:d7:7e:72:08:73:93:b2:c4:17: ad:60:d7:8e:5c:75:bb:23:47:5b:ae:c0:ee:c5:df: e9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:16:13:C0:A3:2A:D8:22:50:0D:5E:6B:07:42:A7:4D:17:8C:DA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.144.152.0/24 IPv6: 2602:2f2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6a:6d:92:b0:9c:63:30:9d:0d:66:37:9a:40:d1:cf:cd:f9: 46:d7:e6:b7:f4:23:35:29:36:cf:24:3e:65:98:1b:9e:58:40: d7:72:6f:00:62:63:a0:ed:ab:a0:cc:d5:d3:3d:5b:21:ee:a3: 1a:db:f6:6e:d5:f3:ca:0f:18:d1:f0:ee:44:88:c7:64:29:06: 3a:6c:58:f8:98:0a:7b:43:79:a9:dd:e6:d3:c5:f3:86:4f:bf: ba:3a:e5:ad:35:b2:ba:f4:49:b0:0c:1b:7a:2a:97:1e:98:df: ab:db:08:11:52:72:a0:30:ab:46:4b:b9:8a:c7:6a:3f:b8:6e: d7:c2:07:f0:f1:04:7f:a9:ab:d4:18:a2:9c:8c:e2:e2:db:1a: 4a:55:22:c6:91:dc:3b:d7:0e:20:74:bf:69:b3:94:90:fc:88: af:d6:30:2d:e2:e2:d6:43:16:bf:b6:cf:04:85:1a:22:00:0a: f1:47:cb:84:c2:bd:f7:15:5a:13:22:cd:19:cd:2f:82:61:8e: e5:ed:34:a0:22:67:5b:51:ba:93:c7:0a:4d:f9:f4:6a:93:83: 3e:a3:46:9d:dd:f1:7a:0d:5e:8a:b8:e0:28:b0:68:03:07:c6: 1e:cc:27:cc:1c:6c:58:13:e3:4f:ad:36:70:fc:f7:a6:ad:d2: 1e:0c:f8:05 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEy1Ud0UiJyyYtovncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MmRjN2EyNmItZWM3Yy00NWRhLWFlZDAtYjlkZTRiYTcyNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JM5kPBiBvshDT0MwuI/GfRVfgJqmMV8GlWU ARkVPCHnSFCISCtQryiL1o77zmkLD1FAz3kBh7HqCt1r/PMU8hlhFh0GCejB3pp1 7mqufBPLvbxziz3rOC5Z/bI9rMVvkb+aEjDgsvPdKHTe9YwcDDJRowdPlZomOau1 a6o7uTYIGmEkiywfZ+8zP6Vg4LtuE6mz5UmLlAocbOBwVYILYqrF35YCIAgmF1EK uKNmxtTMgbwI1XQ+KhtpfnHp5ifrIjO+tEhwe9K4cBvi9E3vYncN1gXFzUWaZMwO jawAQdCBGVyb88zXfnIIc5OyxBetYNeOXHW7I0dbrsDuxd/pEQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLcWE8CjKtgiUA1eawdCp00XjNonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvODI5MDI5YmYtOTNjMS0z MTIzLWE4NGItMGU4MzY0ZDBkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5CYMA4E AgACMAgDBgAmAgLyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQam2SsJxjMJ0NZjeaQNHPzflG1+a39CM1 KTbPJD5lmBueWEDXcm8AYmOg7augzNXTPVsh7qMa2/Zu1fPKDxjR8O5EiMdkKQY6 bFj4mAp7Q3mp3ebTxfOGT7+6OuWtNbK69EmwDBt6KpcemN+r2wgRUnKgMKtGS7mK x2o/uG7Xwgfw8QR/qavUGKKcjOLi2xpKVSLGkdw71w4gdL9ps5SQ/Iiv1jAt4uLW Qxa/ts8EhRoiAArxR8uEwr33FVoTIs0ZzS+CYY7l7TSgImdbUbqTxwpN+fRqk4M+ o0ad3fF6DV6KuOAosGgDB8YezCfMHGxYE+NPrTZw/PemrdIeDPgF -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:01 2026 by rpki-client