$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa File: dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa (raw, json) Hash identifier: CqH3tFGMbVYhdaDdIrhLzn8iXnxgBHtoEfkSYwaD5+Q= Subject key identifier: 0E:49:10:DB:D0:9B:A1:38:63:58:BD:1C:C0:03:D1:B7:8D:B4:3C:0A Certificate issuer: /CN=b5c7f3f6-28f7-4e37-95f9-385583909b2d Certificate serial: 010D0C9F4328584CF587B1692E1AF246438EF500 Authority key identifier: 74:5C:82:1A:52:27:90:61:E0:64:58:2C:22:61:2F:69:27:5D:30:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 63023 IP address blocks: 23.136.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:b1:69:2e:1a:f2:46:43:8e:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c7f3f6-28f7-4e37-95f9-385583909b2d Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=08f44a61-6fb2-49a4-815a-2707b3a65865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:98:94:5d:30:e6:7b:a0:74:32:16:f8:bc: 34:0b:14:97:2a:fb:9e:df:1a:1b:2a:6b:1d:2d:13: f2:e7:f4:75:68:20:17:e5:6e:e9:0a:8d:e1:be:34: c4:d9:15:66:56:31:ef:3f:09:78:35:f9:d8:12:eb: f8:b4:3e:1a:d9:ca:e4:8f:8c:da:8a:97:a1:03:70: ff:5d:33:45:15:40:11:ac:69:32:61:51:2f:24:78: ed:b1:01:62:0d:75:0c:9a:e8:d2:46:dd:6b:75:73: 92:4b:50:92:6f:0b:66:9f:be:e2:c9:b2:6f:26:d1: 52:90:7d:9f:98:de:84:e8:68:78:16:f4:ca:dd:e9: b0:ac:1e:35:b0:b9:a2:81:db:99:d3:62:e7:e2:a5: 44:67:11:68:8d:aa:e8:44:f5:23:d7:f0:94:18:a4: 91:64:43:61:bd:0b:7b:d0:ac:0b:03:b2:09:92:95: 4b:4e:6e:c3:19:5e:9f:3b:28:b6:1c:22:60:79:99: f3:4a:ab:0f:55:6f:9d:d3:ad:0b:d0:13:98:31:60: 46:7c:fe:59:ee:d8:94:e0:ab:0b:d7:ae:ab:c1:d7: 43:5b:ef:92:05:d7:2f:06:af:7e:8c:72:0f:e3:6e: b3:e9:8f:9c:b3:98:bd:b1:f7:a3:5c:1e:af:58:5a: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:49:10:DB:D0:9B:A1:38:63:58:BD:1C:C0:03:D1:B7:8D:B4:3C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/dbcd633f-d86a-3c44-bec1-1b81243c1c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d/b5c7f3f6-28f7-4e37-95f9-385583909b2d.crl X509v3 Authority Key Identifier: keyid:74:5C:82:1A:52:27:90:61:E0:64:58:2C:22:61:2F:69:27:5D:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5c7f3f6-28f7-4e37-95f9-385583909b2d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a4:bf:e4:c6:d2:49:8f:49:5b:d6:30:10:78:5d:cf:58:18: ad:84:32:df:c3:28:69:2e:f7:9f:6c:fd:b5:3a:bc:c3:82:ac: a5:75:18:84:69:a8:e9:8d:4e:c5:96:cc:8c:f7:a3:34:0c:d3: 1e:38:e7:5a:5a:f5:5f:09:fe:73:37:e1:25:57:f6:ce:e2:a8: 63:e0:51:a5:d3:24:23:2a:12:c4:be:fa:2e:60:36:ea:40:34: c0:29:c2:72:b8:fa:fb:d5:88:d6:a6:e5:ef:ec:15:cd:51:72: 3b:04:f2:e0:e4:aa:1b:9d:ad:ae:90:a1:fb:a9:71:6a:ef:65: 62:a5:57:62:93:ac:62:a2:55:ba:e0:64:6e:fc:5d:63:41:02: aa:57:25:3f:e1:c1:49:4f:b9:a1:cc:b0:86:83:b4:4e:c3:1e: 3a:ce:22:17:e9:1e:e6:b2:6f:6a:6a:a5:5e:af:d8:18:eb:ea: 06:50:ee:be:07:3b:08:4b:cc:e4:7f:69:e3:eb:53:44:5f:2e: 03:46:cb:58:b6:b8:dc:7d:63:8b:f0:4b:d1:a6:d4:cc:d9:d5: 2b:c4:4a:f6:97:7a:97:ae:5b:e5:74:99:36:53:e3:63:3f:c3: 5e:92:34:b2:92:f3:01:0d:43:d8:06:18:25:36:c7:27:01:ab: d9:35:d2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7FpLhryRkOO9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjN2YzZjYtMjhmNy00ZTM3LTk1ZjktMzg1NTgzOTA5 YjJkMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MDhmNDRhNjEtNmZiMi00OWE0LTgxNWEtMjcwN2IzYTY1ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2KYlF0w5nugdDIW+Lw0CxSXKvue3xobKmsd LRPy5/R1aCAX5W7pCo3hvjTE2RVmVjHvPwl4NfnYEuv4tD4a2crkj4zaipehA3D/ XTNFFUARrGkyYVEvJHjtsQFiDXUMmujSRt1rdXOSS1CSbwtmn77iybJvJtFSkH2f mN6E6Gh4FvTK3emwrB41sLmigduZ02Ln4qVEZxFojaroRPUj1/CUGKSRZENhvQt7 0KwLA7IJkpVLTm7DGV6fOyi2HCJgeZnzSqsPVW+d060L0BOYMWBGfP5Z7tiU4KsL 166rwddDW++SBdcvBq9+jHIP426z6Y+cs5i9sfejXB6vWFpd+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5JENvQm6E4Y1i9HMAD0beNtDwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWM3 ZjNmNi0yOGY3LTRlMzctOTVmOS0zODU1ODM5MDliMmQvZGJjZDYzM2YtZDg2YS0z YzQ0LWJlYzEtMWI4MTI0M2MxYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVjN2YzZjYtMjhmNy00ZTM3LTk1 ZjktMzg1NTgzOTA5YjJkL2I1YzdmM2Y2LTI4ZjctNGUzNy05NWY5LTM4NTU4Mzkw OWIyZC5jcmwwHwYDVR0jBBgwFoAUdFyCGlInkGHgZFgsImEvaSddMAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWM3ZjNmNi0yOGY3LTRlMzctOTVmOS0zODU1 ODM5MDliMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2kv+TG0kmPSVvWMBB4Xc9YGK2EMt/DKGku959s/bU6vMOCrKV1GIRp qOmNTsWWzIz3ozQM0x4451pa9V8J/nM34SVX9s7iqGPgUaXTJCMqEsS++i5gNupA NMApwnK4+vvViNam5e/sFc1RcjsE8uDkqhudra6QofupcWrvZWKlV2KTrGKiVbrg ZG78XWNBAqpXJT/hwUlPuaHMsIaDtE7DHjrOIhfpHuayb2pqpV6v2Bjr6gZQ7r4H OwhLzOR/aePrU0RfLgNGy1i2uNx9Y4vwS9Gm1MzZ1SvESvaXepeuW+V0mTZT42M/ w16SNLKS8wENQ9gGGCU2xycBq9k10rM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:00:02 2026 by rpki-client