$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa File: a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa (raw, json) Hash identifier: u3djVtIJ4zzaVMJROGzxj/P4OaOGl+9q4altb/9F85Q= Subject key identifier: 09:93:C8:00:CB:7F:0C:D1:C5:32:22:F4:A2:ED:FB:68:69:F8:5D:41 Certificate issuer: /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1 Certificate serial: 010D0C9F4328584D86953D1032A7C53519C2BC10 Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 396879 IP address blocks: 23.252.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:3d:10:32:a7:c5:35:19:c2:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c7da460e-b34f-4b6f-8274-26d1fecdf41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:8c:82:aa:40:82:23:55:f1:e5:25:53:bd: 1c:ef:b7:eb:88:46:6f:e3:17:49:36:13:4c:5d:e5: 04:e0:a5:42:63:b2:06:e1:e3:c2:c3:fa:a6:4b:a6: fa:7b:75:7a:a0:98:67:9c:6a:2a:06:c1:e4:8b:91: 92:de:a8:18:41:e0:d4:8a:24:97:a7:4c:f9:df:1f: 90:57:8f:cf:bd:64:66:12:da:e2:17:a2:b4:06:f7: e1:8b:65:cd:a9:8f:e0:52:47:01:cb:45:02:cf:e0: 9b:51:16:19:d1:06:89:b7:41:b6:89:33:ef:d5:7b: a7:bc:4b:de:cc:ad:ef:ec:74:5b:53:a3:11:3b:9a: 3a:1c:74:2c:bb:02:92:40:16:c1:69:48:3b:e4:ec: 08:cb:96:ed:fb:6b:dd:62:e0:48:84:c3:f5:f8:04: c0:49:d2:31:3d:2b:28:61:a0:ab:d1:01:5a:5c:6a: 16:e4:c4:f6:dc:8b:5e:ad:44:30:be:8a:8f:79:a7: 77:95:a4:e4:21:9a:7a:bb:dc:06:ed:dc:f7:24:a9: 5a:70:ad:89:c3:4e:06:03:57:15:39:94:71:c2:d0: 81:d5:fa:6b:2d:ca:f8:46:7e:08:9f:d5:e0:ed:36: 2d:66:12:11:d4:58:c3:e9:75:71:d3:6b:5b:34:1c: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:93:C8:00:CB:7F:0C:D1:C5:32:22:F4:A2:ED:FB:68:69:F8:5D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl X509v3 Authority Key Identifier: keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer sbgp-ipAddrBlock: critical IPv4: 23.252.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4b:13:d7:b9:11:3b:4b:95:16:e2:e3:9d:96:e7:3a:61:1e: 0f:d1:f7:13:4e:26:8d:84:fa:99:5f:9a:79:aa:e3:c4:47:32: 03:0e:e0:9b:b8:f0:1c:43:20:3e:77:c5:46:16:10:fa:ab:97: 0c:38:67:3a:86:ce:b0:24:83:9b:9d:e9:22:86:b1:70:86:b8: ee:b9:0e:99:41:4c:53:8f:e0:48:39:a0:11:f7:25:88:89:2f: 80:66:6d:dd:bc:e4:be:6d:78:af:57:4f:7d:f1:66:62:ef:0f: 0b:8e:45:67:6b:f6:01:f2:17:d1:2d:aa:2c:58:8b:e1:17:45: 0e:e2:d0:c3:21:29:97:8c:e0:82:f0:e3:d6:fb:07:b5:fa:40: 41:fb:38:c6:3f:cb:31:8b:98:e2:35:08:46:f1:e8:f5:38:4b: 3b:27:96:9a:67:aa:22:7e:ec:d6:11:05:40:23:fc:00:5d:84: 46:5d:6a:ff:f8:7c:26:80:35:ab:37:ca:fd:bc:97:a8:91:50: 0f:d1:ef:50:00:ea:c0:03:60:62:c8:73:4d:74:b3:d7:6d:90: 1c:d6:18:46:e6:e5:71:bd:01:f2:f5:14:d5:26:31:c5:d8:33: ed:23:7a:5f:de:87:ff:bb:dc:7d:c1:c3:a3:00:73:68:6d:00: 90:c5:29:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlT0QMqfFNRnCvBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjNmM5ZDUtMzZkNi00OTIzLWEyYWUtNjFlNGFjZDA5 NGMxMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzdkYTQ2MGUtYjM0Zi00YjZmLTgyNzQtMjZkMWZlY2RmNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dGMgqpAgiNV8eUlU70c77friEZv4xdJNhNM XeUE4KVCY7IG4ePCw/qmS6b6e3V6oJhnnGoqBsHki5GS3qgYQeDUiiSXp0z53x+Q V4/PvWRmEtriF6K0Bvfhi2XNqY/gUkcBy0UCz+CbURYZ0QaJt0G2iTPv1XunvEve zK3v7HRbU6MRO5o6HHQsuwKSQBbBaUg75OwIy5bt+2vdYuBIhMP1+ATASdIxPSso YaCr0QFaXGoW5MT23IterUQwvoqPead3laTkIZp6u9wG7dz3JKlacK2Jw04GA1cV OZRxwtCB1fprLcr4Rn4In9Xg7TYtZhIR1FjD6XVx02tbNBwtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmTyADLfwzRxTIi9KLt+2hp+F1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kY2M2 YzlkNS0zNmQ2LTQ5MjMtYTJhZS02MWU0YWNkMDk0YzEvYTBiMzJlYzYtZDBjZi0z MThiLTllNmEtMzg2NzljZDVhYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGNjNmM5ZDUtMzZkNi00OTIzLWEy YWUtNjFlNGFjZDA5NGMxL2RjYzZjOWQ1LTM2ZDYtNDkyMy1hMmFlLTYxZTRhY2Qw OTRjMS5jcmwwHwYDVR0jBBgwFoAUaKYOuBkX/pKBsB8pVuMcYHmpF6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kY2M2YzlkNS0zNmQ2LTQ5MjMtYTJhZS02MWU0 YWNkMDk0YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFLE9e5ETtLlRbi452W5zphHg/R9xNOJo2E+plfmnmq48RHMgMO4Ju4 8BxDID53xUYWEPqrlww4ZzqGzrAkg5ud6SKGsXCGuO65DplBTFOP4Eg5oBH3JYiJ L4Bmbd285L5teK9XT33xZmLvDwuORWdr9gHyF9EtqixYi+EXRQ7i0MMhKZeM4ILw 49b7B7X6QEH7OMY/yzGLmOI1CEbx6PU4SzsnlppnqiJ+7NYRBUAj/ABdhEZdav/4 fCaANas3yv28l6iRUA/R71AA6sADYGLIc010s9dtkBzWGEbm5XG9AfL1FNUmMcXY M+0jel/eh/+73H3Bw6MAc2htAJDFKTs= -----END CERTIFICATE-----Generated at Fri Apr 17 22:39:17 2026 by rpki-client