$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa File: a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa (raw, json) Hash identifier: riagCqSGL61LQLL87yaNVen+5IsGgR9l4bkbkqSjxcw= Subject key identifier: D5:E1:60:14:E4:0A:A9:5B:85:99:D8:9D:E9:3F:1F:94:D9:D6:A4:0B Certificate issuer: /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1 Certificate serial: 010D0C9F4328584CA5F7470C337A15ECD63FD640 Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 396879 IP address blocks: 23.252.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:47:0c:33:7a:15:ec:d6:3f:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=374712af-20b5-4c3b-ad91-05b618f6aef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:55:33:87:fc:12:37:b3:5c:cf:67:71:67: 95:e9:bb:5c:dc:e6:a8:86:c4:a1:bb:33:24:b7:17: ae:d2:e5:05:c6:08:ae:b4:79:04:02:a0:8e:7d:6f: f5:9b:2c:af:3a:a5:ab:c1:51:6a:a2:b5:36:0c:b6: 6f:5b:23:0d:1c:fa:ea:e1:41:17:30:46:40:13:82: a9:3d:0b:7e:7f:7c:73:a7:1c:c1:f3:c0:e4:c8:8c: 45:dd:87:46:b5:7f:4c:4e:14:0d:73:10:02:c7:24: aa:cd:a5:c2:a2:f3:95:25:af:cd:11:87:72:c7:9d: dd:3f:ed:cf:42:07:d0:85:00:84:88:88:06:b5:2a: 24:74:b0:7e:9d:3e:f4:1d:11:70:ac:9e:ea:cf:e2: 44:d0:c9:22:b1:04:62:48:ec:37:69:81:71:02:a4: ab:40:cb:33:0b:3d:43:ba:03:bd:a7:03:89:0b:36: 20:17:b1:e5:c0:7d:86:29:ab:c5:99:d3:62:f4:f8: e1:38:ae:ff:c9:11:cf:90:eb:18:c6:45:e3:07:0f: bc:32:89:2c:9f:db:ac:17:29:b6:b3:a4:19:74:e3: c4:36:7d:7e:fc:67:8c:f1:c0:88:4e:a4:8a:c5:62: a7:66:8c:ea:b5:87:4a:30:f5:8e:08:8e:3b:9e:68: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E1:60:14:E4:0A:A9:5B:85:99:D8:9D:E9:3F:1F:94:D9:D6:A4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/a0b32ec6-d0cf-318b-9e6a-38679cd5ab4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl X509v3 Authority Key Identifier: keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer sbgp-ipAddrBlock: critical IPv4: 23.252.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:94:af:2d:40:13:d8:55:a5:21:8a:89:33:8c:25:f3:c9:49: 0f:1c:74:29:30:3d:c7:be:42:22:1c:76:31:44:57:f4:06:6a: 59:47:0c:b7:37:c7:a0:29:22:20:0c:79:d3:47:4c:ed:1b:92: 99:c2:06:33:80:1b:41:fe:26:f9:6e:a6:b3:c5:cd:5a:c6:c7: 5b:b4:1d:49:9d:ed:aa:3c:60:51:cd:16:4a:6e:31:63:49:c9: ca:29:33:ac:41:b3:90:1e:5a:52:d5:b7:da:6b:a2:8c:2d:35: 9b:c5:4e:3e:18:36:01:20:21:95:6b:1b:2d:2e:d4:6e:03:d7: 38:88:ee:fe:c2:02:73:ab:5b:8e:ee:21:c7:d7:03:82:65:3a: 6e:7b:c2:73:04:46:c4:cf:52:cf:b5:37:57:17:a5:ab:f9:1a: 5f:55:11:52:86:8b:e4:ec:0c:a4:5c:67:62:8f:6b:96:81:f9: 57:fd:91:06:3c:db:52:10:e3:ef:e2:f4:c3:93:a4:ff:5b:bb: 81:51:9e:5b:ad:b4:b2:33:ae:7e:84:f1:3a:a1:02:55:2d:28: 9e:e1:96:8b:48:d7:c6:49:a9:6c:d1:22:f1:9e:36:82:48:5a: 0a:89:98:cd:e8:d5:6c:50:5e:ce:a8:25:dc:03:6d:82:69:06: 09:8d:5b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90cMM3oV7NY/1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjNmM5ZDUtMzZkNi00OTIzLWEyYWUtNjFlNGFjZDA5 NGMxMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk Mzc0NzEyYWYtMjBiNS00YzNiLWFkOTEtMDViNjE4ZjZhZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnatVM4f8EjezXM9ncWeV6btc3OaohsShuzMk txeu0uUFxgiutHkEAqCOfW/1myyvOqWrwVFqorU2DLZvWyMNHPrq4UEXMEZAE4Kp PQt+f3xzpxzB88DkyIxF3YdGtX9MThQNcxACxySqzaXCovOVJa/NEYdyx53dP+3P QgfQhQCEiIgGtSokdLB+nT70HRFwrJ7qz+JE0MkisQRiSOw3aYFxAqSrQMszCz1D ugO9pwOJCzYgF7HlwH2GKavFmdNi9PjhOK7/yRHPkOsYxkXjBw+8Moksn9usFym2 s6QZdOPENn1+/GeM8cCITqSKxWKnZozqtYdKMPWOCI47nmh+kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXhYBTkCqlbhZnYnek/H5TZ1qQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kY2M2 YzlkNS0zNmQ2LTQ5MjMtYTJhZS02MWU0YWNkMDk0YzEvYTBiMzJlYzYtZDBjZi0z MThiLTllNmEtMzg2NzljZDVhYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGNjNmM5ZDUtMzZkNi00OTIzLWEy YWUtNjFlNGFjZDA5NGMxL2RjYzZjOWQ1LTM2ZDYtNDkyMy1hMmFlLTYxZTRhY2Qw OTRjMS5jcmwwHwYDVR0jBBgwFoAUaKYOuBkX/pKBsB8pVuMcYHmpF6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kY2M2YzlkNS0zNmQ2LTQ5MjMtYTJhZS02MWU0 YWNkMDk0YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+Ury1AE9hVpSGKiTOMJfPJSQ8cdCkwPce+QiIcdjFEV/QGallHDLc3 x6ApIiAMedNHTO0bkpnCBjOAG0H+JvluprPFzVrGx1u0HUmd7ao8YFHNFkpuMWNJ ycopM6xBs5AeWlLVt9proowtNZvFTj4YNgEgIZVrGy0u1G4D1ziI7v7CAnOrW47u IcfXA4JlOm57wnMERsTPUs+1N1cXpav5Gl9VEVKGi+TsDKRcZ2KPa5aB+Vf9kQY8 21IQ4+/i9MOTpP9bu4FRnluttLIzrn6E8TqhAlUtKJ7hlotI18ZJqWzRIvGeNoJI WgqJmM3o1WxQXs6oJdwDbYJpBgmNW4Y= -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:39 2026 by rpki-client