$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa File: 0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa (raw, json) Hash identifier: Lq4C8ST3iczFRXIOzRijYrATvpNvr1xEkOE+oBiMHqc= Subject key identifier: BB:29:20:EB:B8:03:43:2C:7E:86:66:CB:5C:D2:A8:61:4A:C2:DD:42 Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584D8AC54ACA32C3EA7105D0B340 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 215475 IP address blocks: 23.161.24.0/24 maxlen: 24 2602:2f2:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4a:ca:32:c3:ea:71:05:d0:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=d792b837-8342-4b73-8493-b7667d0f8bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:fd:9c:92:fe:a9:79:14:7e:d4:0b:cf:a7: 82:22:7c:77:7d:7e:45:40:d5:2f:59:9a:45:6b:47: 60:fa:83:8d:b5:50:81:24:34:d4:13:d9:5b:d5:60: 16:37:0f:9a:95:f1:1f:f0:ed:ac:b2:af:36:59:6f: 09:63:7e:47:bb:cc:39:16:56:f1:6e:6c:e9:63:ef: 11:a1:3d:21:05:52:11:b3:8f:d7:26:f7:53:91:48: 1b:af:66:af:42:cd:5f:2e:99:a5:b1:93:24:a1:17: 0e:1e:8f:d9:10:30:eb:93:d3:1b:75:8d:93:08:9c: e7:29:d1:62:7d:1c:ec:85:ec:53:b9:8b:0b:ce:b8: 32:83:9f:7b:e6:3d:05:b1:9a:0e:e6:10:b6:00:0c: 67:70:a3:7b:7f:52:1c:af:af:b8:7e:ec:06:a0:56: 74:03:60:81:0f:0d:98:78:67:7e:70:f4:fe:d1:f2: b8:c9:84:8c:ab:d9:08:07:e5:50:0e:10:9b:2e:5b: 37:be:00:41:57:29:5c:e5:17:b0:0b:98:c0:ca:17: 8b:ad:67:32:b9:b0:8c:25:ce:0d:63:b3:7f:60:06: d1:b7:4a:46:db:1a:f9:58:9d:c8:33:ce:fe:54:56: 4e:23:c7:b3:cd:29:f3:b0:12:eb:98:6c:f7:d0:83: 10:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:20:EB:B8:03:43:2C:7E:86:66:CB:5C:D2:A8:61:4A:C2:DD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.161.24.0/24 IPv6: 2602:2f2:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:00:f7:06:6c:9c:d8:d7:3c:5a:6d:01:f1:34:66:47:90:fb: c3:a4:e6:39:cc:03:e0:42:71:7f:01:82:6a:51:7d:1f:ce:b1: 9b:0b:42:38:0c:73:c5:a2:2d:3d:9a:8d:64:00:93:4a:b5:14: 6b:12:83:ee:a9:7c:da:29:b4:37:5f:f4:46:8f:4c:86:c9:b8: 6e:ee:a7:e3:0b:68:27:0b:59:0a:30:e5:e2:c9:e1:95:8f:b8: 9c:21:0e:0e:14:32:06:96:bd:20:38:94:eb:81:5f:c0:14:40: 1b:38:02:9e:e6:f5:cc:c0:0b:aa:3b:73:ff:fb:85:11:08:5a: 4c:f2:b5:d4:6a:4c:e3:ab:20:3f:e0:f8:a4:1f:c2:50:b0:3a: 47:17:73:04:b2:5e:b3:ed:44:39:c5:a8:f6:83:d7:9e:4d:e4: 87:72:42:98:6a:36:b6:67:d7:ea:50:5d:0a:77:4d:42:29:b9: 17:bd:f1:28:6c:a0:33:e8:7c:19:68:bb:47:b6:de:09:a9:4b: 1f:42:c3:38:8d:0b:24:71:51:9f:d5:cb:dc:54:ae:88:5a:26: cc:54:8b:0f:6b:44:bb:a0:f6:e6:67:e9:50:14:cd:cb:0f:38: 8e:2b:c8:72:4e:02:df:0a:6a:0d:62:b8:7c:5c:00:69:e9:c5: db:cf:64:02 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2KxUrKMsPqcQXQs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDc5MmI4MzctODM0Mi00YjczLTg0OTMtYjc2NjdkMGY4YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lr9nJL+qXkUftQLz6eCInx3fX5FQNUvWZpF a0dg+oONtVCBJDTUE9lb1WAWNw+alfEf8O2ssq82WW8JY35Hu8w5FlbxbmzpY+8R oT0hBVIRs4/XJvdTkUgbr2avQs1fLpmlsZMkoRcOHo/ZEDDrk9MbdY2TCJznKdFi fRzshexTuYsLzrgyg5975j0FsZoO5hC2AAxncKN7f1Icr6+4fuwGoFZ0A2CBDw2Y eGd+cPT+0fK4yYSMq9kIB+VQDhCbLls3vgBBVylc5RewC5jAyheLrWcyubCMJc4N Y7N/YAbRt0pG2xr5WJ3IM87+VFZOI8ezzSnzsBLrmGz30IMQrQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLspIOu4A0MsfoZmy1zSqGFKwt1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvMGRmY2UxMjEtNmYxZC0z NzcxLWFhYTctMGQ4YTc2ZDYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6EYMA8E AgACMAkDBwAmAgLyAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAawD3Bmyc2Nc8Wm0B8TRmR5D7w6TmOcwD 4EJxfwGCalF9H86xmwtCOAxzxaItPZqNZACTSrUUaxKD7ql82im0N1/0Ro9Mhsm4 bu6n4wtoJwtZCjDl4snhlY+4nCEODhQyBpa9IDiU64FfwBRAGzgCnub1zMALqjtz //uFEQhaTPK11GpM46sgP+D4pB/CULA6RxdzBLJes+1EOcWo9oPXnk3kh3JCmGo2 tmfX6lBdCndNQim5F73xKGygM+h8GWi7R7beCalLH0LDOI0LJHFRn9XL3FSuiFom zFSLD2tEu6D25mfpUBTNyw84jivIck4C3wpqDWK4fFwAaenF289kAg== -----END CERTIFICATE-----Generated at Fri May 1 17:02:52 2026 by rpki-client