$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa File: dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa (raw, json) Hash identifier: NaZBpGLMWDJpqVQ3iyYz2/C/W2h6d8KVZhwbFewD6TM= Subject key identifier: 25:C5:84:DE:FF:EE:1C:A5:29:DC:E1:E3:04:04:25:26:FA:0C:E2:33 Certificate issuer: /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030 Certificate serial: 010D0C9F4328584DA3E55FC4B3610333BE542880 Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 30006 IP address blocks: 23.169.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5f:c4:b3:61:03:33:be:54:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=893d415a-a5df-4286-a435-a262bfac388e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:72:a0:74:86:58:f5:22:8d:dd:93:cd:6a:69: 2e:6e:e1:97:5e:ec:e2:b5:f5:4b:9d:b6:c1:a7:be: 2f:ab:6c:12:a0:3c:8d:44:ae:f6:fa:5f:c4:2e:e3: e5:26:2a:ca:62:91:c0:f7:ed:c9:2e:a6:fe:d7:f8: b3:dc:cf:74:be:4c:04:69:60:18:45:92:83:4c:93: 2d:85:11:1b:7e:8a:8f:78:fc:2f:ba:42:4e:08:b3: e3:45:81:66:c4:0d:c7:99:b8:3b:4e:9d:dd:9a:c8: ca:c7:60:f5:48:f6:dc:76:f8:a1:10:9c:3b:6b:49: 98:cc:06:ab:61:21:a5:42:94:be:7d:74:5f:92:df: 28:58:87:19:5d:34:fb:75:93:74:40:13:d9:88:9a: 6d:5a:66:66:bc:57:48:92:ad:4a:08:1f:f6:70:96: 0f:68:22:91:77:f3:55:2e:49:81:fa:0c:ce:b5:83: c4:28:38:fa:a1:83:b1:f2:75:64:1c:55:f9:58:bc: 00:e5:7a:21:d1:9e:ad:43:9e:24:35:4b:5e:64:29: 07:c3:3e:71:a0:42:6e:27:0d:72:46:3d:ee:18:5e: 3f:3c:fe:dd:b5:57:7d:ab:9e:41:eb:9b:4a:a5:c6: 1f:c3:00:b4:fc:51:e2:5c:7a:d7:51:2c:53:47:95: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:84:DE:FF:EE:1C:A5:29:DC:E1:E3:04:04:25:26:FA:0C:E2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/dec0bda2-8e4f-34a0-8a87-5be34cfc05e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl X509v3 Authority Key Identifier: keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer sbgp-ipAddrBlock: critical IPv4: 23.169.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:68:d9:a6:20:3d:3b:b9:8b:d1:72:73:14:55:7a:56:8c:df: 1f:bf:18:91:8a:78:db:25:ea:1d:81:81:b8:69:87:6f:f5:15: c7:ad:e3:d5:81:32:a5:0e:83:24:f5:90:e3:35:db:3c:9f:7b: b1:86:3c:09:0a:0a:4a:5e:34:2c:51:e5:5e:57:eb:08:71:11: d1:24:f2:fa:82:06:60:db:3f:d6:98:8e:41:e2:79:ca:eb:53: ed:1a:12:4f:64:46:27:34:14:e9:3c:3c:f7:41:f4:b4:e0:15: 96:ee:89:8f:c3:c6:f7:19:a6:fd:4b:70:6c:c3:f4:d2:6a:85: 4c:d7:1b:04:89:d8:a8:ed:7f:78:c8:cf:91:39:3b:41:ab:4b: 4d:9e:71:04:9d:a3:25:70:36:a8:89:e9:95:f5:04:b1:89:e0: 5a:f0:84:8f:b8:4c:dd:03:40:49:38:25:65:bd:b3:95:1f:96: 53:32:5c:41:7b:f1:e9:ca:96:34:44:bb:70:f6:f7:e9:72:63: 46:32:4d:92:fe:11:92:dc:5c:0d:bf:46:80:68:1e:c0:b5:6a: b6:a4:45:49:f0:15:68:43:43:23:b6:82:dd:00:e0:8c:4a:bb: 40:29:ee:8e:d3:1b:66:2f:7c:14:28:a3:74:89:b1:c4:84:87: 57:09:c5:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5V/Es2EDM75UKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljODdmZWYtZDhmOC00MTM0LWE0ZWMtZjJhMDczNTY3 MDMwMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk ODkzZDQxNWEtYTVkZi00Mjg2LWE0MzUtYTI2MmJmYWMzODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23KgdIZY9SKN3ZPNamkubuGXXuzitfVLnbbB p74vq2wSoDyNRK72+l/ELuPlJirKYpHA9+3JLqb+1/iz3M90vkwEaWAYRZKDTJMt hREbfoqPePwvukJOCLPjRYFmxA3Hmbg7Tp3dmsjKx2D1SPbcdvihEJw7a0mYzAar YSGlQpS+fXRfkt8oWIcZXTT7dZN0QBPZiJptWmZmvFdIkq1KCB/2cJYPaCKRd/NV LkmB+gzOtYPEKDj6oYOx8nVkHFX5WLwA5Xoh0Z6tQ54kNUteZCkHwz5xoEJuJw1y Rj3uGF4/PP7dtVd9q55B65tKpcYfwwC0/FHiXHrXUSxTR5XUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXFhN7/7hylKdzh4wQEJSb6DOIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4 N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEwNzM1NjcwMzAvZGVjMGJkYTItOGU0Zi0z NGEwLThhODctNWJlMzRjZmMwNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjljODdmZWYtZDhmOC00MTM0LWE0 ZWMtZjJhMDczNTY3MDMwL2Y5Yzg3ZmVmLWQ4ZjgtNDEzNC1hNGVjLWYyYTA3MzU2 NzAzMC5jcmwwHwYDVR0jBBgwFoAUkrsDbxKpSG9IpQ1W/5ReLmI8HbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEw NzM1NjcwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBo2aYgPTu5i9FycxRVelaM3x+/GJGKeNsl6h2Bgbhph2/1Fcet49WB MqUOgyT1kOM12zyfe7GGPAkKCkpeNCxR5V5X6whxEdEk8vqCBmDbP9aYjkHiecrr U+0aEk9kRic0FOk8PPdB9LTgFZbuiY/DxvcZpv1LcGzD9NJqhUzXGwSJ2Kjtf3jI z5E5O0GrS02ecQSdoyVwNqiJ6ZX1BLGJ4FrwhI+4TN0DQEk4JWW9s5UfllMyXEF7 8enKljREu3D29+lyY0YyTZL+EZLcXA2/RoBoHsC1arakRUnwFWhDQyO2gt0A4IxK u0Ap7o7TG2YvfBQoo3SJscSEh1cJxW0= -----END CERTIFICATE-----Generated at Wed May 13 08:48:14 2026 by rpki-client