$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa File: 80afc93c-8379-33e4-8c58-900d16b82c22.roa (raw, json) Hash identifier: L2CGtY3n8B1d29isdwPZGxP1drjrxfcOTFOwr7W0Hzw= Subject key identifier: A0:7F:89:BA:74:FE:1B:5C:F3:CC:EE:C1:31:DB:7F:C3:68:9C:F0:AC Certificate issuer: /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Certificate serial: 010D0C9F4328584F4277FB8476703238B2376B00 Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 26421 IP address blocks: 23.29.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:fb:84:76:70:32:38:b2:37:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=db4c2d6a-f056-46e5-9f64-c4e488a47fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:67:8d:60:21:73:20:53:c3:31:12:ac:55:b8: 12:9a:27:9c:88:3c:3e:d2:7a:1a:96:fd:04:4b:d5: ef:76:79:dd:3b:5f:0e:65:16:c3:d6:38:7c:ec:2e: ba:ea:53:b5:7a:3d:ec:d1:40:54:bf:c2:a4:4c:4f: 4d:88:d5:38:7e:28:eb:93:e0:29:a1:a8:bf:98:25: 28:36:07:ab:36:b8:d7:8c:f4:44:3a:87:42:00:9d: be:2d:a4:4e:28:d7:d7:3c:68:76:a3:53:11:b6:22: 8d:b3:92:0f:65:e0:1f:d7:9f:d8:2d:b1:ec:f4:48: 2f:05:38:a2:fb:19:a7:aa:41:24:70:e7:b1:82:16: bf:a0:27:6f:f1:ec:2b:5a:8a:98:b2:ad:74:c8:e8: e2:46:48:d5:1a:55:4d:bc:f3:40:20:39:d3:b3:f1: 78:e1:da:e0:c0:b4:d5:1c:bc:40:12:16:20:bf:f2: b7:ab:05:19:89:24:60:5e:f7:41:e9:f4:ee:51:9f: 88:24:94:0f:85:83:77:aa:08:3f:be:24:29:21:e6: 49:d7:89:6a:11:0c:d4:f6:ae:d6:20:de:d0:fa:eb: 0c:58:06:74:88:c3:d6:55:a0:2e:28:62:d1:dc:00: 24:b4:cc:dc:5f:0c:ee:84:b8:5b:75:90:1a:23:b8: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:89:BA:74:FE:1B:5C:F3:CC:EE:C1:31:DB:7F:C3:68:9C:F0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl X509v3 Authority Key Identifier: keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:96:61:6f:b7:a2:e7:f4:bc:e5:a3:9f:b3:80:ae:0c:f9:cc: 67:4f:0b:7d:62:db:58:b0:54:0c:58:91:c6:2d:74:b8:9a:81: 23:05:e3:c2:d5:a6:e5:a7:23:d5:7d:d4:b2:ea:b3:58:e0:96: 60:c1:56:46:3b:18:cb:3b:55:bc:ac:54:a6:04:2d:f2:2d:a3: e7:2d:b6:9a:3c:43:03:59:ff:ab:64:b7:50:b0:bf:21:8b:3c: e1:3a:9c:4b:de:d0:a9:66:91:7f:39:d2:e5:6c:6e:df:55:ea: 43:df:0e:8a:7c:f7:40:67:d1:22:28:60:bb:96:63:a1:4c:28: 78:1b:93:00:12:11:ef:a5:f9:eb:49:d6:c9:b0:b0:e1:63:b5: 8b:cd:12:06:cb:48:21:84:d6:3c:fd:36:37:d3:cc:04:d2:03: 74:48:14:eb:80:8b:c6:f7:6f:9e:77:de:be:70:0a:ca:87:19: 3f:eb:67:ba:12:51:bf:d7:de:83:7e:07:1c:85:02:d1:9b:67: 06:62:eb:0f:30:c2:fa:0d:b4:05:c4:bf:e8:ae:26:79:f1:94: 14:c0:96:56:d7:76:2c:66:c4:48:a6:2a:68:9c:d2:18:90:ed: b5:b5:2b:ad:51:8d:7d:72:8c:df:f7:0c:2e:bc:21:39:18:e3: 9c:20:84:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/uEdnAyOLI3awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjk2OGEtNmY4Yi00YzkyLWJhZTUtYzhmZDFjNzNk OTVkMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZGI0YzJkNmEtZjA1Ni00NmU1LTlmNjQtYzRlNDg4YTQ3ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72eNYCFzIFPDMRKsVbgSmieciDw+0noalv0E S9XvdnndO18OZRbD1jh87C666lO1ej3s0UBUv8KkTE9NiNU4fijrk+Apoai/mCUo NgerNrjXjPREOodCAJ2+LaROKNfXPGh2o1MRtiKNs5IPZeAf15/YLbHs9EgvBTii +xmnqkEkcOexgha/oCdv8ewrWoqYsq10yOjiRkjVGlVNvPNAIDnTs/F44drgwLTV HLxAEhYgv/K3qwUZiSRgXvdB6fTuUZ+IJJQPhYN3qgg/viQpIeZJ14lqEQzU9q7W IN7Q+usMWAZ0iMPWVaAuKGLR3AAktMzcXwzuhLhbdZAaI7jrFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB/ibp0/htc88zuwTHbf8NonPCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Y2Fm OTY4YS02ZjhiLTRjOTItYmFlNS1jOGZkMWM3M2Q5NWQvODBhZmM5M2MtODM3OS0z M2U0LThjNTgtOTAwZDE2YjgyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWNhZjk2OGEtNmY4Yi00YzkyLWJh ZTUtYzhmZDFjNzNkOTVkLzljYWY5NjhhLTZmOGItNGM5Mi1iYWU1LWM4ZmQxYzcz ZDk1ZC5jcmwwHwYDVR0jBBgwFoAUSh0rIJrR3Xexa1NtSjyGeV0epNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Y2FmOTY4YS02ZjhiLTRjOTItYmFlNS1jOGZk MWM3M2Q5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFx0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiWYW+3ouf0vOWjn7OArgz5zGdPC31i21iwVAxYkcYtdLiagSMF48LV puWnI9V91LLqs1jglmDBVkY7GMs7VbysVKYELfIto+cttpo8QwNZ/6tkt1CwvyGL POE6nEve0KlmkX850uVsbt9V6kPfDop890Bn0SIoYLuWY6FMKHgbkwASEe+l+etJ 1smwsOFjtYvNEgbLSCGE1jz9NjfTzATSA3RIFOuAi8b3b5533r5wCsqHGT/rZ7oS Ub/X3oN+BxyFAtGbZwZi6w8wwvoNtAXEv+iuJnnxlBTAllbXdixmxEimKmic0hiQ 7bW1K61RjX1yjN/3DC68ITkY45wghFA= -----END CERTIFICATE-----Generated at Tue Oct 6 19:46:04 2026 by rpki-client