$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa File: 80afc93c-8379-33e4-8c58-900d16b82c22.roa (raw, json) Hash identifier: +3KR//8dIKlf0GMZ46Uqy2MCBHtMXZpD6Y3RsgKdV0A= Subject key identifier: 1E:78:65:C0:3C:FC:D8:7D:D5:0A:AC:F9:9C:C4:51:B1:71:49:A8:81 Certificate issuer: /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Certificate serial: 010D0C9F4328584B1F017069AEEF5BE1695B5C40 Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 26421 IP address blocks: 23.29.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:70:69:ae:ef:5b:e1:69:5b:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=ca320eff-87fa-4c7b-a252-b3ba7c2a60e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7c:1d:0f:56:0e:28:80:b3:4d:6b:9a:85:39: a6:cc:55:89:79:88:97:19:c2:92:d8:4a:04:0a:e1: e6:62:e8:1d:e4:88:2d:f8:d0:9c:59:47:dc:c1:bc: 37:c4:c4:04:3b:35:fd:ac:ec:a3:fd:43:53:d6:97: 64:d8:68:98:06:25:e5:d1:35:2f:16:37:87:c8:6a: 13:a5:ab:d1:28:cd:01:6e:43:ad:a3:10:2b:5d:1d: 2d:99:70:23:63:43:2d:69:04:c4:57:a2:9a:11:a9: 5c:04:8d:d1:41:bd:d3:97:a1:66:cf:37:ba:e4:de: c6:45:6d:bd:8f:19:e5:4d:01:91:61:a3:08:6e:76: 16:e8:1a:5f:f3:d2:83:f2:a9:1e:4a:98:d4:1a:51: 22:ad:1f:cf:de:9b:b7:37:51:0d:20:39:f1:80:e8: 3e:15:00:04:95:d4:a6:20:3a:81:5e:f8:99:78:18: 56:7d:3d:57:e6:6f:6b:57:f1:99:5c:91:59:b2:75: 69:d4:96:42:74:17:0b:2b:42:1a:35:1c:82:44:e3: 98:4e:6c:25:47:25:47:3f:49:7b:e5:f7:25:8f:ee: 25:fd:9c:51:50:26:0b:fd:d1:c5:68:18:d8:92:1e: 57:e2:c9:e2:1b:28:0a:36:7f:70:52:8c:1a:65:cc: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:78:65:C0:3C:FC:D8:7D:D5:0A:AC:F9:9C:C4:51:B1:71:49:A8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl X509v3 Authority Key Identifier: keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:72:3b:9d:0c:80:83:72:3f:42:b3:3c:a6:80:fc:d7:ac:2f: 0c:e9:ba:78:5d:19:5b:85:ac:e1:3d:06:fe:71:d2:b4:45:44: 5e:03:cb:c7:a7:f3:b6:36:fe:25:96:41:7a:46:85:d8:18:94: df:59:3f:d2:aa:17:4a:be:03:11:6f:65:87:a8:8a:21:26:3a: 73:51:15:df:55:fe:5f:2a:fa:e7:b6:03:6f:53:75:15:c5:bd: e4:02:23:75:4d:98:c6:a5:be:62:40:60:06:10:2f:6f:d9:26: fb:b7:69:cf:92:d0:c1:27:ea:dc:1c:6e:d5:b4:e7:c2:68:4a: 1b:25:f0:2d:15:1e:22:23:3c:fc:3b:23:4f:7c:bd:fb:aa:68: 21:15:75:4d:aa:ea:be:c2:82:cc:85:75:24:f1:0b:99:80:ac: 35:39:c9:83:fd:4d:77:9b:d8:86:07:d6:3b:99:3e:c9:f0:ac: 8e:c3:d0:98:7c:21:cf:d3:90:4e:27:08:64:5f:5f:36:8a:cc: fc:73:a7:8b:47:2e:a6:f6:ed:35:28:c8:72:48:ea:31:3c:cd: 01:5c:4c:88:fd:0d:a3:47:b4:d7:93:19:2d:aa:bd:d0:2e:f9: 1b:cb:ee:c5:3b:c9:40:e6:bc:61:52:49:6b:22:d2:99:8e:04: 46:d2:88:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXBpru9b4WlbXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjk2OGEtNmY4Yi00YzkyLWJhZTUtYzhmZDFjNzNk OTVkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2EzMjBlZmYtODdmYS00YzdiLWEyNTItYjNiYTdjMmE2MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHwdD1YOKICzTWuahTmmzFWJeYiXGcKS2EoE CuHmYugd5Igt+NCcWUfcwbw3xMQEOzX9rOyj/UNT1pdk2GiYBiXl0TUvFjeHyGoT pavRKM0BbkOtoxArXR0tmXAjY0MtaQTEV6KaEalcBI3RQb3Tl6Fmzze65N7GRW29 jxnlTQGRYaMIbnYW6Bpf89KD8qkeSpjUGlEirR/P3pu3N1ENIDnxgOg+FQAEldSm IDqBXviZeBhWfT1X5m9rV/GZXJFZsnVp1JZCdBcLK0IaNRyCROOYTmwlRyVHP0l7 5fclj+4l/ZxRUCYL/dHFaBjYkh5X4sniGygKNn9wUowaZcwOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB54ZcA8/Nh91Qqs+ZzEUbFxSaiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Y2Fm OTY4YS02ZjhiLTRjOTItYmFlNS1jOGZkMWM3M2Q5NWQvODBhZmM5M2MtODM3OS0z M2U0LThjNTgtOTAwZDE2YjgyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWNhZjk2OGEtNmY4Yi00YzkyLWJh ZTUtYzhmZDFjNzNkOTVkLzljYWY5NjhhLTZmOGItNGM5Mi1iYWU1LWM4ZmQxYzcz ZDk1ZC5jcmwwHwYDVR0jBBgwFoAUSh0rIJrR3Xexa1NtSjyGeV0epNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Y2FmOTY4YS02ZjhiLTRjOTItYmFlNS1jOGZk MWM3M2Q5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFx0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRyO50MgINyP0KzPKaA/NesLwzpunhdGVuFrOE9Bv5x0rRFRF4Dy8en 87Y2/iWWQXpGhdgYlN9ZP9KqF0q+AxFvZYeoiiEmOnNRFd9V/l8q+ue2A29TdRXF veQCI3VNmMalvmJAYAYQL2/ZJvu3ac+S0MEn6twcbtW058JoShsl8C0VHiIjPPw7 I098vfuqaCEVdU2q6r7CgsyFdSTxC5mArDU5yYP9TXeb2IYH1juZPsnwrI7D0Jh8 Ic/TkE4nCGRfXzaKzPxzp4tHLqb27TUoyHJI6jE8zQFcTIj9DaNHtNeTGS2qvdAu +RvL7sU7yUDmvGFSSWsi0pmOBEbSiFI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:17 2025 by rpki-client