$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa File: 0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa (raw, json) Hash identifier: 6vdRxxiVbuh8ko6hQIBew8UiF0NJh3LhRpVQxE7AP70= Subject key identifier: DF:10:B1:A6:A4:29:3C:B2:AD:95:49:5A:7D:F1:39:81:29:57:8C:74 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A254E28ED2FF6030097000 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 400615 IP address blocks: 23.29.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:54:e2:8e:d2:ff:60:30:09:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=cbd0f21f-c81b-4d37-bb65-0a975c0d9e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:37:d6:b3:14:b3:00:aa:18:bb:8c:75:9a: d2:fd:a0:5b:f1:cf:93:44:ff:d5:7f:c9:19:54:a4: 00:80:c0:04:35:89:d7:7a:6f:5f:e7:ba:c8:f1:9d: 78:4f:6b:03:04:3c:ae:2c:0f:61:00:10:06:51:57: 9b:6b:cc:9d:a2:42:5f:e5:ad:6a:ce:74:ac:8f:c7: 52:48:eb:58:ec:92:50:7d:43:ea:49:c0:4b:65:c9: 1c:b5:16:ab:27:14:c3:d7:55:10:2f:42:7a:f9:ab: 51:c7:63:4f:61:42:15:21:c6:4e:08:a0:27:3f:1d: 26:30:55:09:2f:6a:3e:0b:1b:6d:27:1f:21:bd:73: 7f:b7:6c:f6:c0:73:a0:fa:2b:ea:75:c9:1a:83:14: 04:76:ba:18:1c:ba:60:5d:33:0a:a8:37:36:36:94: a8:6d:e7:12:66:80:7a:93:25:36:ac:45:d4:c2:8a: 00:d0:ba:66:cf:95:14:93:6f:cc:65:03:01:37:53: 85:c0:f4:e3:6a:10:0a:3b:df:ed:58:6b:c4:c7:22: 45:50:e4:b3:7a:aa:d1:6d:53:f3:2a:5c:a1:ca:60: b5:5b:67:2c:3d:99:10:88:2d:7f:44:78:87:04:a1: 40:df:05:47:87:bf:2b:a6:36:97:bf:19:eb:54:35: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:B1:A6:A4:29:3C:B2:AD:95:49:5A:7D:F1:39:81:29:57:8C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e4:b3:f3:42:5f:b8:3e:6d:25:01:2f:fe:8e:61:d6:fa:ac: a1:05:7a:3a:6a:62:0d:2e:4b:bc:d5:63:90:97:35:17:10:aa: a0:ac:67:f4:2c:7f:5d:cb:1c:a9:b5:d7:84:d9:43:38:b8:7e: a1:7a:3d:75:8f:62:64:2e:90:85:ed:fd:8f:33:4f:dc:3d:fb: d3:18:19:4f:a2:18:13:e3:34:95:0d:25:70:69:4c:4d:bf:0a: 8e:b6:2a:f2:4f:39:17:c4:f3:18:b6:b5:65:a7:d7:cc:54:a2: de:4c:98:f0:22:b5:66:37:9c:06:5b:95:7e:ac:15:e2:71:c6: 10:1f:39:ff:2f:3e:ea:9e:91:9b:e2:b9:e6:39:c9:48:3f:1f: f5:dd:9a:31:15:8c:6a:cf:ac:72:55:00:ba:b1:fb:05:01:be: 38:c9:8b:f8:dd:3d:28:8b:69:8f:c9:d7:dc:55:45:d2:4f:b8: 3b:5d:e2:28:4f:f4:4c:c1:47:57:8f:4d:81:cc:45:57:0b:64: 26:12:2c:83:f9:e2:9b:e2:33:43:20:2d:e8:a3:bc:b8:93:73: 46:c3:ac:95:13:26:e9:39:1e:46:89:83:ae:e9:ed:f5:ce:31: 34:31:fc:48:44:50:cc:4b:fd:f0:6a:ff:8d:16:2c:d9:d7:ab: 86:3a:88:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolTijtL/YDAJcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk Y2JkMGYyMWYtYzgxYi00ZDM3LWJiNjUtMGE5NzVjMGQ5ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxE31rMUswCqGLuMdZrS/aBb8c+TRP/Vf8kZ VKQAgMAENYnXem9f57rI8Z14T2sDBDyuLA9hABAGUVeba8ydokJf5a1qznSsj8dS SOtY7JJQfUPqScBLZckctRarJxTD11UQL0J6+atRx2NPYUIVIcZOCKAnPx0mMFUJ L2o+CxttJx8hvXN/t2z2wHOg+ivqdckagxQEdroYHLpgXTMKqDc2NpSobecSZoB6 kyU2rEXUwooA0Lpmz5UUk2/MZQMBN1OFwPTjahAKO9/tWGvExyJFUOSzeqrRbVPz KlyhymC1W2csPZkQiC1/RHiHBKFA3wVHh78rpjaXvxnrVDXefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8QsaakKTyyrZVJWn3xOYEpV4x0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMGMwYzBhMWEtNjIwMS0z YWU5LWI0MzQtY2E1OWY0MDQ1NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx03MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfks/NCX7g+bSUBL/6OYdb6rKEFejpqYg0uS7zVY5CXNRcQqqCsZ/Qs f13LHKm114TZQzi4fqF6PXWPYmQukIXt/Y8zT9w9+9MYGU+iGBPjNJUNJXBpTE2/ Co62KvJPORfE8xi2tWWn18xUot5MmPAitWY3nAZblX6sFeJxxhAfOf8vPuqekZvi ueY5yUg/H/XdmjEVjGrPrHJVALqx+wUBvjjJi/jdPSiLaY/J19xVRdJPuDtd4ihP 9EzBR1ePTYHMRVcLZCYSLIP54pviM0MgLeijvLiTc0bDrJUTJuk5HkaJg67p7fXO MTQx/EhEUMxL/fBq/40WLNnXq4Y6iEY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:17 2026 by rpki-client