$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa File: 1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa (raw, json) Hash identifier: TFiM48t+sC/NVLcln99ZivnIjKlBgCAeVzofLA3WZoA= Subject key identifier: 74:88:FC:BA:48:72:2B:1F:A9:C2:87:16:14:EE:C2:6D:81:76:B1:ED Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F49744003811601C1D263C940 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397325 IP address blocks: 23.29.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:40:03:81:16:01:c1:d2:63:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb3d2361-a29c-425a-8d1a-5a2282a38aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:e8:1c:d2:34:0d:e9:ea:03:63:d6:6c:d7: 03:f8:81:a3:12:ec:41:87:5c:20:8d:1e:20:02:80: 3d:ae:51:c9:9b:64:66:fb:76:5f:78:cf:e1:04:75: ff:6f:e3:f4:d1:8a:98:98:6c:66:4b:bf:35:cb:a4: 61:59:db:34:18:ef:5c:7f:ee:ec:b8:1d:b4:8e:54: b6:a2:a3:b1:c3:58:37:ac:23:cf:19:2d:e4:bd:ce: 7c:e6:5e:0f:c1:83:09:bf:60:ab:10:ad:0b:95:48: 14:ae:2f:85:71:6a:3f:6d:7f:fb:4f:3e:67:87:86: 68:e9:75:e6:90:f4:ff:5f:e2:2b:f8:cc:f2:d6:dd: 26:1d:e3:ba:4d:2f:c5:82:65:98:78:81:99:b0:02: 82:a9:89:18:05:01:67:cf:b1:04:1a:6b:88:10:8f: 2b:cc:c6:c7:a7:7d:d2:1e:fa:a5:a2:a8:18:9f:45: d6:da:3d:ac:6c:40:02:d7:f6:09:35:db:11:c7:af: e3:c4:2b:68:b9:95:85:95:7e:ff:0a:e5:94:af:4f: 2b:11:c2:6d:99:80:5b:ca:72:d4:b0:91:5c:ee:40: d2:2c:ad:0e:f7:b7:52:8d:30:c4:d0:98:cf:e3:41: 1d:78:4a:91:c3:ca:2f:cd:27:c6:fa:a9:4e:61:4b: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:FC:BA:48:72:2B:1F:A9:C2:87:16:14:EE:C2:6D:81:76:B1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d2:23:98:4f:17:a3:6b:1e:12:ea:2d:53:00:e1:13:4d:fd: 97:8b:f1:5b:1f:f5:fc:11:31:37:1e:54:27:a2:3d:0b:6a:5d: ec:57:48:d3:de:7d:0f:9d:35:07:6d:19:bf:2e:86:eb:88:b4: 66:db:75:f6:b5:c8:4e:0b:32:e3:8b:a4:4a:93:b3:c0:68:b4: 0b:a1:f7:25:2f:0e:e7:34:75:8b:b5:5f:ab:52:a6:25:67:6c: da:3c:8b:0d:77:f5:ea:f6:40:f1:10:ef:e2:85:ec:75:76:92: 24:c4:c6:40:62:4a:54:c2:ac:87:63:4f:ff:34:a1:cb:64:1f: 0a:31:a8:1b:7e:04:da:9e:ba:fb:fa:2d:e4:95:e5:a6:b7:94: 29:f7:b3:a1:9c:6a:32:1e:75:b9:46:df:97:7d:59:cf:a7:86: b7:a4:6e:85:69:2f:7f:68:0d:88:75:5e:51:f0:88:d3:ea:93: ec:8a:2d:5e:f8:f9:ca:f6:60:fe:0d:1c:58:44:43:1e:dd:18: 2f:ec:e7:ca:64:f8:db:42:79:ec:73:a8:5b:ec:64:a0:6a:eb: 2f:d6:96:d6:27:5a:36:f2:19:83:22:27:5f:a6:1a:c5:c5:6e: 43:5e:80:10:4b:80:0d:45:f3:67:86:6e:34:95:b2:8e:6c:4b: eb:28:46:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEADgRYBwdJjyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIzZDIzNjEtYTI5Yy00MjVhLThkMWEtNWEyMjgyYTM4YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIboHNI0DenqA2PWbNcD+IGjEuxBh1wgjR4g AoA9rlHJm2Rm+3ZfeM/hBHX/b+P00YqYmGxmS781y6RhWds0GO9cf+7suB20jlS2 oqOxw1g3rCPPGS3kvc585l4PwYMJv2CrEK0LlUgUri+FcWo/bX/7Tz5nh4Zo6XXm kPT/X+Ir+Mzy1t0mHeO6TS/FgmWYeIGZsAKCqYkYBQFnz7EEGmuIEI8rzMbHp33S HvqloqgYn0XW2j2sbEAC1/YJNdsRx6/jxCtouZWFlX7/CuWUr08rEcJtmYBbynLU sJFc7kDSLK0O97dSjTDE0JjP40EdeEqRw8ovzSfG+qlOYUvISQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSI/LpIcisfqcKHFhTuwm2BdrHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMWI3M2Q2NDEtYmVmMS0z YzE2LThhN2YtM2Y3MDMzZDcwYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjSI5hPF6NrHhLqLVMA4RNN/ZeL8Vsf9fwRMTceVCeiPQtqXexXSNPe fQ+dNQdtGb8uhuuItGbbdfa1yE4LMuOLpEqTs8BotAuh9yUvDuc0dYu1X6tSpiVn bNo8iw139er2QPEQ7+KF7HV2kiTExkBiSlTCrIdjT/80octkHwoxqBt+BNqeuvv6 LeSV5aa3lCn3s6GcajIedblG35d9Wc+nhrekboVpL39oDYh1XlHwiNPqk+yKLV74 +cr2YP4NHFhEQx7dGC/s58pk+NtCeexzqFvsZKBq6y/WltYnWjbyGYMiJ1+mGsXF bkNegBBLgA1F82eGbjSVso5sS+soRgI= -----END CERTIFICATE-----Generated at Sun Sep 27 21:14:42 2026 by rpki-client