$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa File: 40b54338-aa55-3501-b2e0-f0377f1458e5.roa (raw, json) Hash identifier: gbw76fL3FdPW/Xwu+mppc0HzRON9tWnAlHWlA/Ym5cU= Subject key identifier: D7:0B:09:B9:E9:F1:55:1A:12:A9:5F:E0:53:AB:29:72:A8:92:13:45 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A26C6BF86D89A80957D158 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 397325 IP address blocks: 23.29.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6c:6b:f8:6d:89:a8:09:57:d1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=a4b0dd5c-9c0e-44ef-8624-9375db34a75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:fb:b4:f1:39:ac:63:c6:7c:b9:98:80:dd: 5a:9a:bd:ab:a9:cf:74:1b:c6:5f:cd:bb:95:1b:df: 5a:25:f9:42:ac:05:2e:78:38:a0:cb:ea:1e:52:e3: 35:5b:9b:af:ac:5e:51:23:70:80:f7:18:7e:ac:90: cd:7a:d9:62:d5:d9:e6:3e:71:97:8a:eb:be:88:dc: 8c:09:ef:ad:ac:08:66:76:d9:90:d7:97:1c:15:60: d9:75:23:fd:61:6d:26:57:55:c4:66:c4:d8:3c:34: 40:6a:34:94:79:05:49:d5:2a:f1:4c:a7:4a:b3:e7: 87:e2:ba:56:72:7a:75:86:ec:5b:b7:11:45:5e:59: 5a:e0:b3:07:bb:7f:0c:85:95:15:47:b1:77:6e:cd: 23:f3:e4:d1:b9:52:d4:ac:e9:71:df:d7:29:51:d1: 47:a7:f1:f8:61:8b:8b:79:ba:68:06:5b:2c:74:dc: 00:ae:6d:a1:ff:0e:b8:90:c9:b8:dd:8f:8b:08:e0: c4:85:de:9b:2c:0a:45:57:35:f5:ca:85:ed:43:2c: 65:44:14:df:36:9d:00:f4:43:22:62:fe:16:ca:2c: 25:df:80:1e:c0:b2:a3:29:7a:e7:f1:4c:94:81:71: c0:7a:fe:25:b4:63:c6:2f:e7:63:d7:c3:cc:6e:ed: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0B:09:B9:E9:F1:55:1A:12:A9:5F:E0:53:AB:29:72:A8:92:13:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:39:ee:d9:d6:04:42:bb:57:5a:ff:02:57:ab:b2:e7:2f:a9: 74:fe:2b:83:80:cc:2d:63:03:29:eb:fd:c5:bd:fc:e2:0e:27: c4:f5:dd:bf:94:a8:da:f4:eb:da:99:09:c3:fb:19:bd:ff:85: 24:aa:11:2d:53:7b:43:8a:10:c2:aa:fe:05:48:8c:7b:de:2d: a6:36:e2:2c:7a:88:a2:69:ce:07:f8:a0:24:aa:6f:10:f9:cc: 00:ff:82:0f:4f:93:a7:1f:ce:68:80:b7:cf:ba:13:ce:09:8f: 59:52:bd:45:6c:6f:4d:a0:42:f0:9f:58:7f:7a:9d:ba:41:26: ba:3f:93:a7:ae:ed:7e:5d:b6:b8:f6:52:d8:78:d3:86:ef:ed: 22:7e:eb:19:bc:13:c0:ff:65:6d:0a:64:39:6a:bd:f1:18:a0: 05:cf:af:7d:35:25:74:41:9c:be:31:90:51:0a:84:70:3a:d5: 68:44:66:66:da:23:eb:d9:c3:09:0f:86:f3:02:cd:95:d0:4b: 43:3a:b1:83:c8:31:ae:76:70:14:0f:62:fc:91:eb:6f:52:54: 9d:8b:eb:64:f5:6b:c4:0e:86:bd:5c:34:a6:0f:ae:a8:18:1e: a8:ef:d0:7f:26:5b:4b:4c:3e:73:42:a5:90:71:1c:16:a8:e9: 9f:20:b8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vomxr+G2JqAlX0VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk YTRiMGRkNWMtOWMwZS00NGVmLTg2MjQtOTM3NWRiMzRhNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgz7tPE5rGPGfLmYgN1amr2rqc90G8ZfzbuV G99aJflCrAUueDigy+oeUuM1W5uvrF5RI3CA9xh+rJDNetli1dnmPnGXiuu+iNyM Ce+trAhmdtmQ15ccFWDZdSP9YW0mV1XEZsTYPDRAajSUeQVJ1SrxTKdKs+eH4rpW cnp1huxbtxFFXlla4LMHu38MhZUVR7F3bs0j8+TRuVLUrOlx39cpUdFHp/H4YYuL ebpoBlssdNwArm2h/w64kMm43Y+LCODEhd6bLApFVzX1yoXtQyxlRBTfNp0A9EMi Yv4Wyiwl34AewLKjKXrn8UyUgXHAev4ltGPGL+dj18PMbu1t9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcLCbnp8VUaEqlf4FOrKXKokhNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNDBiNTQzMzgtYWE1NS0z NTAxLWIyZTAtZjAzNzdmMTQ1OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg57tnWBEK7V1r/AlersucvqXT+K4OAzC1jAynr/cW9/OIOJ8T13b+U qNr069qZCcP7Gb3/hSSqES1Te0OKEMKq/gVIjHveLaY24ix6iKJpzgf4oCSqbxD5 zAD/gg9Pk6cfzmiAt8+6E84Jj1lSvUVsb02gQvCfWH96nbpBJro/k6eu7X5dtrj2 Uth404bv7SJ+6xm8E8D/ZW0KZDlqvfEYoAXPr301JXRBnL4xkFEKhHA61WhEZmba I+vZwwkPhvMCzZXQS0M6sYPIMa52cBQPYvyR629SVJ2L62T1a8QOhr1cNKYPrqgY Hqjv0H8mW0tMPnNCpZBxHBao6Z8guJc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:40 2026 by rpki-client