$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa File: a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa (raw, json) Hash identifier: aGzifNdHvfXQ+zfL4Li8F8VgDcY33aftt3jMEvglo8s= Subject key identifier: 73:B9:CD:B2:B7:FC:64:E3:13:6F:C4:D3:CD:64:A7:84:1B:1B:49:20 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F498809D35770FCE5942EC840 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400615 IP address blocks: 23.29.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:09:d3:57:70:fc:e5:94:2e:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d424a93-7f16-4514-b810-50cc4cec50cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:78:39:3d:3d:32:26:aa:27:df:62:bb:b5: 81:1c:8e:26:66:55:c9:a3:68:88:d3:14:c4:82:d4: f4:7b:0f:84:38:17:8e:d2:a8:96:75:e2:41:e2:c8: 9c:80:e7:fa:e4:08:f9:a5:c1:c2:e1:6b:6c:f5:e7: 51:84:c0:f8:a7:87:80:ad:04:7c:50:cb:ec:4f:f3: b5:85:b9:dd:86:52:27:f8:29:f1:e5:c2:4b:57:6f: b0:a2:c1:5a:04:16:88:ba:90:24:9a:52:8a:db:9b: 20:74:6a:86:62:20:02:e7:ba:a8:b3:46:f4:22:8f: cc:88:a8:43:90:3e:80:f0:8e:07:d4:eb:8c:92:54: 39:af:09:eb:60:22:46:27:ca:1a:76:8e:cd:03:f3: ff:92:7b:6f:bc:82:9e:8b:31:39:12:dc:c8:cd:02: 8b:21:ac:1b:6a:ca:c6:1c:21:b3:c7:b9:d8:e7:c8: fe:53:50:0d:3e:0c:3a:ee:c1:69:75:2f:72:ce:62: 23:d6:d3:87:88:44:4a:07:38:5c:bc:a8:cc:dd:23: 8c:80:bc:67:a2:94:41:7a:d4:8a:6c:63:dc:dd:91: a9:1b:56:73:69:1a:02:7b:49:06:09:27:97:00:16: 68:39:4c:74:21:89:88:29:7b:98:1d:a1:cc:08:64: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B9:CD:B2:B7:FC:64:E3:13:6F:C4:D3:CD:64:A7:84:1B:1B:49:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7a:34:40:d0:a0:30:53:a3:6a:b9:ed:02:58:13:f7:c2:6c: c3:a0:6f:5f:68:60:31:4f:13:5b:0f:18:17:9a:2e:bb:a4:93: 72:ed:43:5d:f6:da:97:88:64:9b:bd:ff:d9:e3:6a:ed:2e:fe: 6c:8e:1b:cc:35:24:55:81:22:48:f2:78:b5:0d:a4:96:a8:e0: 39:f0:eb:87:c8:7c:88:09:a6:85:fd:f6:33:6a:fe:b0:e1:dc: e1:5c:e1:04:ac:04:3b:b7:d5:86:ad:97:10:10:3b:ee:ca:bc: 89:9e:67:a2:d5:5b:75:5f:b0:a7:3c:2e:38:43:c8:08:77:04: 36:a2:6b:34:e0:ea:14:e2:c2:ac:d9:db:45:30:e7:b2:d9:8c: 28:fa:e8:cf:25:09:40:e8:c2:db:b7:2f:de:a2:de:d4:42:8a: fd:27:6b:0f:06:ca:c3:96:aa:a1:21:8c:de:e7:87:44:14:14: e8:a1:98:de:b0:9d:80:fc:84:85:e0:d8:e0:19:65:60:60:ab: d5:58:f5:a0:0b:05:66:f4:ad:b9:a9:04:36:d9:16:aa:9f:d1: b3:6c:3c:53:c7:62:aa:aa:a0:a9:e2:a4:a5:39:b1:cf:c2:ac: b9:97:e2:24:f7:a0:5d:bf:cd:f1:eb:d0:d4:93:24:6d:b8:c3: c2:45:89:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiAnTV3D85ZQuyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ0MjRhOTMtN2YxNi00NTE0LWI4MTAtNTBjYzRjZWM1MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDZ4OT09MiaqJ99iu7WBHI4mZlXJo2iI0xTE gtT0ew+EOBeO0qiWdeJB4sicgOf65Aj5pcHC4Wts9edRhMD4p4eArQR8UMvsT/O1 hbndhlIn+Cnx5cJLV2+wosFaBBaIupAkmlKK25sgdGqGYiAC57qos0b0Io/MiKhD kD6A8I4H1OuMklQ5rwnrYCJGJ8oado7NA/P/kntvvIKeizE5EtzIzQKLIawbasrG HCGzx7nY58j+U1ANPgw67sFpdS9yzmIj1tOHiERKBzhcvKjM3SOMgLxnopRBetSK bGPc3ZGpG1ZzaRoCe0kGCSeXABZoOUx0IYmIKXuYHaHMCGSFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO5zbK3/GTjE2/E081kp4QbG0kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYTBmZjM1M2EtNjZlYi0z YzkwLTg5NWEtMTkxMWVjZjVjNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR6NEDQoDBTo2q57QJYE/fCbMOgb19oYDFPE1sPGBeaLrukk3LtQ132 2peIZJu9/9njau0u/myOG8w1JFWBIkjyeLUNpJao4Dnw64fIfIgJpoX99jNq/rDh 3OFc4QSsBDu31YatlxAQO+7KvImeZ6LVW3VfsKc8LjhDyAh3BDaiazTg6hTiwqzZ 20Uw57LZjCj66M8lCUDowtu3L96i3tRCiv0naw8GysOWqqEhjN7nh0QUFOihmN6w nYD8hIXg2OAZZWBgq9VY9aALBWb0rbmpBDbZFqqf0bNsPFPHYqqqoKnipKU5sc/C rLmX4iT3oF2/zfHr0NSTJG24w8JFiY0= -----END CERTIFICATE-----Generated at Fri Sep 25 09:09:57 2026 by rpki-client