$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/b6799442-7de8-3e76-abac-968701276d4c.roa File: b6799442-7de8-3e76-abac-968701276d4c.roa (raw, json) Hash identifier: 8YSGaXUzIr2lYBwFutj15E0N8nga+aAcrUp2B0yemHA= Subject key identifier: 09:48:1A:B0:55:F3:4F:5C:89:E5:91:9F:5F:F8:63:58:30:95:F8:C5 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A261E27EE67B2243357180 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/b6799442-7de8-3e76-abac-968701276d4c.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 397325 IP address blocks: 23.29.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:61:e2:7e:e6:7b:22:43:35:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=dc6b1166-7aec-4691-9491-64e84fac63da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:76:d2:99:db:ea:87:44:3e:ac:eb:18:51: 96:c6:0d:82:d0:72:01:b9:17:06:dc:cc:1f:60:51: 55:91:56:16:25:b6:89:94:85:4a:f0:5c:37:51:54: fc:f9:46:51:69:a8:0d:90:e6:9c:df:76:b6:a5:e4: 9e:a6:d1:49:81:a6:8f:fe:f1:0f:d7:4f:21:73:4a: fe:d3:cd:27:ca:32:45:da:27:f3:bb:01:5f:5d:3e: 73:15:05:a7:49:0d:2a:65:f9:50:73:2d:65:07:dd: ce:3f:93:ae:0a:06:8f:3d:d1:b3:24:ca:d7:78:23: c5:be:39:e9:fe:41:ad:79:e2:a7:11:a2:c8:b2:d0: e9:6e:10:ee:dc:8a:83:5d:5d:8a:e0:51:15:2c:7f: 4a:90:16:c6:a6:76:39:0a:25:f2:e1:5a:eb:84:59: 4c:d7:c2:67:0a:cd:30:ac:36:88:70:4f:08:54:35: ec:fc:04:fc:f0:17:4e:9a:2f:f9:ba:f8:86:d2:22: 93:af:a7:3b:d7:1b:df:39:c4:40:d4:6e:5c:ad:d8: 96:f0:6a:52:f3:00:21:46:b7:f6:35:ef:a2:77:10: 54:76:be:cb:2b:21:25:91:3a:cd:77:81:a6:3b:1e: c4:55:33:c2:04:9a:da:c6:3c:7b:f4:b3:ca:e5:de: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:1A:B0:55:F3:4F:5C:89:E5:91:9F:5F:F8:63:58:30:95:F8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/b6799442-7de8-3e76-abac-968701276d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fc:45:c4:ee:6b:54:a2:d2:10:8b:5f:19:4e:ca:78:3d:52: 63:26:8d:45:98:61:66:e9:0a:1a:20:4c:e8:48:ec:0f:30:91: 0a:7d:06:6f:f3:ca:c1:8f:1e:8e:89:54:78:e0:c6:cf:9e:80: 54:2f:ae:21:49:29:6a:bd:5a:29:82:d1:d3:85:fb:8d:65:28: 6e:4e:a6:e4:8f:cf:97:33:2d:7c:c0:f9:c9:0a:1a:65:03:49: 39:91:22:f0:00:c8:dd:09:c9:e4:67:f2:7b:fe:0e:e9:4b:13: 0a:a6:21:ba:82:98:ed:8d:00:12:bb:d4:1f:d3:45:ee:17:ea: 5d:9b:f1:7a:69:e7:0d:0c:0a:53:bc:d4:e5:23:2d:8a:ea:ae: cf:0d:d8:49:26:95:1d:6c:93:54:91:ce:56:2c:d3:64:64:3b: 0c:bf:92:9d:98:96:e2:c8:29:d3:b3:ab:4f:21:03:33:92:31: a2:dd:b6:22:d6:52:07:89:b5:dc:04:bd:0c:73:79:da:bf:05: 15:5d:75:48:77:87:a3:2e:d2:33:b6:76:29:81:f6:25:01:32: cb:c3:c5:6f:59:65:66:bf:4b:0f:15:23:45:a2:44:b5:a8:e9: 99:07:14:72:bc:13:ff:d4:cc:4b:b2:31:88:d9:4b:9b:fa:0d: 65:7f:1b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomHifuZ7IkM1cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZGM2YjExNjYtN2FlYy00NjkxLTk0OTEtNjRlODRmYWM2M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy120pnb6odEPqzrGFGWxg2C0HIBuRcG3Mwf YFFVkVYWJbaJlIVK8Fw3UVT8+UZRaagNkOac33a2peSeptFJgaaP/vEP108hc0r+ 080nyjJF2ifzuwFfXT5zFQWnSQ0qZflQcy1lB93OP5OuCgaPPdGzJMrXeCPFvjnp /kGteeKnEaLIstDpbhDu3IqDXV2K4FEVLH9KkBbGpnY5CiXy4VrrhFlM18JnCs0w rDaIcE8IVDXs/AT88BdOmi/5uviG0iKTr6c71xvfOcRA1G5crdiW8GpS8wAhRrf2 Ne+idxBUdr7LKyElkTrNd4GmOx7EVTPCBJraxjx79LPK5d6rzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlIGrBV809cieWRn1/4Y1gwlfjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYjY3OTk0NDItN2RlOC0z ZTc2LWFiYWMtOTY4NzAxMjc2ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD8RcTua1Si0hCLXxlOyng9UmMmjUWYYWbpChogTOhI7A8wkQp9Bm/z ysGPHo6JVHjgxs+egFQvriFJKWq9WimC0dOF+41lKG5OpuSPz5czLXzA+ckKGmUD STmRIvAAyN0JyeRn8nv+DulLEwqmIbqCmO2NABK71B/TRe4X6l2b8Xpp5w0MClO8 1OUjLYrqrs8N2EkmlR1sk1SRzlYs02RkOwy/kp2YluLIKdOzq08hAzOSMaLdtiLW UgeJtdwEvQxzedq/BRVddUh3h6Mu0jO2dimB9iUBMsvDxW9ZZWa/Sw8VI0WiRLWo 6ZkHFHK8E//UzEuyMYjZS5v6DWV/G5g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:54 2026 by rpki-client