$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa File: ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa (raw, json) Hash identifier: 3PfbIiKRGOjHJb9JJrZ6OOgZ54QObC5fAu+wtQ76Qk8= Subject key identifier: BA:20:19:39:7C:09:56:0A:09:00:7A:FB:05:F3:3C:59:C4:2A:C1:CB Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D15A253F03884996296ECB5C0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 397325 IP address blocks: 23.29.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:53:f0:38:84:99:62:96:ec:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=7ca12ffa-6859-48e7-8702-b36f1bcba7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:36:67:57:6a:c1:76:95:9a:9c:a2:3c:09: 4b:02:88:0c:cf:e4:4b:28:76:8f:6f:c0:14:3c:ba: a0:6b:f4:fb:ac:95:0b:0f:60:4e:22:23:6b:01:6e: 38:05:87:f0:77:10:ac:3a:2b:6b:83:b0:f8:50:42: fb:72:62:e6:5c:4f:04:57:ee:01:cf:37:3e:58:f1: 62:2e:54:d4:b8:4a:22:84:ed:5e:ad:31:ae:4e:44: 15:67:98:df:42:a1:53:f7:94:77:a3:f3:2f:86:59: 90:a2:4f:d8:6e:64:61:56:92:da:5d:87:42:90:af: dc:7f:3e:2f:c0:9e:e2:08:0d:20:05:cf:8d:98:82: a8:ac:71:a5:f0:bd:51:db:6f:5b:45:a9:47:11:82: 5c:93:76:25:1d:42:b0:1a:26:3a:d9:f8:ae:c4:af: 80:03:25:f2:e2:e2:8c:a7:3a:bd:c7:7e:42:a1:6b: bd:e4:16:47:76:5b:05:d3:ef:15:d8:21:f5:22:5f: 12:19:a6:6d:7b:70:12:7c:b9:83:92:87:eb:c4:ec: 09:d5:b8:cc:d8:30:49:dc:53:8d:84:1f:03:b9:be: 14:ec:2b:b4:19:42:89:7e:80:a0:a2:3d:c1:fe:68: 8c:96:f3:cb:16:57:49:d6:6e:4c:16:2b:d3:07:6a: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:20:19:39:7C:09:56:0A:09:00:7A:FB:05:F3:3C:59:C4:2A:C1:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:25:4c:58:31:d7:9e:2f:c4:17:a0:47:49:56:20:80:b8:7f: b2:d5:9f:ed:1c:61:1c:86:b0:e2:3e:59:94:6b:dc:90:e8:12: ca:c0:fb:8c:12:23:8f:a9:f0:27:cc:22:d3:db:c7:e1:f8:10: 93:19:16:1c:dc:82:e9:ad:2a:de:00:98:c6:ce:3c:59:c3:9d: 29:8b:30:15:8b:e4:c7:73:09:d9:99:fa:79:aa:a6:6b:d7:57: c4:fa:ed:9b:d5:ff:9c:f4:2b:82:33:60:d9:60:27:6e:f9:22: d4:89:af:d1:c1:73:6f:35:75:93:15:b2:0c:b2:71:41:35:2f: 4a:cb:6b:b6:f6:3b:50:69:5b:13:31:3f:78:f9:4d:f3:88:cb: a5:78:13:37:df:ce:8b:d4:24:eb:b0:93:51:03:d4:63:41:77: 5b:f0:26:b6:be:3e:5b:8f:9f:74:f3:53:dc:47:d3:95:db:51: 32:93:1e:42:71:a9:6d:0e:40:4c:88:11:1f:eb:57:c7:77:38: 9b:6c:84:ad:0e:39:1b:92:3d:31:15:6b:b8:7f:d8:0c:01:b6: 4e:bd:2d:50:5b:08:24:33:3c:7f:5e:41:74:be:f2:61:48:21: 61:e9:21:44:82:33:f1:a5:90:a2:22:12:84:99:e4:e1:0a:65: 53:32:39:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolPwOISZYpbstcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk N2NhMTJmZmEtNjg1OS00OGU3LTg3MDItYjM2ZjFiY2JhN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGQ2Z1dqwXaVmpyiPAlLAogMz+RLKHaPb8AU PLqga/T7rJULD2BOIiNrAW44BYfwdxCsOitrg7D4UEL7cmLmXE8EV+4Bzzc+WPFi LlTUuEoihO1erTGuTkQVZ5jfQqFT95R3o/MvhlmQok/YbmRhVpLaXYdCkK/cfz4v wJ7iCA0gBc+NmIKorHGl8L1R229bRalHEYJck3YlHUKwGiY62fiuxK+AAyXy4uKM pzq9x35CoWu95BZHdlsF0+8V2CH1Il8SGaZte3ASfLmDkofrxOwJ1bjM2DBJ3FON hB8Dub4U7Cu0GUKJfoCgoj3B/miMlvPLFldJ1m5MFivTB2ofXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLogGTl8CVYKCQB6+wXzPFnEKsHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvY2EyNGM5ZGQtZTZjYS0z ZjJiLTkzMzEtOGIwNDc0NDg1Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMlTFgx154vxBegR0lWIIC4f7LVn+0cYRyGsOI+WZRr3JDoEsrA+4wS I4+p8CfMItPbx+H4EJMZFhzcgumtKt4AmMbOPFnDnSmLMBWL5MdzCdmZ+nmqpmvX V8T67ZvV/5z0K4IzYNlgJ275ItSJr9HBc281dZMVsgyycUE1L0rLa7b2O1BpWxMx P3j5TfOIy6V4EzffzovUJOuwk1ED1GNBd1vwJra+PluPn3TzU9xH05XbUTKTHkJx qW0OQEyIER/rV8d3OJtshK0OORuSPTEVa7h/2AwBtk69LVBbCCQzPH9eQXS+8mFI IWHpIUSCM/GlkKIiEoSZ5OEKZVMyOd0= -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:30 2026 by rpki-client