$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa File: bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa (raw, json) Hash identifier: THQ1OUl8g/UFtVPBqSxiT0sia6LhUSyrSH3wSgm7kJo= Subject key identifier: C8:40:CE:00:1F:3D:78:59:9F:8A:CE:C9:92:06:53:B1:34:F0:25:4D Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B56953D7B873A149854A20ED4 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa Signing time: Sat 27 Sep 2025 22:47:55 +0000 ROA not before: Sat 27 Sep 2025 22:47:55 +0000 ROA not after: Fri 26 Dec 2025 23:47:55 +0000 asID: 397325 IP address blocks: 23.29.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:95:3d:7b:87:3a:14:98:54:a2:0e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:47:55 2025 GMT Not After : Dec 26 23:47:55 2025 GMT Subject: CN=84ad8a1b-ab44-4d78-baf1-3e85d7819023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:0f:65:10:7f:bd:d8:e6:e3:54:a5:1e:b2: f6:71:63:8b:49:ac:b7:fb:0d:cf:88:52:58:50:25: cc:84:6d:06:12:6a:89:7e:26:9c:aa:5a:52:57:52: 7f:63:8a:33:30:cc:dd:bf:14:cb:e5:df:a3:c4:de: c0:cf:5d:e5:7b:92:51:35:72:dd:98:e0:e1:7f:18: 8e:e8:d6:25:78:0f:7a:86:2e:de:4e:0a:94:64:2a: 40:bb:b7:e0:42:66:dc:27:d5:d7:32:0d:49:12:b5: 1a:ae:73:47:b3:35:f5:ab:18:f5:5b:e3:81:d3:80: cf:38:31:bd:1e:2a:f3:c5:ca:95:58:b7:0a:f1:3b: 75:83:71:aa:51:4f:13:e7:cf:4c:c6:a4:fc:9c:66: e7:cb:cd:39:e1:38:1e:ec:f6:1b:f2:26:7e:07:f9: 51:a5:10:d6:4d:3c:33:fa:1e:a2:fe:5e:a7:9e:66: d9:77:19:68:ae:9e:10:d5:14:8f:83:86:b9:0b:2a: f5:56:72:32:a9:4c:85:92:c2:b7:f8:d3:d6:3f:30: fc:2d:e0:55:51:e1:35:fa:08:25:72:1f:e6:db:73: 53:aa:68:c8:b6:5c:82:53:81:a5:26:a6:0a:20:4b: 7b:75:b7:f4:1d:12:01:17:32:56:b9:f2:24:cf:8c: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:40:CE:00:1F:3D:78:59:9F:8A:CE:C9:92:06:53:B1:34:F0:25:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4d:5b:91:35:19:af:3d:23:64:46:a2:cf:95:82:68:b7:10: 19:dc:77:87:b7:07:15:dc:6d:dc:14:d9:a4:9a:8e:26:f8:49: b0:40:7e:6c:60:25:3c:5b:f3:cb:22:12:2b:28:d9:ca:ac:db: eb:98:b8:37:72:74:37:fd:d3:c6:8d:82:6d:40:ec:c6:3f:51: 77:31:25:fc:aa:73:aa:0f:80:ba:5c:2c:2d:31:52:3a:8e:6d: 9a:ae:84:01:a7:ac:e4:e0:54:14:de:0f:8c:97:f0:3b:25:6a: d8:66:5d:2a:30:95:48:68:1d:d7:76:9c:57:8f:46:1e:d6:8d: 7b:3f:2e:2b:e2:a3:53:2e:6c:32:87:ce:de:da:ba:2a:66:43: f1:70:b6:44:dc:35:6e:72:89:61:83:ba:c0:2a:f6:b7:06:09: 58:8c:56:56:a2:a6:bb:fb:5a:ce:0c:99:ed:26:31:50:26:09: 87:f0:47:e5:f0:7b:63:09:08:55:43:df:39:d3:88:f7:b9:32: f9:d6:61:dd:fb:30:91:55:d6:03:b4:2c:77:f2:04:27:7a:cc: f3:43:28:1e:eb:ea:52:d6:7d:3e:93:78:ba:b7:5c:15:ac:d9: ae:1f:8f:40:f7:55:1a:c5:fa:03:e3:58:73:dd:c5:5f:44:70: 6c:f1:39:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWlT17hzoUmFSiDtQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNDc1NVoXDTI1MTIyNjIzNDc1NVowLzEtMCsGA1UEAxMk ODRhZDhhMWItYWI0NC00ZDc4LWJhZjEtM2U4NWQ3ODE5MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDEPZRB/vdjm41SlHrL2cWOLSay3+w3PiFJY UCXMhG0GEmqJfiacqlpSV1J/Y4ozMMzdvxTL5d+jxN7Az13le5JRNXLdmODhfxiO 6NYleA96hi7eTgqUZCpAu7fgQmbcJ9XXMg1JErUarnNHszX1qxj1W+OB04DPODG9 HirzxcqVWLcK8Tt1g3GqUU8T589MxqT8nGbny8054Tge7PYb8iZ+B/lRpRDWTTwz +h6i/l6nnmbZdxlorp4Q1RSPg4a5Cyr1VnIyqUyFksK3+NPWPzD8LeBVUeE1+ggl ch/m23NTqmjItlyCU4GlJqYKIEt7dbf0HRIBFzJWufIkz4wpWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhAzgAfPXhZn4rOyZIGU7E08CVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYmIzNTcxMjQtM2E4My0z ZmRmLTg0MzQtMTE5Y2ExZWIxYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJNW5E1Ga89I2RGos+Vgmi3EBncd4e3BxXcbdwU2aSajib4SbBAfmxg JTxb88siEiso2cqs2+uYuDdydDf908aNgm1A7MY/UXcxJfyqc6oPgLpcLC0xUjqO bZquhAGnrOTgVBTeD4yX8DslathmXSowlUhoHdd2nFePRh7WjXs/Livio1MubDKH zt7auipmQ/FwtkTcNW5yiWGDusAq9rcGCViMVlaiprv7Ws4Mme0mMVAmCYfwR+Xw e2MJCFVD3znTiPe5MvnWYd37MJFV1gO0LHfyBCd6zPNDKB7r6lLWfT6TeLq3XBWs 2a4fj0D3VRrF+gPjWHPdxV9EcGzxOdk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:59 2025 by rpki-client