$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c7642c1d-bb51-3584-b5f1-0819db43a325.roa File: c7642c1d-bb51-3584-b5f1-0819db43a325.roa (raw, json) Hash identifier: 2Abn83XlDtyPYSHHcRlN/Hvl3XedoYpxUOQOSUxkluU= Subject key identifier: 0A:26:97:96:26:B3:B5:53:90:CF:A6:99:36:F0:24:B8:0A:EF:F0:49 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584D5243444D86E2CCE8BBB2B240 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c7642c1d-bb51-3584-b5f1-0819db43a325.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 399487 IP address blocks: 23.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:44:4d:86:e2:cc:e8:bb:b2:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=0982c3a3-d6ba-4ac3-a5f8-9345c3eabaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:57:e3:9c:df:ff:c4:81:97:c6:32:2a:14: 9e:1b:e6:4a:0f:6c:82:60:64:64:13:ab:34:80:12: 53:3f:bc:38:b5:23:07:89:11:49:8c:fe:c3:9b:c0: f0:8e:63:7f:49:37:58:db:52:d7:2f:09:b4:bd:8f: 0d:09:33:29:2a:0f:9b:ce:58:a9:79:7d:3c:cb:c5: 0b:23:2c:3c:7c:9b:36:d6:94:19:91:27:0f:dc:68: 78:d5:af:81:00:1a:4f:12:89:c4:ac:46:62:76:62: ac:79:b3:2b:f8:a8:6e:45:3b:1c:e9:6b:fe:fa:43: 06:23:43:83:b9:8d:97:2a:89:16:de:62:26:b1:44: 89:55:27:40:e1:34:73:42:43:d5:04:e9:4d:96:80: 5a:f1:9b:ac:be:37:f1:f6:5f:17:05:db:b2:e6:98: 66:bb:cc:ab:a4:f7:9d:6c:6c:51:a5:a8:9d:62:0c: 98:1b:f0:1b:81:45:13:d0:30:79:fe:dc:85:10:0c: bf:36:b4:d2:e2:b1:37:76:14:1d:8e:7c:39:ae:1c: 36:92:30:31:03:30:9d:8b:8e:e2:3b:37:d6:b6:07: 02:dd:c5:e5:9e:cd:d5:d7:1b:90:5b:f3:7b:e1:2d: 9c:4f:f7:be:12:99:b2:b3:30:89:1a:24:3a:2c:72: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:26:97:96:26:B3:B5:53:90:CF:A6:99:36:F0:24:B8:0A:EF:F0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c7642c1d-bb51-3584-b5f1-0819db43a325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:69:70:6b:2d:50:49:fb:1a:de:09:a9:80:b7:2b:1f:5b:f1: 9c:bd:0c:0e:56:68:c7:37:50:69:d3:c4:37:eb:83:71:d1:f8: 86:0f:5c:01:7a:7d:74:3a:c9:72:a1:77:5d:8f:a6:67:68:88: 13:a4:3a:ad:1d:99:e4:5f:02:5d:e9:d3:74:87:e3:fd:6d:fb: 52:9a:99:3a:f2:cc:70:bb:7b:37:b8:6d:d3:4d:6a:e3:8b:70: e9:f5:bb:c1:fd:e2:25:2f:73:11:de:dd:6a:07:3e:ea:68:7d: 38:e9:04:fb:63:e0:3c:30:f5:72:a4:96:f0:32:bf:ef:1c:c3: ee:1a:83:ce:b7:f1:87:0a:9b:df:c8:03:18:82:d4:27:93:d3: d1:c1:1e:1f:b6:4b:6d:4e:33:72:f1:d8:04:dc:7b:7f:d9:d0: 74:7c:46:4d:5c:f2:f7:a5:ed:48:37:af:e1:73:d9:f6:d5:c6: 51:76:38:73:b4:8a:8b:56:5d:e9:d5:04:fb:af:7e:c2:28:df: 0c:d7:fb:83:f6:be:3b:94:65:74:15:78:1d:6a:77:d0:1e:b0: a2:50:72:dd:1a:91:c0:54:3a:a7:37:e5:6d:04:52:92:c3:1d: 29:c1:8c:fe:c3:aa:8f:26:65:b5:88:d8:79:e6:81:47:21:9e: 45:61:e7:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0RNhuLM6LuyskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MDk4MmMzYTMtZDZiYS00YWMzLWE1ZjgtOTM0NWMzZWFiYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/xX45zf/8SBl8YyKhSeG+ZKD2yCYGRkE6s0 gBJTP7w4tSMHiRFJjP7Dm8DwjmN/STdY21LXLwm0vY8NCTMpKg+bzlipeX08y8UL Iyw8fJs21pQZkScP3Gh41a+BABpPEonErEZidmKsebMr+KhuRTsc6Wv++kMGI0OD uY2XKokW3mImsUSJVSdA4TRzQkPVBOlNloBa8Zusvjfx9l8XBduy5phmu8yrpPed bGxRpaidYgyYG/AbgUUT0DB5/tyFEAy/NrTS4rE3dhQdjnw5rhw2kjAxAzCdi47i OzfWtgcC3cXlns3V1xuQW/N74S2cT/e+EpmyszCJGiQ6LHKbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoml5Yms7VTkM+mmTbwJLgK7/BJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYzc2NDJjMWQtYmI1MS0z NTg0LWI1ZjEtMDgxOWRiNDNhMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVpcGstUEn7Gt4JqYC3Kx9b8Zy9DA5WaMc3UGnTxDfrg3HR+IYPXAF6 fXQ6yXKhd12PpmdoiBOkOq0dmeRfAl3p03SH4/1t+1KamTryzHC7eze4bdNNauOL cOn1u8H94iUvcxHe3WoHPupofTjpBPtj4Dww9XKklvAyv+8cw+4ag8638YcKm9/I AxiC1CeT09HBHh+2S21OM3Lx2ATce3/Z0HR8Rk1c8vel7Ug3r+Fz2fbVxlF2OHO0 iotWXenVBPuvfsIo3wzX+4P2vjuUZXQVeB1qd9AesKJQct0akcBUOqc35W0EUpLD HSnBjP7Dqo8mZbWI2HnmgUchnkVh57I= -----END CERTIFICATE-----Generated at Tue Apr 7 13:29:34 2026 by rpki-client