$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa File: ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa (raw, json) Hash identifier: 6NxNEV3VJ1YSUrSZ7buiHVRgxTKQpkK96yBqGL2MxFg= Subject key identifier: 6A:33:DC:94:7A:36:9B:B8:97:8C:64:59:34:1E:57:FB:5F:B6:09:C9 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B5691508A136A7D01E617E348 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa Signing time: Sat 27 Sep 2025 22:40:01 +0000 ROA not before: Sat 27 Sep 2025 22:40:01 +0000 ROA not after: Fri 26 Dec 2025 23:40:01 +0000 asID: 397325 IP address blocks: 23.29.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:91:50:8a:13:6a:7d:01:e6:17:e3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:40:01 2025 GMT Not After : Dec 26 23:40:01 2025 GMT Subject: CN=25f1b0de-4385-410a-b169-5253b0e17eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:69:e3:ac:96:81:8a:68:96:97:fb:6e:2d: 44:44:89:2c:95:25:99:ad:cd:c8:37:a7:5a:5e:ef: ca:02:7c:cd:39:5e:e7:53:d9:c4:71:62:e8:b7:00: 57:3f:84:47:6e:83:68:69:2a:ec:6a:d8:4a:b0:48: 22:5d:d1:6b:78:ac:12:d9:b1:93:d8:4e:97:a7:78: 8d:9d:8e:ac:ac:3d:52:31:0b:6a:cc:3a:89:33:e3: 1f:fc:15:56:8c:f9:cb:e0:65:d2:20:1a:0d:42:16: c4:27:a7:77:15:ba:7a:48:53:7b:38:c2:34:73:63: 77:5e:36:1c:d2:ab:35:ef:ed:9d:7f:2b:fd:69:2d: a7:28:b5:f1:f2:be:fb:da:c3:26:a3:07:d0:99:fa: c8:ed:dd:4e:cb:0f:24:b0:86:51:42:59:ed:20:8d: b8:1a:1e:98:2d:30:d8:04:f8:3f:1e:28:e4:86:9f: 03:f7:b8:3f:aa:8b:6d:34:ce:fd:1c:26:f5:1f:c7: 1e:f6:3e:de:be:73:02:fb:99:d7:26:91:9a:01:27: 96:07:cf:6b:63:95:b1:7d:41:81:7a:68:c3:29:74: 78:00:d1:b4:84:f9:1d:8d:54:50:e9:64:5d:9b:f5: ab:68:5d:83:6b:1b:cb:fd:fa:9c:bd:8c:0f:a7:10: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:DC:94:7A:36:9B:B8:97:8C:64:59:34:1E:57:FB:5F:B6:09:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1e:91:39:cb:8f:b9:da:6d:65:90:e9:f9:ef:ad:89:b3:74: 87:57:96:c1:82:34:fb:47:64:80:d9:2e:16:b5:44:30:9f:f4: b5:3d:e8:e1:1f:3b:d6:16:88:c8:87:33:21:b1:a6:89:d3:f0: 55:76:ea:c3:ff:ef:de:c2:5c:bb:14:65:4c:aa:61:44:84:70: e5:3a:66:5c:83:fa:a5:5a:b8:d3:9c:ca:9f:57:db:bf:c5:94: 5a:32:86:bf:31:9b:3e:0d:21:a5:db:c0:7d:1f:59:ed:98:a1: 44:ba:30:df:d6:86:e5:a3:b0:85:aa:88:81:ca:2c:c3:f0:81: c9:6e:fc:b2:24:40:4d:0e:f7:e2:7e:5c:40:17:51:ee:e1:52: 0e:34:c3:51:0f:e9:61:94:a1:30:7f:df:d8:7d:3f:fa:30:ec: 8c:2d:66:39:c2:17:c6:ee:22:03:d0:69:31:4c:1f:3e:a1:f2: 17:7f:37:dc:76:ce:2d:8c:c4:66:75:fd:93:23:76:6b:2f:db: 9c:59:33:9e:55:a8:53:a7:00:99:c5:9a:c0:bb:18:c2:79:bd: 74:3c:da:c2:6b:3e:91:99:47:1c:07:54:8e:68:1a:3d:f9:1f: a5:7e:10:a4:3b:7b:3f:16:a7:a8:67:37:28:5d:b9:61:8c:ec: eb:cd:7e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWkVCKE2p9AeYX40gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNDAwMVoXDTI1MTIyNjIzNDAwMVowLzEtMCsGA1UEAxMk MjVmMWIwZGUtNDM4NS00MTBhLWIxNjktNTI1M2IwZTE3ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMRp46yWgYpolpf7bi1ERIkslSWZrc3IN6da Xu/KAnzNOV7nU9nEcWLotwBXP4RHboNoaSrsathKsEgiXdFreKwS2bGT2E6Xp3iN nY6srD1SMQtqzDqJM+Mf/BVWjPnL4GXSIBoNQhbEJ6d3Fbp6SFN7OMI0c2N3XjYc 0qs17+2dfyv9aS2nKLXx8r772sMmowfQmfrI7d1Oyw8ksIZRQlntII24Gh6YLTDY BPg/Hijkhp8D97g/qottNM79HCb1H8ce9j7evnMC+5nXJpGaASeWB89rY5WxfUGB emjDKXR4ANG0hPkdjVRQ6WRdm/WraF2DaxvL/fqcvYwPpxBv1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoz3JR6Npu4l4xkWTQeV/tftgnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvY2EyNGM5ZGQtZTZjYS0z ZjJiLTkzMzEtOGIwNDc0NDg1Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsekTnLj7nabWWQ6fnvrYmzdIdXlsGCNPtHZIDZLha1RDCf9LU96OEf O9YWiMiHMyGxponT8FV26sP/797CXLsUZUyqYUSEcOU6ZlyD+qVauNOcyp9X27/F lFoyhr8xmz4NIaXbwH0fWe2YoUS6MN/WhuWjsIWqiIHKLMPwgclu/LIkQE0O9+J+ XEAXUe7hUg40w1EP6WGUoTB/39h9P/ow7IwtZjnCF8buIgPQaTFMHz6h8hd/N9x2 zi2MxGZ1/ZMjdmsv25xZM55VqFOnAJnFmsC7GMJ5vXQ82sJrPpGZRxwHVI5oGj35 H6V+EKQ7ez8Wp6hnNyhduWGM7OvNfuI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:59 2025 by rpki-client