$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa File: ef971431-27a3-3019-93d7-a6c64c0587d1.roa (raw, json) Hash identifier: +sJTcI8V+msLBXazY2kEKuCb7jCitrcxnjpJ6SD7LpM= Subject key identifier: C5:C3:69:94:34:7F:77:A5:88:DC:BF:38:C9:A9:64:5C:06:F1:6D:B8 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B5699315E02AEFBD9202AA840 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa Signing time: Sat 27 Sep 2025 22:55:53 +0000 ROA not before: Sat 27 Sep 2025 22:55:53 +0000 ROA not after: Fri 26 Dec 2025 23:55:53 +0000 asID: 397325 IP address blocks: 23.29.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:99:31:5e:02:ae:fb:d9:20:2a:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:55:53 2025 GMT Not After : Dec 26 23:55:53 2025 GMT Subject: CN=db037ffe-6bcd-4427-ace4-dab660eaa94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0c:fc:4b:16:d2:30:e7:a7:6b:4a:50:8a:3b: c0:02:cd:03:ca:9f:68:60:10:21:01:5d:90:25:e7: d4:4c:02:b9:52:69:75:29:14:aa:b2:12:e3:a4:2e: ac:90:af:a6:88:6a:53:06:64:a3:41:e8:1c:97:8a: 56:91:df:a5:7c:f7:81:cf:11:65:b8:a5:c2:d8:4f: 64:f0:24:96:9a:bb:6c:b3:b0:a8:01:b0:64:3c:df: 03:ef:5d:26:45:d8:cb:05:e7:eb:0a:64:c5:52:86: 8b:db:2e:27:35:29:4c:77:c3:f4:64:27:e4:a6:6f: 42:57:7c:6d:63:e3:c5:a6:10:16:f5:89:cf:08:f5: e1:e5:d0:24:bb:c0:99:b6:d7:a1:86:bf:26:fd:f3: ee:10:30:c5:f2:53:d5:36:58:10:d0:0c:5d:0a:17: a1:1b:7c:29:6e:87:0a:17:3f:cc:12:63:cc:b9:67: bb:bd:58:d3:55:86:e3:ef:de:93:e8:56:fc:12:d3: 09:82:dc:5a:0a:4a:47:f6:6c:51:ab:79:1d:91:ec: 27:d9:1c:68:07:43:87:17:a9:f2:69:dd:ba:1e:f3: 78:cd:25:ad:50:63:63:ab:0f:1b:cb:e8:02:a0:71: e1:9c:3f:a3:76:5e:86:11:e7:c6:4f:db:a8:91:8a: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:69:94:34:7F:77:A5:88:DC:BF:38:C9:A9:64:5C:06:F1:6D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:47:3a:d0:2c:d9:7d:5f:da:e6:23:89:b1:2d:3c:04:a8:8b: 8e:fd:d4:12:de:53:69:96:fb:27:42:dd:ea:57:9d:ca:70:20: 75:72:24:93:fe:07:89:5e:75:21:35:1a:db:3c:a5:9d:de:79: 42:db:51:96:0a:8d:09:79:4a:bc:bc:08:40:d2:43:8a:b8:e9: ec:c5:ab:22:ef:c2:ac:e3:68:17:af:3a:b0:bc:a4:53:83:a9: cb:70:7f:60:a0:66:7e:f7:44:89:4e:7d:90:ea:af:d4:46:da: b7:d5:2b:f8:34:45:3e:29:8c:51:52:8e:fb:26:9d:68:29:de: 55:61:2d:5e:f9:81:0f:79:69:c5:72:22:f9:82:f4:c4:c9:df: 8f:fd:fe:e2:56:12:43:a8:9f:b8:f2:15:59:50:31:f2:9c:39: 09:0f:8b:27:66:84:38:56:67:55:74:3a:ae:c0:c3:0f:e1:e7: bc:c9:00:0d:0e:db:32:f3:3f:3a:0a:ab:b4:6b:c0:d4:73:2a: e5:c3:c7:a1:6b:87:43:94:8c:46:01:7c:02:6a:ab:17:f4:27: 39:a8:55:ed:5f:44:03:98:06:3c:48:f2:c2:42:24:53:94:be: 64:31:5f:36:be:fa:0c:d0:15:80:98:c4:93:2e:35:38:24:0b: f2:e6:98:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWmTFeAq772SAqqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNTU1M1oXDTI1MTIyNjIzNTU1M1owLzEtMCsGA1UEAxMk ZGIwMzdmZmUtNmJjZC00NDI3LWFjZTQtZGFiNjYwZWFhOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQz8SxbSMOena0pQijvAAs0Dyp9oYBAhAV2Q JefUTAK5Uml1KRSqshLjpC6skK+miGpTBmSjQegcl4pWkd+lfPeBzxFluKXC2E9k 8CSWmrtss7CoAbBkPN8D710mRdjLBefrCmTFUoaL2y4nNSlMd8P0ZCfkpm9CV3xt Y+PFphAW9YnPCPXh5dAku8CZttehhr8m/fPuEDDF8lPVNlgQ0AxdChehG3wpbocK Fz/MEmPMuWe7vVjTVYbj796T6Fb8EtMJgtxaCkpH9mxRq3kdkewn2RxoB0OHF6ny ad26HvN4zSWtUGNjqw8by+gCoHHhnD+jdl6GEefGT9uokYrDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXDaZQ0f3eliNy/OMmpZFwG8W24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvZWY5NzE0MzEtMjdhMy0z MDE5LTkzZDctYTZjNjRjMDU4N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtHOtAs2X1f2uYjibEtPASoi4791BLeU2mW+ydC3epXncpwIHVyJJP+ B4ledSE1Gts8pZ3eeULbUZYKjQl5Sry8CEDSQ4q46ezFqyLvwqzjaBevOrC8pFOD qctwf2CgZn73RIlOfZDqr9RG2rfVK/g0RT4pjFFSjvsmnWgp3lVhLV75gQ95acVy IvmC9MTJ34/9/uJWEkOon7jyFVlQMfKcOQkPiydmhDhWZ1V0Oq7Aww/h57zJAA0O 2zLzPzoKq7RrwNRzKuXDx6Frh0OUjEYBfAJqqxf0JzmoVe1fRAOYBjxI8sJCJFOU vmQxXza++gzQFYCYxJMuNTgkC/LmmEc= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:00 2025 by rpki-client