$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a06e2d4f-22e7-3f8b-a1c6-b9dc31dde977.roa File: a06e2d4f-22e7-3f8b-a1c6-b9dc31dde977.roa (raw, json) Hash identifier: Aq1PBePTHGypXa9Thh1VFa6uLHtp6jNxztisPnFMp0I= Subject key identifier: 3D:BA:BB:3A:07:06:F5:44:56:DF:5E:2B:E7:D3:4F:41:80:2C:56:F3 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F497372C56ECF42B7A468A4A0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a06e2d4f-22e7-3f8b-a1c6-b9dc31dde977.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399110 IP address blocks: 23.29.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:72:c5:6e:cf:42:b7:a4:68:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6d67185-2ceb-4a8b-967f-daa1f164fc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:a9:09:1e:2e:8f:24:67:78:77:0b:ee:6f: b1:b8:6b:51:f0:6c:92:b6:9c:26:c7:cb:16:05:47: 44:56:e9:ea:1f:ba:87:50:d1:e8:f7:1a:74:fb:84: 40:2e:33:5e:7e:5b:f2:4c:5f:71:12:4f:12:7b:a9: 20:3f:23:64:16:9c:dd:12:f4:8d:c3:f5:e0:40:fd: 5f:ef:ce:87:08:ac:31:3f:46:52:4a:eb:b5:5f:e2: 73:9d:ce:c7:c9:7e:39:57:8e:7f:f1:ca:10:13:d0: c2:41:66:4c:79:4e:4b:44:58:a1:e1:41:a9:35:00: b1:72:7e:b4:c8:5b:eb:7f:fe:b7:d8:32:25:5a:b4: 04:81:0a:59:0b:99:6a:4a:6e:68:65:1e:10:b0:92: 4d:f2:85:57:be:cd:cb:bc:f6:55:53:a0:c4:ef:29: 61:a9:d3:46:b6:12:20:08:29:1e:0d:5a:61:4b:98: db:ed:d0:79:c0:5e:97:68:c7:72:c2:ab:a4:fa:11: ca:d2:2f:5f:1b:db:2f:8f:0e:cb:27:c4:97:a1:8b: d3:e5:bb:12:93:e6:4e:2b:a5:12:e2:26:43:93:a4: 2c:37:ba:14:19:7d:4c:18:b2:e8:a5:77:5f:29:31: 34:08:69:8d:49:95:d2:94:99:91:d6:a2:64:3f:fd: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BA:BB:3A:07:06:F5:44:56:DF:5E:2B:E7:D3:4F:41:80:2C:56:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a06e2d4f-22e7-3f8b-a1c6-b9dc31dde977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:08:17:ef:86:96:de:ed:11:c3:9f:54:da:19:7c:f9:50:cb: 18:a6:3f:f9:e5:cb:04:b7:d5:9d:be:fa:d8:b9:71:76:3a:b4: b8:ac:2f:ef:d3:8c:ab:90:be:d0:93:71:38:bd:3a:66:c8:4c: 40:08:55:d4:37:15:bd:65:f4:a9:16:7b:f8:43:03:c5:5c:18: 9c:9b:39:02:81:72:ee:e5:a3:57:33:7c:83:e2:d1:98:8c:77: 11:ce:ec:b9:db:07:d7:3f:dc:6a:3e:b0:54:ba:69:cc:34:b2: a1:01:f4:f4:40:87:fe:b4:c1:45:6e:b4:40:5e:00:92:2d:d8: d9:af:30:17:e8:5a:be:34:f8:c0:e0:aa:d4:bb:e2:05:77:3e: 8e:f2:0e:73:58:cd:29:2a:9d:bb:62:1c:14:23:c1:bb:9b:71: f2:4e:0e:42:f0:bf:c7:6b:4e:d4:3a:1d:f9:47:ed:98:18:28: d5:f2:4c:00:7f:00:b4:83:ab:b1:b8:45:17:a4:f6:b6:ef:4c: a3:9c:1e:61:4a:ae:83:c2:03:7f:bf:c1:c5:71:b8:ea:32:61: b3:a1:3f:7d:61:28:12:e6:9e:16:e6:e8:41:fb:15:b5:61:87: 96:d2:e8:b1:10:d6:87:17:9b:b9:98:38:ac:9b:04:9d:4d:2e: 2f:64:88:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3LFbs9Ct6RopKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZkNjcxODUtMmNlYi00YThiLTk2N2YtZGFhMWYxNjRmYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgapCR4ujyRneHcL7m+xuGtR8GyStpwmx8sW BUdEVunqH7qHUNHo9xp0+4RALjNeflvyTF9xEk8Se6kgPyNkFpzdEvSNw/XgQP1f 786HCKwxP0ZSSuu1X+Jznc7HyX45V45/8coQE9DCQWZMeU5LRFih4UGpNQCxcn60 yFvrf/632DIlWrQEgQpZC5lqSm5oZR4QsJJN8oVXvs3LvPZVU6DE7ylhqdNGthIg CCkeDVphS5jb7dB5wF6XaMdywquk+hHK0i9fG9svjw7LJ8SXoYvT5bsSk+ZOK6US 4iZDk6QsN7oUGX1MGLLopXdfKTE0CGmNSZXSlJmR1qJkP/2n2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD26uzoHBvVEVt9eK+fTT0GALFbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYTA2ZTJkNGYtMjJlNy0z ZjhiLWExYzYtYjlkYzMxZGRlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsIF++Glt7tEcOfVNoZfPlQyximP/nlywS31Z2++ti5cXY6tLisL+/T jKuQvtCTcTi9OmbITEAIVdQ3Fb1l9KkWe/hDA8VcGJybOQKBcu7lo1czfIPi0ZiM dxHO7LnbB9c/3Go+sFS6acw0sqEB9PRAh/60wUVutEBeAJIt2NmvMBfoWr40+MDg qtS74gV3Po7yDnNYzSkqnbtiHBQjwbubcfJODkLwv8drTtQ6HflH7ZgYKNXyTAB/ ALSDq7G4RRek9rbvTKOcHmFKroPCA3+/wcVxuOoyYbOhP31hKBLmnhbm6EH7FbVh h5bS6LEQ1ocXm7mYOKybBJ1NLi9kiJE= -----END CERTIFICATE-----Generated at Sat Oct 10 23:18:59 2026 by rpki-client