$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c7642c1d-bb51-3584-b5f1-0819db43a325.roa File: c7642c1d-bb51-3584-b5f1-0819db43a325.roa (raw, json) Hash identifier: +uQmZZ/kB9VOVO3S87CkP+WOLZaSWFluN68Vi6354ck= Subject key identifier: 3D:7B:2C:1C:84:3B:F0:9F:EA:96:9D:71:73:0B:47:4E:E9:AE:98:75 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584E31CF07F9E8924BEFD61FD140 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c7642c1d-bb51-3584-b5f1-0819db43a325.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 399487 IP address blocks: 23.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:07:f9:e8:92:4b:ef:d6:1f:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=f3118e4d-0f12-4a0e-a3f7-8fd016ae53a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:7c:96:98:c7:19:87:da:c9:ea:f6:a1:6f: 37:6f:2c:72:6f:7c:72:90:65:9a:b8:3f:cf:0c:62: ce:c6:7c:1a:ed:5a:d0:35:76:94:13:b1:2d:9b:1e: 07:52:10:e7:21:12:ac:2a:99:9e:86:6a:4b:0f:c6: b3:95:3e:44:e4:69:96:ac:73:7f:50:74:00:9b:e4: 16:03:89:ef:7b:97:d0:b8:b3:b9:f0:45:0c:48:93: 6d:8e:e3:76:97:64:88:d0:42:66:97:a6:c8:ce:2d: 35:29:f4:d7:65:78:a8:3a:94:83:83:f9:4b:50:3b: 81:88:2f:9c:6c:bc:31:ca:ca:b0:9b:d4:f9:e0:ce: 52:3d:6f:3f:1d:a1:d2:16:99:c5:e4:19:36:21:3c: 99:b5:12:f3:39:04:eb:99:d4:46:4b:1d:49:0e:e7: 06:e5:24:a5:17:72:a4:b2:2e:d4:13:54:4e:52:5f: 91:48:ca:52:2d:b4:51:5d:bb:86:c4:8c:6f:1b:a1: 7f:44:8c:9e:a2:33:fd:ad:3a:6b:fa:7f:31:00:36: b8:6d:8a:3a:a5:79:79:c1:c4:1d:50:41:4c:d4:f0: 0a:55:96:29:5c:da:bb:91:3c:b8:20:99:50:ed:f1: c3:a1:d1:fa:2d:03:e3:2b:d1:a0:7a:19:9e:b1:b2: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7B:2C:1C:84:3B:F0:9F:EA:96:9D:71:73:0B:47:4E:E9:AE:98:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/c7642c1d-bb51-3584-b5f1-0819db43a325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bc:15:08:37:f8:b1:12:49:2d:c0:fa:46:3c:b5:f4:54:3f: 54:ec:6c:9b:40:b1:6a:5e:34:33:8f:20:17:ba:ab:d3:54:e4: 88:4c:0f:bd:3c:5b:81:0f:90:85:71:e6:2f:c1:01:04:9b:78: c7:63:ff:c9:0d:26:fe:ac:b2:e9:29:7f:36:ab:f5:bd:c4:36: 1b:0b:9e:bd:b4:e5:3f:6f:f5:74:29:6f:0c:56:46:01:85:f2: c3:8c:f1:c8:e6:2d:a5:ad:52:ab:65:48:79:ee:66:34:0f:f1: 68:97:0f:73:09:50:ab:d6:fa:4a:7e:4b:ae:8a:e1:c0:91:16: af:ae:3e:eb:2c:da:ff:9a:f8:38:eb:53:12:17:86:79:37:cf: c2:ba:1e:4e:0a:ac:ed:6a:15:f1:14:d8:61:6f:0b:53:ee:d6: ec:f5:7d:49:3c:da:67:4b:46:4c:9f:63:7c:1f:e5:03:bd:02: a0:51:ef:81:96:dd:70:d8:29:ac:fc:4d:cf:54:3a:ff:15:5b: d2:1f:95:da:96:86:a5:4e:08:36:81:26:d8:59:d6:69:47:1a: e9:3f:32:7b:94:44:8e:ea:e4:9e:c4:09:bb:21:12:3a:85:c3: 30:7d:fd:4b:0c:08:d3:b1:59:b0:6b:2b:11:43:2a:d4:20:61: 48:ae:fe:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzwf56JJL79Yf0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZjMxMThlNGQtMGYxMi00YTBlLWEzZjctOGZkMDE2YWU1M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzx8lpjHGYfayer2oW83byxyb3xykGWauD/P DGLOxnwa7VrQNXaUE7Etmx4HUhDnIRKsKpmehmpLD8azlT5E5GmWrHN/UHQAm+QW A4nve5fQuLO58EUMSJNtjuN2l2SI0EJml6bIzi01KfTXZXioOpSDg/lLUDuBiC+c bLwxysqwm9T54M5SPW8/HaHSFpnF5Bk2ITyZtRLzOQTrmdRGSx1JDucG5SSlF3Kk si7UE1ROUl+RSMpSLbRRXbuGxIxvG6F/RIyeojP9rTpr+n8xADa4bYo6pXl5wcQd UEFM1PAKVZYpXNq7kTy4IJlQ7fHDodH6LQPjK9GgehmesbKLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD17LByEO/Cf6padcXMLR07prph1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYzc2NDJjMWQtYmI1MS0z NTg0LWI1ZjEtMDgxOWRiNDNhMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO8FQg3+LESSS3A+kY8tfRUP1TsbJtAsWpeNDOPIBe6q9NU5IhMD708 W4EPkIVx5i/BAQSbeMdj/8kNJv6ssukpfzar9b3ENhsLnr205T9v9XQpbwxWRgGF 8sOM8cjmLaWtUqtlSHnuZjQP8WiXD3MJUKvW+kp+S66K4cCRFq+uPuss2v+a+Djr UxIXhnk3z8K6Hk4KrO1qFfEU2GFvC1Pu1uz1fUk82mdLRkyfY3wf5QO9AqBR74GW 3XDYKaz8Tc9UOv8VW9IfldqWhqVOCDaBJthZ1mlHGuk/MnuURI7q5J7ECbshEjqF wzB9/UsMCNOxWbBrKxFDKtQgYUiu/lQ= -----END CERTIFICATE-----Generated at Mon Jul 6 20:12:54 2026 by rpki-client