$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa File: ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa (raw, json) Hash identifier: f6+tufSGwEuhRBaPgXSqLU2U9nhrjf/1PrwKs2iR61o= Subject key identifier: BD:65:55:93:B1:A8:35:2C:1D:F5:20:DA:77:A9:44:39:29:FF:8B:0E Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584EA7971F5B174BCF48B59BEC00 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397325 IP address blocks: 23.29.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:1f:5b:17:4b:cf:48:b5:9b:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0282036a-8279-4f7a-9b80-7aac212e9965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:2c:a2:9c:c6:7e:76:dd:ca:6f:6f:72:f8: 5b:1e:6e:f5:0d:ba:1a:1e:dd:ee:38:b6:e9:f0:b1: 11:0b:ef:be:37:8e:1d:dd:d7:b0:35:bd:48:2d:9f: 15:8d:22:27:fa:86:49:c4:fa:3b:f8:4d:df:ba:cd: 52:9d:d4:fc:02:48:5a:0d:73:91:97:bf:0b:da:a4: 36:61:07:89:8e:8d:c9:e8:84:da:c7:2a:b5:b0:03: bf:cd:27:18:70:93:a7:16:5e:8e:52:a5:58:53:31: 6b:26:c5:d2:b0:13:27:e0:78:2f:ac:73:15:9b:f8: b6:7c:b5:7e:58:b0:eb:63:2f:6d:c3:d0:e2:fd:a1: 7b:77:98:09:e1:4c:95:06:a5:46:31:40:20:55:2e: a8:97:8d:87:62:69:77:50:74:d1:c1:e1:48:7e:a0: fc:1d:e5:7e:8b:05:53:f6:7b:a2:e4:9e:66:55:47: 94:c0:60:4c:ae:3e:04:66:69:68:1d:1b:09:b1:14: 75:40:16:97:e6:9e:26:e7:c2:99:f9:d1:ec:99:ef: 2a:31:b8:1f:9a:ea:d5:dc:cd:c3:3f:ca:da:30:aa: b4:f4:14:f7:2c:54:4b:98:c9:63:22:9a:f6:b7:ce: 66:85:49:5f:00:e9:e6:fc:1a:2f:62:99:f9:a4:d3: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:65:55:93:B1:A8:35:2C:1D:F5:20:DA:77:A9:44:39:29:FF:8B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:49:dc:bc:64:16:30:dc:c8:29:be:da:65:f9:62:89:9c:2f: 2b:03:43:82:87:bd:40:dd:63:ec:3a:1d:c1:cb:92:ea:fd:f0: 1b:a7:18:1f:d0:d3:0a:ba:c7:fe:2b:2f:75:0a:ec:a7:5c:99: b2:ff:6c:e0:16:7b:93:3d:f5:44:9f:dc:79:22:ba:ee:e1:7b: 26:ca:a0:f6:98:02:df:c0:fd:24:5a:c3:03:28:3d:44:95:27: 08:c2:85:8f:05:d6:de:3a:29:90:4c:7a:29:3e:0f:f8:38:a0: c9:2f:8e:5b:1f:5a:4f:11:db:0d:2f:09:db:bc:ea:70:01:ca: 87:6e:0b:06:1e:b4:b1:98:67:60:60:2c:b3:73:f3:49:f9:bf: 9e:72:b9:74:1b:8c:b2:15:1b:74:cb:a5:60:6b:cd:c3:85:16: c4:e0:a0:1f:83:40:bf:4c:5e:b0:d5:7c:75:58:a2:22:45:ae: 55:08:f0:1c:5b:16:ac:db:a9:1a:ee:8f:60:0b:0d:78:fa:36: e7:15:1b:77:ee:56:cd:8a:51:49:d8:0d:f7:ce:57:b6:7a:fc: cd:1c:5d:82:5f:b0:7a:0f:88:cc:3f:fd:8c:d4:61:4b:c4:91: 7a:03:c3:47:b6:20:73:8f:81:d4:7f:d0:97:e3:02:30:3c:50: 65:45:2a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlx9bF0vPSLWb7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDI4MjAzNmEtODI3OS00ZjdhLTliODAtN2FhYzIxMmU5OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDAsopzGfnbdym9vcvhbHm71DboaHt3uOLbp 8LERC+++N44d3dewNb1ILZ8VjSIn+oZJxPo7+E3fus1SndT8AkhaDXORl78L2qQ2 YQeJjo3J6ITaxyq1sAO/zScYcJOnFl6OUqVYUzFrJsXSsBMn4HgvrHMVm/i2fLV+ WLDrYy9tw9Di/aF7d5gJ4UyVBqVGMUAgVS6ol42HYml3UHTRweFIfqD8HeV+iwVT 9nui5J5mVUeUwGBMrj4EZmloHRsJsRR1QBaX5p4m58KZ+dHsme8qMbgfmurV3M3D P8raMKq09BT3LFRLmMljIpr2t85mhUlfAOnm/BovYpn5pNMsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1lVZOxqDUsHfUg2nepRDkp/4sOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvY2EyNGM5ZGQtZTZjYS0z ZjJiLTkzMzEtOGIwNDc0NDg1Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABJ3LxkFjDcyCm+2mX5YomcLysDQ4KHvUDdY+w6HcHLkur98BunGB/Q 0wq6x/4rL3UK7KdcmbL/bOAWe5M99USf3Hkiuu7heybKoPaYAt/A/SRawwMoPUSV JwjChY8F1t46KZBMeik+D/g4oMkvjlsfWk8R2w0vCdu86nAByoduCwYetLGYZ2Bg LLNz80n5v55yuXQbjLIVG3TLpWBrzcOFFsTgoB+DQL9MXrDVfHVYoiJFrlUI8Bxb FqzbqRruj2ALDXj6NucVG3fuVs2KUUnYDffOV7Z6/M0cXYJfsHoPiMw//YzUYUvE kXoDw0e2IHOPgdR/0JfjAjA8UGVFKi8= -----END CERTIFICATE-----Generated at Thu Aug 20 23:36:30 2026 by rpki-client