$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/d9f0f6b3-8475-3f95-a58d-90af95bafea8.roa File: d9f0f6b3-8475-3f95-a58d-90af95bafea8.roa (raw, json) Hash identifier: Dhe5EpeTDn17//WR0PygYw6xaO8Zn8Z1siUy6tO0ZMA= Subject key identifier: 29:46:2A:C6:05:93:BE:C3:57:65:66:4F:C5:10:51:AE:ED:6E:CA:E3 Certificate issuer: /CN=729e94ba-1bc1-4cb8-93c9-7fad762ef687 Certificate serial: 010D0C9F4328584CBCB4120F6A4BEEDEFFD86200 Authority key identifier: 1B:3C:C5:65:CA:F1:23:4B:AB:1C:B3:72:CD:AA:41:63:82:FC:94:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/d9f0f6b3-8475-3f95-a58d-90af95bafea8.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 401233 IP address blocks: 23.138.200.0/24 maxlen: 24 128.254.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bc:b4:12:0f:6a:4b:ee:de:ff:d8:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729e94ba-1bc1-4cb8-93c9-7fad762ef687 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=3e2b85c8-dede-4964-8cad-1e1b6c3e46fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0d:62:0a:b5:e3:cd:ab:21:dc:7e:dc:8d:fd: 6c:d6:23:82:a3:1b:45:ba:63:4b:1f:fd:a3:cb:e3: 4e:2e:1b:ee:47:31:e2:df:65:f6:f3:6c:6f:f8:2a: e2:1f:e9:81:b3:b3:2e:d9:b3:7e:32:98:01:da:ab: 1d:bc:66:62:5d:1b:07:08:82:d6:d4:11:4e:01:18: 5d:08:1a:ae:dc:94:fa:98:b7:d3:78:dd:1e:09:8c: 12:41:1c:b0:99:b1:20:d1:6c:d9:26:54:aa:25:57: 37:62:53:3b:6b:9b:bb:0f:c8:0c:ff:03:97:50:ce: 23:6a:cf:6d:8b:d6:3c:35:ed:c8:02:bd:4c:34:96: bb:23:6b:e1:cc:ba:c7:cf:23:d0:de:45:ff:2c:cc: d3:0a:47:45:80:8d:53:e8:bd:50:f8:70:d6:61:15: af:ee:63:30:b4:3a:73:70:d8:58:8e:b9:27:0f:6c: b1:77:df:6a:27:a9:81:8d:bb:ba:eb:b6:ff:84:9c: f5:ec:ed:14:3f:f5:8b:71:ec:f6:ed:cc:ba:a9:2c: 37:14:99:d7:33:7b:46:ff:f4:09:55:95:27:49:74: 35:fc:44:64:37:a7:15:f1:7a:da:30:c4:69:f7:ba: 7e:00:15:bc:d9:b3:df:ee:2b:17:df:7d:c5:b7:19: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:46:2A:C6:05:93:BE:C3:57:65:66:4F:C5:10:51:AE:ED:6E:CA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/d9f0f6b3-8475-3f95-a58d-90af95bafea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.crl X509v3 Authority Key Identifier: keyid:1B:3C:C5:65:CA:F1:23:4B:AB:1C:B3:72:CD:AA:41:63:82:FC:94:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer sbgp-ipAddrBlock: critical IPv4: 23.138.200.0/24 128.254.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a8:3d:bf:72:b3:de:4b:7c:21:ba:8b:66:26:c1:99:f3:e3: a8:37:08:7e:0e:9f:ea:c4:7b:f1:2b:e9:f1:67:b8:c9:99:72: a3:36:54:86:4e:cf:21:01:74:5e:f5:f5:36:3e:ce:37:ba:17: 1b:b6:6c:6a:fd:f0:c2:65:69:1b:9b:88:a2:23:39:3d:9f:0f: c4:a9:6a:82:60:cc:4d:26:55:6e:09:fe:e7:92:4c:32:05:90: 4d:f5:0b:55:f3:3c:f2:26:8b:f5:a1:24:56:e3:39:bd:ee:2c: 8e:71:fa:4c:56:ea:2f:ab:0f:53:32:72:a3:0b:44:50:d8:5c: 1a:0f:88:f2:b5:c9:5f:4d:f5:22:4b:ab:21:85:c9:63:61:8d: 8f:82:e6:79:d2:c5:ab:b6:75:a2:8b:3a:ff:68:fd:70:14:1d: d0:4d:8f:61:6d:1c:d9:6f:30:c2:89:a3:1f:3b:ad:de:5f:dc: 7d:e3:b6:32:90:e8:20:9c:b3:4f:86:c4:94:44:53:f2:ab:d6: e2:51:8b:b7:08:e8:0f:da:4a:34:63:13:e5:13:d7:4b:cb:62: dd:07:04:ef:c4:09:6d:17:3a:59:a3:4f:72:33:a5:8e:cb:9f: a9:26:30:b2:af:9e:ea:e8:e9:60:ec:c2:a5:17:26:e5:96:e0: 97:93:ce:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEy8tBIPakvu3v/YYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzI5ZTk0YmEtMWJjMS00Y2I4LTkzYzktN2ZhZDc2MmVm Njg3MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk M2UyYjg1YzgtZGVkZS00OTY0LThjYWQtMWUxYjZjM2U0NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA1iCrXjzash3H7cjf1s1iOCoxtFumNLH/2j y+NOLhvuRzHi32X282xv+CriH+mBs7Mu2bN+MpgB2qsdvGZiXRsHCILW1BFOARhd CBqu3JT6mLfTeN0eCYwSQRywmbEg0WzZJlSqJVc3YlM7a5u7D8gM/wOXUM4jas9t i9Y8Ne3IAr1MNJa7I2vhzLrHzyPQ3kX/LMzTCkdFgI1T6L1Q+HDWYRWv7mMwtDpz cNhYjrknD2yxd99qJ6mBjbu667b/hJz17O0UP/WLcez27cy6qSw3FJnXM3tG//QJ VZUnSXQ1/ERkN6cV8XraMMRp97p+ABW82bPf7isX333FtxlqRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFClGKsYFk77DV2VmT8UQUa7tbsrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83Mjll OTRiYS0xYmMxLTRjYjgtOTNjOS03ZmFkNzYyZWY2ODcvZDlmMGY2YjMtODQ3NS0z Zjk1LWE1OGQtOTBhZjk1YmFmZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzI5ZTk0YmEtMWJjMS00Y2I4LTkz YzktN2ZhZDc2MmVmNjg3LzcyOWU5NGJhLTFiYzEtNGNiOC05M2M5LTdmYWQ3NjJl ZjY4Ny5jcmwwHwYDVR0jBBgwFoAUGzzFZcrxI0urHLNyzapBY4L8lKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MjllOTRiYS0xYmMxLTRjYjgtOTNjOS03ZmFk NzYyZWY2ODcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4rIAwQC gP60MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC2oPb9ys95LfCG6i2YmwZnz46g3CH4On+rEe/Er6fFnuMmZ cqM2VIZOzyEBdF719TY+zje6Fxu2bGr98MJlaRubiKIjOT2fD8SpaoJgzE0mVW4J /ueSTDIFkE31C1XzPPImi/WhJFbjOb3uLI5x+kxW6i+rD1MycqMLRFDYXBoPiPK1 yV9N9SJLqyGFyWNhjY+C5nnSxau2daKLOv9o/XAUHdBNj2FtHNlvMMKJox87rd5f 3H3jtjKQ6CCcs0+GxJREU/Kr1uJRi7cI6A/aSjRjE+UT10vLYt0HBO/ECW0XOlmj T3IzpY7Ln6kmMLKvnuro6WDswqUXJuWW4JeTztQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:29:03 2026 by rpki-client