$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa File: 0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa (raw, json) Hash identifier: 6s3vOoAaDlI9Z8nk8/HzhuW7V31mHXgehD6RpPP2KHk= Subject key identifier: FF:79:50:B6:F8:0C:E5:D8:66:CA:2A:FB:BA:F4:7F:88:59:BC:EB:D4 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B56770938BD5D7B1A65A6B3C0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa Signing time: Sat 27 Sep 2025 21:47:04 +0000 ROA not before: Sat 27 Sep 2025 21:47:04 +0000 ROA not after: Fri 26 Dec 2025 22:47:04 +0000 asID: 400615 IP address blocks: 23.29.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:77:09:38:bd:5d:7b:1a:65:a6:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 21:47:04 2025 GMT Not After : Dec 26 22:47:04 2025 GMT Subject: CN=784e56eb-08cd-486e-8bdd-154d5c727f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:41:9d:67:9d:c0:7e:26:88:5a:f2:b9:33: ea:ce:b2:57:9d:4b:06:eb:97:48:9e:0e:f9:e6:06: d3:23:3b:92:08:4c:8b:66:3f:f6:88:1c:64:35:47: 6f:07:ea:c0:e3:72:55:7f:82:0a:dc:4d:d0:46:36: c4:13:ee:51:d2:ca:10:8b:05:4b:07:d0:f5:62:7a: d5:79:15:99:eb:6e:f2:17:f8:72:03:1e:2a:97:d6: e5:35:69:2d:b9:af:db:71:5e:7f:e3:e1:15:0e:95: da:44:fb:86:b6:72:da:e1:6b:6c:04:f2:2b:d7:a8: 3d:30:4e:d1:39:f2:78:16:3a:bd:01:8c:fe:5b:4e: 94:8f:10:72:42:01:54:b1:92:79:7a:b8:8d:d8:7a: 0a:bb:99:de:c4:28:4c:d0:f6:3b:4c:09:16:c0:0c: e7:21:f1:d2:9b:a4:27:d1:37:cb:d0:85:0a:8f:42: 44:cb:01:60:35:6b:68:44:dd:0c:96:f3:86:4d:c6: 7e:7c:ae:aa:ab:0a:52:c2:47:4b:b8:49:fd:3a:65: 2d:00:aa:ab:7b:e0:9c:ad:64:fb:6d:56:a6:5c:63: 29:c7:85:49:10:f8:82:60:24:6e:56:0a:74:58:6e: a7:0d:cc:5f:41:a8:0e:77:06:32:1d:42:5f:a1:b0: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:50:B6:F8:0C:E5:D8:66:CA:2A:FB:BA:F4:7F:88:59:BC:EB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/0c0c0a1a-6201-3ae9-b434-ca59f4045768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1f:bf:bd:67:31:98:ac:80:bb:b7:33:29:17:14:06:37:a3: 14:ef:cf:24:b1:b8:e1:b0:55:ff:18:e8:7c:65:08:58:58:c6: 12:9c:a1:c8:14:df:e0:2a:92:c3:19:32:67:a3:de:cc:c0:bb: 06:ac:a3:b9:95:e4:37:85:21:17:fd:1e:08:a8:06:46:c2:aa: f1:d5:f2:4a:a0:39:9d:f1:60:67:dd:2c:ec:de:82:88:53:d5: 81:29:7e:78:b3:e8:89:3d:fc:f4:6d:43:ac:96:60:98:9f:3c: d9:35:66:79:a0:14:9c:2c:f2:49:1e:bd:9f:e1:62:5d:c3:27: 2b:c0:12:89:6f:28:47:27:30:af:25:21:2b:98:98:00:e7:90: 23:6d:23:6a:60:58:1e:3f:ac:60:58:91:3a:bd:7d:2d:8e:77: 7e:e1:62:9f:c4:e9:79:3d:9a:39:13:2d:c8:d1:57:6e:85:5a: 27:bc:57:7a:f0:44:25:1d:a1:ef:40:1b:d9:27:61:3d:8b:fc: 35:d1:63:b8:b6:9d:31:a2:5b:8f:6b:b0:8b:6e:ba:02:d5:d8: 29:20:53:88:cc:8b:2d:a5:d0:e0:ab:24:9c:84:b3:73:69:16: 17:fd:da:5a:06:cc:e0:16:ea:6e:9b:ba:eb:d9:09:10:bf:42: 90:bf:4b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWdwk4vV17GmWms8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIxNDcwNFoXDTI1MTIyNjIyNDcwNFowLzEtMCsGA1UEAxMk Nzg0ZTU2ZWItMDhjZC00ODZlLThiZGQtMTU0ZDVjNzI3ZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs5BnWedwH4miFryuTPqzrJXnUsG65dIng75 5gbTIzuSCEyLZj/2iBxkNUdvB+rA43JVf4IK3E3QRjbEE+5R0soQiwVLB9D1YnrV eRWZ627yF/hyAx4ql9blNWktua/bcV5/4+EVDpXaRPuGtnLa4WtsBPIr16g9ME7R OfJ4Fjq9AYz+W06UjxByQgFUsZJ5eriN2HoKu5nexChM0PY7TAkWwAznIfHSm6Qn 0TfL0IUKj0JEywFgNWtoRN0MlvOGTcZ+fK6qqwpSwkdLuEn9OmUtAKqre+CcrWT7 bVamXGMpx4VJEPiCYCRuVgp0WG6nDcxfQagOdwYyHUJfobCPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP95ULb4DOXYZsoq+7r0f4hZvOvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMGMwYzBhMWEtNjIwMS0z YWU5LWI0MzQtY2E1OWY0MDQ1NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx03MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMfv71nMZisgLu3MykXFAY3oxTvzySxuOGwVf8Y6HxlCFhYxhKcocgU 3+AqksMZMmej3szAuwaso7mV5DeFIRf9HgioBkbCqvHV8kqgOZ3xYGfdLOzegohT 1YEpfniz6Ik9/PRtQ6yWYJifPNk1ZnmgFJws8kkevZ/hYl3DJyvAEolvKEcnMK8l ISuYmADnkCNtI2pgWB4/rGBYkTq9fS2Od37hYp/E6Xk9mjkTLcjRV26FWie8V3rw RCUdoe9AG9knYT2L/DXRY7i2nTGiW49rsItuugLV2CkgU4jMiy2l0OCrJJyEs3Np Fhf92loGzOAW6m6buuvZCRC/QpC/S3c= -----END CERTIFICATE-----Generated at Wed Nov 5 16:00:24 2025 by rpki-client