$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa File: 1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa (raw, json) Hash identifier: rc9CPer5e2L1agzaj/ePPqcJw4OmobASLhLInKKHZr8= Subject key identifier: FE:64:CA:E2:92:39:87:45:84:52:EA:C0:96:05:03:86:CD:3B:3C:CA Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B56998565A8383BC252AC90E0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa Signing time: Sat 27 Sep 2025 22:56:33 +0000 ROA not before: Sat 27 Sep 2025 22:56:33 +0000 ROA not after: Fri 26 Dec 2025 23:56:33 +0000 asID: 397325 IP address blocks: 23.29.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:99:85:65:a8:38:3b:c2:52:ac:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:56:33 2025 GMT Not After : Dec 26 23:56:33 2025 GMT Subject: CN=97127bab-a068-4a17-91d6-01dbac6666c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:30:66:2e:8e:f4:35:0b:7e:11:c9:3d:25: 3e:3b:65:8b:80:85:ba:14:7f:f6:8d:eb:e3:11:aa: c0:e1:e8:50:59:80:4c:e3:c1:3e:3a:11:64:c5:3f: 42:1a:94:de:75:41:df:bf:a6:91:59:a2:f1:39:fa: 96:15:02:3a:0a:01:f5:c2:5e:77:77:1b:32:3d:b5: b2:1d:c9:2c:5f:38:61:93:32:92:94:d9:6f:b2:5a: 8e:83:4e:b5:bd:db:07:c1:59:f5:c3:48:10:b0:b8: 5c:7f:04:88:5b:d5:57:00:5f:00:27:cc:78:ae:99: 94:37:d9:b9:f9:2d:30:6f:7d:29:b1:f2:b2:23:ad: aa:67:74:11:71:e6:b6:23:c0:78:d2:c4:e1:66:90: 2c:04:a1:13:17:31:26:89:f4:32:0d:64:fd:77:f6: d8:04:0e:80:4b:c5:8f:e8:a3:ca:38:45:d7:c3:24: 67:84:2b:e8:e2:c4:cc:68:00:31:cb:9b:a5:e0:7c: 9e:24:95:65:4b:a2:3f:20:85:0f:bb:17:63:56:00: 3a:13:69:59:e9:f9:5d:8d:09:ff:75:0c:85:e6:ca: 42:71:5a:50:a4:da:6f:8c:63:79:09:22:88:dc:c5: 85:03:c9:a1:04:c5:c5:46:67:ab:8d:1b:e2:67:a0: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:64:CA:E2:92:39:87:45:84:52:EA:C0:96:05:03:86:CD:3B:3C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/1b73d641-bef1-3c16-8a7f-3f7033d70ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b0:6b:28:c8:77:72:5f:80:3b:2f:b9:40:5d:36:9c:7a:15: 35:e1:87:3a:63:03:ff:d5:b0:33:3f:d7:d3:ec:63:85:0a:98: a9:2b:03:88:a9:bb:28:df:c1:7b:24:5c:12:a1:7a:c8:b5:dc: b2:e9:6e:14:be:62:5b:ed:7f:46:dc:02:dc:6e:87:63:41:4a: c3:13:a8:78:99:05:a4:7a:b2:d8:b8:e6:9c:22:37:21:51:2e: 0b:48:1a:af:44:0b:6a:cf:fd:ab:30:6e:69:f0:f6:0c:b3:41: 8d:36:43:ab:f5:43:10:ae:79:90:90:6e:c1:10:a7:40:e2:72: 95:90:2a:d0:f3:c3:06:62:9c:3d:ee:22:cd:a2:17:c7:68:2f: 3e:dd:06:84:ac:bc:3e:eb:30:4b:c8:22:4b:31:f0:ff:b3:5b: 10:45:de:ff:b1:f5:bc:47:5b:78:05:18:b3:ba:d3:3e:e2:63: 47:27:4f:db:df:c1:f3:60:c8:1e:7c:58:ae:f6:08:af:db:f9: ca:eb:65:46:d7:a2:04:32:c2:c2:e1:27:e5:37:9a:d2:d3:71: 0b:5b:50:7d:10:d0:ca:ec:a4:9a:eb:61:2d:8c:bd:9a:16:09: b6:f4:31:91:9c:d8:ba:6a:8b:00:7f:a0:e9:f6:90:76:24:4b: d0:bc:ca:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWmYVlqDg7wlKskOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNTYzM1oXDTI1MTIyNjIzNTYzM1owLzEtMCsGA1UEAxMk OTcxMjdiYWItYTA2OC00YTE3LTkxZDYtMDFkYmFjNjY2NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4cwZi6O9DULfhHJPSU+O2WLgIW6FH/2jevj EarA4ehQWYBM48E+OhFkxT9CGpTedUHfv6aRWaLxOfqWFQI6CgH1wl53dxsyPbWy HcksXzhhkzKSlNlvslqOg061vdsHwVn1w0gQsLhcfwSIW9VXAF8AJ8x4rpmUN9m5 +S0wb30psfKyI62qZ3QRcea2I8B40sThZpAsBKETFzEmifQyDWT9d/bYBA6AS8WP 6KPKOEXXwyRnhCvo4sTMaAAxy5ul4HyeJJVlS6I/IIUPuxdjVgA6E2lZ6fldjQn/ dQyF5spCcVpQpNpvjGN5CSKI3MWFA8mhBMXFRmerjRviZ6B5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5kyuKSOYdFhFLqwJYFA4bNOzzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvMWI3M2Q2NDEtYmVmMS0z YzE2LThhN2YtM2Y3MDMzZDcwYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWwayjId3JfgDsvuUBdNpx6FTXhhzpjA//VsDM/19PsY4UKmKkrA4ip uyjfwXskXBKhesi13LLpbhS+Ylvtf0bcAtxuh2NBSsMTqHiZBaR6sti45pwiNyFR LgtIGq9EC2rP/aswbmnw9gyzQY02Q6v1QxCueZCQbsEQp0DicpWQKtDzwwZinD3u Is2iF8doLz7dBoSsvD7rMEvIIksx8P+zWxBF3v+x9bxHW3gFGLO60z7iY0cnT9vf wfNgyB58WK72CK/b+crrZUbXogQywsLhJ+U3mtLTcQtbUH0Q0MrspJrrYS2MvZoW Cbb0MZGc2LpqiwB/oOn2kHYkS9C8yos= -----END CERTIFICATE-----Generated at Wed Nov 5 12:48:41 2025 by rpki-client