$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa File: 40b54338-aa55-3501-b2e0-f0377f1458e5.roa (raw, json) Hash identifier: 7iOMKPA42HDoeHoXtubGpYGvYL9me0u2ECBfhHBcLQ0= Subject key identifier: 1F:03:2C:6B:45:41:77:C8:9D:36:70:12:14:06:D5:9A:39:EA:A7:24 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584DF640AE664A19C51204246980 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 397325 IP address blocks: 23.29.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:ae:66:4a:19:c5:12:04:24:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=1ccc580e-31cc-403e-9239-40080da66e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:0c:da:e6:bb:bd:1f:2e:23:82:98:88:15: 2f:41:0a:65:bf:19:8e:c4:97:b0:70:20:e8:5b:5d: d7:8d:9d:e5:86:35:75:bf:61:32:c7:48:e1:77:05: 86:9c:63:8e:91:5c:a6:e2:0a:cb:15:e6:af:52:25: e9:0b:03:ba:b3:b5:0f:54:21:ff:a2:36:25:7b:05: 4f:04:f7:b7:a0:f0:87:b5:97:bd:1e:e7:90:3f:da: 6f:57:a5:9d:a3:bf:71:17:9e:32:8f:c5:ba:00:84: 51:5e:60:a4:fd:6f:a8:88:a7:c4:8d:e5:ff:b4:ac: f9:a4:c4:8d:28:f4:10:f2:4e:78:6a:76:b5:59:d7: 56:ad:19:4e:e9:fc:c2:a8:36:c6:1f:ad:8c:f9:e1: 9e:69:5e:a8:63:3f:ac:38:3e:6e:d0:38:1e:b7:3d: 3c:67:d6:ba:d5:0b:ae:83:0d:92:3f:32:72:02:80: 59:0e:4c:29:75:4d:52:57:ab:77:ed:a9:62:18:e8: b6:03:55:f7:78:5b:b7:a5:77:92:de:83:04:94:4e: ec:88:24:47:bc:11:cc:2f:f3:85:c3:da:48:2a:2b: 6f:52:06:5b:31:5c:65:2f:db:c8:a6:41:16:e8:ca: c6:d3:01:80:f7:ba:2f:f1:98:d2:12:ac:16:3f:ea: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:03:2C:6B:45:41:77:C8:9D:36:70:12:14:06:D5:9A:39:EA:A7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:11:78:e8:30:0e:aa:2b:72:c8:fa:60:8b:0e:b1:40:c6:67: 0b:73:a1:ac:9e:2a:1e:07:5b:4d:4d:d4:32:25:bd:ab:53:79: e2:7d:5a:2b:9d:cb:e4:44:a3:52:d6:74:0f:d1:73:96:89:ac: ce:37:ba:8d:0a:98:e1:ef:93:2e:94:3a:ea:e4:0c:a5:19:3a: 37:46:76:c4:03:61:75:56:4a:05:03:29:50:10:d2:7e:c6:65: 26:98:3a:7e:e0:72:57:15:37:f9:3c:8e:14:3b:be:cb:fb:f6: a5:a8:95:d0:7e:57:df:6d:c0:1f:aa:77:ec:34:4e:65:46:7a: 32:ae:12:51:35:da:f3:38:1b:e7:63:cb:72:39:78:5f:2c:e0: 43:8b:06:32:21:ce:62:39:fb:71:18:05:23:7c:a2:6d:9c:2f: 9d:43:0c:91:15:e1:bb:25:3d:b3:c7:22:82:f0:3b:5e:70:7b: 78:dc:aa:14:cf:69:e1:23:e5:97:b1:f6:92:13:83:50:27:66: 80:21:19:72:34:ef:4d:bc:8d:2e:36:db:f7:36:83:34:6f:53: c5:29:b5:09:00:d7:5a:14:ab:0d:b2:3b:b4:c5:17:f7:7b:39: da:bb:cf:5e:23:d6:bb:ef:6c:6d:c7:71:41:fe:18:44:9a:78: b9:e2:7b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QK5mShnFEgQkaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk MWNjYzU4MGUtMzFjYy00MDNlLTkyMzktNDAwODBkYTY2ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJMM2ua7vR8uI4KYiBUvQQplvxmOxJewcCDo W13XjZ3lhjV1v2Eyx0jhdwWGnGOOkVym4grLFeavUiXpCwO6s7UPVCH/ojYlewVP BPe3oPCHtZe9HueQP9pvV6Wdo79xF54yj8W6AIRRXmCk/W+oiKfEjeX/tKz5pMSN KPQQ8k54ana1WddWrRlO6fzCqDbGH62M+eGeaV6oYz+sOD5u0Dgetz08Z9a61Quu gw2SPzJyAoBZDkwpdU1SV6t37aliGOi2A1X3eFu3pXeS3oMElE7siCRHvBHML/OF w9pIKitvUgZbMVxlL9vIpkEW6MrG0wGA97ov8ZjSEqwWP+q5DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8DLGtFQXfInTZwEhQG1Zo56qckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvNDBiNTQzMzgtYWE1NS0z NTAxLWIyZTAtZjAzNzdmMTQ1OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIReOgwDqorcsj6YIsOsUDGZwtzoayeKh4HW01N1DIlvatTeeJ9Wiud y+REo1LWdA/Rc5aJrM43uo0KmOHvky6UOurkDKUZOjdGdsQDYXVWSgUDKVAQ0n7G ZSaYOn7gclcVN/k8jhQ7vsv79qWoldB+V99twB+qd+w0TmVGejKuElE12vM4G+dj y3I5eF8s4EOLBjIhzmI5+3EYBSN8om2cL51DDJEV4bslPbPHIoLwO15we3jcqhTP aeEj5Zex9pITg1AnZoAhGXI07028jS422/c2gzRvU8UptQkA11oUqw2yO7TFF/d7 Odq7z14j1rvvbG3HcUH+GESaeLnie9E= -----END CERTIFICATE-----Generated at Sat Jun 13 21:40:16 2026 by rpki-client