$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa File: a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa (raw, json) Hash identifier: KZlJDSVqURWGKUt3O74A8P5fuBih4HcoKQJzrKlBjUU= Subject key identifier: E5:D7:EB:4B:43:AC:CF:C9:6E:87:F4:F8:13:5A:23:F9:A5:A9:BE:DE Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B5676ED0EC7F87B71019EBED0 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa Signing time: Sat 27 Sep 2025 21:46:50 +0000 ROA not before: Sat 27 Sep 2025 21:46:50 +0000 ROA not after: Fri 26 Dec 2025 22:46:50 +0000 asID: 400615 IP address blocks: 23.29.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:76:ed:0e:c7:f8:7b:71:01:9e:be:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 21:46:50 2025 GMT Not After : Dec 26 22:46:50 2025 GMT Subject: CN=c63e4514-6b25-4533-8a6d-41ebcc17eaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:88:11:88:03:ae:2a:c4:9a:e6:c5:3a:e6: 75:7d:f0:b1:bd:9c:75:88:2c:1d:0d:8e:a7:0d:7b: 9e:8f:e2:88:8e:0b:12:4a:80:41:91:a5:f1:2d:4d: 18:6c:ec:e5:b7:2f:38:50:66:01:69:43:b6:f2:c0: 3d:a5:94:43:2c:b0:79:98:a5:50:bf:e6:6f:c7:7a: ae:82:fb:43:e0:4f:84:c9:8b:70:45:3d:88:e9:e6: 1f:ff:06:c5:ad:07:fe:38:8e:16:c8:06:03:77:f5: 26:fe:43:ed:f2:be:0d:98:c8:d8:c4:d0:2d:59:51: f6:d0:f0:ba:bf:19:a9:b8:68:0e:f6:bf:fa:64:5a: a4:44:b2:ae:b3:23:4d:d6:dc:c9:6b:04:65:b7:db: 84:66:0c:ad:8e:b4:91:fd:b7:79:a7:86:10:21:29: 2d:b7:ed:6a:f7:c8:68:42:a1:4c:1b:1f:70:89:2a: dd:54:7b:24:2c:6f:bf:2f:de:dd:ec:cb:a8:d7:35: 69:ec:d0:c9:c8:4c:b5:6f:e6:90:9e:7c:d2:7c:53: fc:17:f3:38:6a:25:da:fb:9f:ad:10:4c:98:b9:5d: 1c:71:5a:9c:a4:2d:f4:44:7f:5d:7a:a0:08:1e:9d: 81:e8:49:27:d5:6a:57:e3:23:89:65:18:a2:f8:f4: 05:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D7:EB:4B:43:AC:CF:C9:6E:87:F4:F8:13:5A:23:F9:A5:A9:BE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/a0ff353a-66eb-3c90-895a-1911ecf5c43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:57:31:aa:ec:d4:d8:da:d0:70:32:84:07:a5:88:42:b7:bb: 52:63:d6:25:fd:9e:f5:c8:e8:3c:43:2b:45:99:ee:54:bc:81: 9e:53:5b:70:35:e9:98:0d:19:b1:79:d3:cd:5a:6f:f3:ec:0d: 19:c7:93:32:80:01:26:5b:ca:95:b7:10:68:80:29:db:c9:51: 82:f1:7a:6d:8d:54:78:21:d2:01:46:cc:84:6f:66:d7:09:6e: be:0c:fc:ba:ac:6b:12:d5:3a:44:10:de:78:0f:82:bc:f6:c4: 2b:54:48:10:cc:8b:bb:08:54:47:54:b9:5c:5c:7a:5c:fa:b2: 50:6f:48:02:b3:b5:9f:bb:cd:31:8a:57:fc:10:21:e2:f8:8e: 33:04:27:53:7e:f0:15:3d:31:5f:4e:63:bd:eb:24:9b:27:75: 6f:b6:9e:cf:ee:6d:79:83:ad:c7:f6:cb:d1:b0:e4:b1:fb:ac: c3:53:fc:3b:e9:dd:38:67:02:42:3c:16:a4:9b:82:41:86:3f: b6:04:78:14:81:b5:e8:4c:7a:4a:d6:22:c1:b9:20:17:a2:84: 87:80:1a:6d:3d:78:8b:00:bc:84:86:80:1f:95:bc:ea:36:88: 74:6a:e0:7a:be:8f:e8:06:22:33:d5:bc:43:b5:ef:48:93:77: 2a:48:35:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWdu0Ox/h7cQGevtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIxNDY1MFoXDTI1MTIyNjIyNDY1MFowLzEtMCsGA1UEAxMk YzYzZTQ1MTQtNmIyNS00NTMzLThhNmQtNDFlYmNjMTdlYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU+IEYgDrirEmubFOuZ1ffCxvZx1iCwdDY6n DXuej+KIjgsSSoBBkaXxLU0YbOzlty84UGYBaUO28sA9pZRDLLB5mKVQv+Zvx3qu gvtD4E+EyYtwRT2I6eYf/wbFrQf+OI4WyAYDd/Um/kPt8r4NmMjYxNAtWVH20PC6 vxmpuGgO9r/6ZFqkRLKusyNN1tzJawRlt9uEZgytjrSR/bd5p4YQISktt+1q98ho QqFMGx9wiSrdVHskLG+/L97d7Muo1zVp7NDJyEy1b+aQnnzSfFP8F/M4aiXa+5+t EEyYuV0ccVqcpC30RH9deqAIHp2B6Ekn1WpX4yOJZRii+PQF9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXX60tDrM/Jbof0+BNaI/mlqb7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYTBmZjM1M2EtNjZlYi0z YzkwLTg5NWEtMTkxMWVjZjVjNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFXMars1Nja0HAyhAeliEK3u1Jj1iX9nvXI6DxDK0WZ7lS8gZ5TW3A1 6ZgNGbF5081ab/PsDRnHkzKAASZbypW3EGiAKdvJUYLxem2NVHgh0gFGzIRvZtcJ br4M/LqsaxLVOkQQ3ngPgrz2xCtUSBDMi7sIVEdUuVxcelz6slBvSAKztZ+7zTGK V/wQIeL4jjMEJ1N+8BU9MV9OY73rJJsndW+2ns/ubXmDrcf2y9Gw5LH7rMNT/Dvp 3ThnAkI8FqSbgkGGP7YEeBSBtehMekrWIsG5IBeihIeAGm09eIsAvISGgB+VvOo2 iHRq4Hq+j+gGIjPVvEO170iTdypINWk= -----END CERTIFICATE-----Generated at Wed Nov 5 16:00:17 2025 by rpki-client