$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/b6799442-7de8-3e76-abac-968701276d4c.roa File: b6799442-7de8-3e76-abac-968701276d4c.roa (raw, json) Hash identifier: jygV4IvJSS+w3sOBpcwSuPDIyF/W6Mixb5bpF8nx5Nk= Subject key identifier: 9F:06:04:E5:2E:14:A0:11:F8:DA:33:F9:3E:52:A6:C8:87:DB:16:87 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584B569466DC8C3CC549D6982300 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/b6799442-7de8-3e76-abac-968701276d4c.roa Signing time: Sat 27 Sep 2025 22:46:14 +0000 ROA not before: Sat 27 Sep 2025 22:46:14 +0000 ROA not after: Fri 26 Dec 2025 23:46:14 +0000 asID: 397325 IP address blocks: 23.29.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:94:66:dc:8c:3c:c5:49:d6:98:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 27 22:46:14 2025 GMT Not After : Dec 26 23:46:14 2025 GMT Subject: CN=44d6034b-1486-4194-bd0f-a308222bf2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:bb:fe:39:80:bc:5e:07:1b:cc:73:11:72: 6d:3a:74:e7:56:dd:ae:71:40:17:94:e9:4f:90:b1: 3a:13:73:4f:aa:1b:5b:35:a2:ca:3f:a3:70:36:5b: 16:6d:71:58:cf:1d:63:78:80:c8:19:71:45:e1:c5: 00:02:fa:20:7c:bd:71:05:bf:cf:d6:de:ec:1f:74: 6d:db:c1:7d:33:02:59:4d:8e:59:0d:5c:96:d5:b2: 35:b1:c8:5c:6e:53:8b:75:d4:03:85:cc:f7:33:24: 0c:4e:41:0c:ff:a5:2a:ba:a0:84:a0:1d:ed:a7:16: 80:10:b6:cc:11:f9:a2:88:c2:39:6e:48:c7:f6:4c: 82:02:e5:b6:76:f9:00:3d:7c:65:8f:3a:f6:55:11: 18:fa:ce:f6:1c:28:77:a4:9f:f4:45:1f:45:74:eb: 00:a1:b0:86:e0:49:e6:51:15:4d:14:83:14:ea:bf: 21:94:05:95:69:d9:aa:d7:9c:43:5c:c0:51:04:26: 55:f2:60:99:c6:aa:cc:24:c1:66:87:1f:9c:a8:f3: 1b:8e:39:59:f2:b0:81:f6:78:e0:b4:54:3a:a7:db: 6f:f1:9e:e1:e6:df:df:63:e0:ea:c0:36:fd:59:0f: 0a:39:8c:2a:73:b1:64:3a:02:87:9a:e2:ed:cc:9d: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:04:E5:2E:14:A0:11:F8:DA:33:F9:3E:52:A6:C8:87:DB:16:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/b6799442-7de8-3e76-abac-968701276d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:99:20:42:73:2c:79:b3:4b:78:50:ae:55:ea:ce:ea:32:a8: dd:d6:b1:32:34:b1:45:2f:56:6c:b5:0e:ea:c1:82:a2:9a:b3: 4b:18:22:aa:26:26:69:1b:e8:e4:26:6c:7e:a9:d6:a4:9a:ce: a8:68:c7:77:cf:18:f7:07:14:9f:d5:a1:28:b2:9b:69:16:33: a1:46:5c:8f:b6:ac:af:4a:ca:94:b5:d9:fb:af:c9:37:cb:fb: a3:8b:f4:bb:91:74:30:a7:4d:3b:54:f4:83:62:2a:48:dd:04: fa:d5:ab:4f:40:42:b3:08:5d:2f:7c:f0:1d:5d:a6:ac:1d:31: 39:75:7f:dd:b6:41:8a:45:9e:03:9e:bf:b1:b8:47:11:f4:d0: 66:81:6a:c6:15:63:8b:7c:44:76:69:16:2f:b2:cb:45:97:45: e1:57:02:a2:44:d5:79:f5:59:36:94:90:3d:f2:0b:47:67:82: e4:af:af:8a:9f:c0:0c:a2:0e:e4:92:bb:f0:5d:ed:0b:5d:fb: c1:d7:a7:ad:ed:c0:bd:f6:ec:39:20:8b:e3:5d:f6:e0:50:9e: e0:95:59:6c:83:1c:1c:f9:30:0d:58:9e:21:3f:fe:f2:cc:25: 98:1b:8a:65:eb:e7:33:c8:2e:c4:ca:3b:cb:a8:9e:6d:8c:e8: 80:d3:d2:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWlGbcjDzFSdaYIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI1MDkyNzIyNDYxNFoXDTI1MTIyNjIzNDYxNFowLzEtMCsGA1UEAxMk NDRkNjAzNGItMTQ4Ni00MTk0LWJkMGYtYTMwODIyMmJmMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Re7/jmAvF4HG8xzEXJtOnTnVt2ucUAXlOlP kLE6E3NPqhtbNaLKP6NwNlsWbXFYzx1jeIDIGXFF4cUAAvogfL1xBb/P1t7sH3Rt 28F9MwJZTY5ZDVyW1bI1schcblOLddQDhcz3MyQMTkEM/6UquqCEoB3tpxaAELbM EfmiiMI5bkjH9kyCAuW2dvkAPXxljzr2VREY+s72HCh3pJ/0RR9FdOsAobCG4Enm URVNFIMU6r8hlAWVadmq15xDXMBRBCZV8mCZxqrMJMFmhx+cqPMbjjlZ8rCB9njg tFQ6p9tv8Z7h5t/fY+DqwDb9WQ8KOYwqc7FkOgKHmuLtzJ3NpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8GBOUuFKAR+Noz+T5SpsiH2xaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYjY3OTk0NDItN2RlOC0z ZTc2LWFiYWMtOTY4NzAxMjc2ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKZIEJzLHmzS3hQrlXqzuoyqN3WsTI0sUUvVmy1DurBgqKas0sYIqom Jmkb6OQmbH6p1qSazqhox3fPGPcHFJ/VoSiym2kWM6FGXI+2rK9KypS12fuvyTfL +6OL9LuRdDCnTTtU9INiKkjdBPrVq09AQrMIXS988B1dpqwdMTl1f922QYpFngOe v7G4RxH00GaBasYVY4t8RHZpFi+yy0WXReFXAqJE1Xn1WTaUkD3yC0dnguSvr4qf wAyiDuSSu/Bd7Qtd+8HXp63twL327Dkgi+Nd9uBQnuCVWWyDHBz5MA1YniE//vLM JZgbimXr5zPILsTKO8uonm2M6IDT0qY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:14 2025 by rpki-client