$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa File: bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa (raw, json) Hash identifier: /Cwxikk7Wc5+I3KEc/Mf8VpvQt4A/kOMv9iip+gCxYI= Subject key identifier: 9D:A8:23:E3:94:CB:55:C0:75:13:6F:7E:C3:CF:82:A4:6D:35:BD:02 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584DF640A75296612D239C98EB80 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 397325 IP address blocks: 23.29.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:a7:52:96:61:2d:23:9c:98:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=0ea2e67a-234e-4508-989f-2d04d08094ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:1c:0b:75:f4:b1:55:9d:4b:3c:2b:ce:8b: 05:38:3b:68:d0:46:38:e4:c9:3d:79:94:5a:57:b6: 38:cd:e8:82:25:e8:cf:ff:3e:a7:72:ed:b5:b4:b6: ae:4a:8b:a2:2f:36:56:c9:6b:a9:07:8a:32:f1:8f: 6b:6f:ce:cc:1d:69:cb:7b:78:b2:22:77:48:f2:a3: 30:45:b6:91:da:e0:90:ce:f4:f1:79:e0:94:26:bc: 54:cb:22:fb:61:6b:cd:43:c1:aa:54:79:ad:73:0b: a2:7a:73:c1:12:cb:68:77:70:52:af:fd:98:18:26: fb:d4:9f:14:2a:ff:a5:40:34:89:a7:38:52:77:c3: 79:f7:dc:6a:00:f0:c6:e9:c0:66:dc:81:9c:0f:e0: fb:26:a3:64:62:d4:3a:66:80:b1:26:09:6d:fa:0e: fa:ba:b5:f8:9d:5b:1d:3e:43:58:94:3c:5c:a2:ac: d9:0f:25:0e:f9:73:00:40:43:0e:7c:c0:83:97:c9: 45:ea:6b:49:bc:79:f7:44:a8:fc:06:53:a6:86:bd: c4:d4:82:7f:0c:7d:e1:54:e4:09:b7:d2:2b:bc:05: 4b:82:4a:5f:b5:4c:45:6d:e2:ac:9e:ba:a9:64:da: d2:82:fe:e2:e5:ea:43:df:32:c3:bb:7e:99:f3:08: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:23:E3:94:CB:55:C0:75:13:6F:7E:C3:CF:82:A4:6D:35:BD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/bb357124-3a83-3fdf-8434-119ca1eb1a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:19:e1:af:3e:a6:28:42:39:48:5a:af:53:95:27:04:fe:ea: bd:97:b2:9f:6a:2f:95:fe:36:df:56:32:9d:45:29:20:a7:99: 86:44:05:5f:ef:1d:b3:fa:66:0e:b9:e4:fe:2e:88:6d:b6:99: 3c:6c:6c:0f:17:81:51:b2:4d:eb:ad:68:da:cb:1b:bf:1f:cc: 18:96:19:79:b8:9f:97:c2:33:ed:63:38:41:36:42:b4:e3:21: ab:f1:05:a0:3f:95:d5:7b:13:35:36:13:e4:57:d9:06:25:1c: 2c:97:bd:a9:82:7a:15:07:fd:49:ab:f4:c5:63:8f:ed:08:e1: 42:6f:15:95:dc:56:8c:84:14:37:05:08:50:1c:03:53:98:08: e6:af:e9:1e:48:31:71:03:98:e9:2a:af:14:67:73:8a:4d:e2: 29:b3:17:bc:57:77:30:23:ba:5f:88:b7:6d:8e:89:97:07:2a: 5f:13:52:35:68:fd:b3:8d:40:9a:24:e2:1c:7e:37:39:e4:3d: f1:41:94:7f:a5:17:98:60:79:60:58:c7:f4:24:a8:f7:82:52: 91:9e:2f:1b:f1:76:a5:b9:a6:36:ab:1e:0f:39:4f:cd:ea:0c: 0b:48:ff:7a:9c:eb:0c:37:88:c2:95:48:08:64:d2:71:d9:9c: d9:62:2e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QKdSlmEtI5yY64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk MGVhMmU2N2EtMjM0ZS00NTA4LTk4OWYtMmQwNGQwODA5NGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTYcC3X0sVWdSzwrzosFODto0EY45Mk9eZRa V7Y4zeiCJejP/z6ncu21tLauSouiLzZWyWupB4oy8Y9rb87MHWnLe3iyIndI8qMw RbaR2uCQzvTxeeCUJrxUyyL7YWvNQ8GqVHmtcwuienPBEstod3BSr/2YGCb71J8U Kv+lQDSJpzhSd8N599xqAPDG6cBm3IGcD+D7JqNkYtQ6ZoCxJglt+g76urX4nVsd PkNYlDxcoqzZDyUO+XMAQEMOfMCDl8lF6mtJvHn3RKj8BlOmhr3E1IJ/DH3hVOQJ t9IrvAVLgkpftUxFbeKsnrqpZNrSgv7i5epD3zLDu36Z8wi3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2oI+OUy1XAdRNvfsPPgqRtNb0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvYmIzNTcxMjQtM2E4My0z ZmRmLTg0MzQtMTE5Y2ExZWIxYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQZ4a8+pihCOUhar1OVJwT+6r2Xsp9qL5X+Nt9WMp1FKSCnmYZEBV/v HbP6Zg655P4uiG22mTxsbA8XgVGyTeutaNrLG78fzBiWGXm4n5fCM+1jOEE2QrTj IavxBaA/ldV7EzU2E+RX2QYlHCyXvamCehUH/Umr9MVjj+0I4UJvFZXcVoyEFDcF CFAcA1OYCOav6R5IMXEDmOkqrxRnc4pN4imzF7xXdzAjul+It22OiZcHKl8TUjVo /bONQJok4hx+NznkPfFBlH+lF5hgeWBYx/QkqPeCUpGeLxvxdqW5pjarHg85T83q DAtI/3qc6ww3iMKVSAhk0nHZnNliLgY= -----END CERTIFICATE-----Generated at Sat Jun 13 16:30:01 2026 by rpki-client