$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa File: ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa (raw, json) Hash identifier: 4rUoxa9So+WWdhr9SdavAR3bVrfDIGnQguXtz7kst4o= Subject key identifier: B0:00:F2:35:E4:5A:90:1D:1D:B3:72:69:C8:59:2C:8C:B3:43:B6:55 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584DF64093F7BD5E6B4C60501390 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 397325 IP address blocks: 23.29.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:93:f7:bd:5e:6b:4c:60:50:13:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=862d847a-87c2-43d9-a6d9-bc115f2ef8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:f9:93:98:6b:e4:c1:94:dd:25:94:81:48: f3:99:97:d5:32:5b:19:5d:b1:69:3a:69:4a:dd:b7: 2a:81:0a:5e:d9:16:f6:9f:65:9b:cf:07:26:37:c2: 26:88:f0:d8:70:b3:f6:e0:58:8d:2a:cd:24:6b:68: d0:d5:39:77:c0:4a:47:dc:e8:bf:36:1f:f2:27:2e: 5f:ea:53:1e:25:42:cc:a3:2b:07:0f:33:9f:9d:fd: 05:9b:27:e5:c5:66:47:6c:48:82:a4:5f:51:66:7d: 9d:d5:9d:4a:68:a6:af:6f:ca:a3:53:e0:b5:f6:f3: b8:bb:f2:92:0d:48:e2:96:2c:39:85:e1:0c:61:67: 42:52:9f:e6:a4:56:fe:07:61:de:9b:74:3c:a5:3d: 20:56:fc:04:d8:5f:bf:c8:74:d1:26:a1:41:37:a5: 25:25:f1:25:ac:4e:a7:23:6f:85:12:c7:8c:a4:42: 29:08:be:7b:d0:f3:b5:cc:d0:e8:bf:60:5c:9f:63: e0:d5:f1:06:05:a0:a9:36:e5:26:5e:83:57:d9:72: d0:61:72:5c:1e:1f:bf:a3:4c:14:79:3d:34:8b:8d: b4:21:f0:61:61:70:03:03:b3:b9:31:c3:73:17:4f: fb:70:99:01:fc:f1:ff:be:63:dd:05:dd:38:b0:24: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:F2:35:E4:5A:90:1D:1D:B3:72:69:C8:59:2C:8C:B3:43:B6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ca24c9dd-e6ca-3f2b-9331-8b0474485678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bb:c5:ae:95:5f:a5:ef:5b:ab:80:e5:58:f9:0a:9d:99:12: 34:81:3e:3e:4d:99:c9:02:c2:1c:4b:62:f2:de:5a:af:07:f4: 24:c3:74:97:92:06:c9:88:5a:4e:57:91:93:bc:69:57:84:da: 56:b3:94:11:01:dd:c9:70:25:9e:13:30:56:6a:ca:51:7d:1d: e7:e1:f1:cf:51:dc:75:55:f6:6c:37:4f:12:58:5c:b6:81:f2: 3f:75:86:e7:4b:2d:0c:6e:2d:59:f7:a0:eb:ae:82:7b:03:14: 57:bb:2d:1d:cc:05:dc:2a:13:60:8b:ff:fb:20:58:4b:b5:f3: c9:17:33:9d:ce:1c:ea:d4:65:10:ca:aa:d9:bf:8a:8c:b5:62: 8e:73:c4:f1:f1:95:91:df:34:72:f9:1c:37:49:13:a9:a8:84: 37:2a:08:38:ce:61:e7:1e:2c:e5:9c:f1:a9:0b:87:b4:0e:c6: 36:45:b0:58:7b:84:ae:ad:1f:74:2c:2b:93:4b:c6:f2:47:49: 0e:a6:80:4d:39:48:fe:ff:cf:c5:77:41:09:d6:13:4c:84:17: 57:9f:c6:20:5b:eb:c6:6b:da:8d:ae:ca:90:ac:43:77:b2:cd: c8:bf:e9:27:c4:7c:f1:8b:b8:a7:ae:ba:5e:50:5d:1d:6b:e0: a8:59:c5:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QJP3vV5rTGBQE5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk ODYyZDg0N2EtODdjMi00M2Q5LWE2ZDktYmMxMTVmMmVmOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzb5k5hr5MGU3SWUgUjzmZfVMlsZXbFpOmlK 3bcqgQpe2Rb2n2WbzwcmN8ImiPDYcLP24FiNKs0ka2jQ1Tl3wEpH3Oi/Nh/yJy5f 6lMeJULMoysHDzOfnf0FmyflxWZHbEiCpF9RZn2d1Z1KaKavb8qjU+C19vO4u/KS DUjiliw5heEMYWdCUp/mpFb+B2Hem3Q8pT0gVvwE2F+/yHTRJqFBN6UlJfElrE6n I2+FEseMpEIpCL570PO1zNDov2Bcn2Pg1fEGBaCpNuUmXoNX2XLQYXJcHh+/o0wU eT00i420IfBhYXADA7O5McNzF0/7cJkB/PH/vmPdBd04sCQrqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAA8jXkWpAdHbNyachZLIyzQ7ZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvY2EyNGM5ZGQtZTZjYS0z ZjJiLTkzMzEtOGIwNDc0NDg1Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS7xa6VX6XvW6uA5Vj5Cp2ZEjSBPj5NmckCwhxLYvLeWq8H9CTDdJeS BsmIWk5XkZO8aVeE2lazlBEB3clwJZ4TMFZqylF9Hefh8c9R3HVV9mw3TxJYXLaB 8j91hudLLQxuLVn3oOuugnsDFFe7LR3MBdwqE2CL//sgWEu188kXM53OHOrUZRDK qtm/ioy1Yo5zxPHxlZHfNHL5HDdJE6mohDcqCDjOYeceLOWc8akLh7QOxjZFsFh7 hK6tH3QsK5NLxvJHSQ6mgE05SP7/z8V3QQnWE0yEF1efxiBb68Zr2o2uypCsQ3ey zci/6SfEfPGLuKeuul5QXR1r4KhZxUc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:11:56 2026 by rpki-client