$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa File: ef971431-27a3-3019-93d7-a6c64c0587d1.roa (raw, json) Hash identifier: rJja8MjOT0IVC5EwZyWsBV7TxyXe9KpWEM3Y59VPKCo= Subject key identifier: 2F:D0:DA:66:F9:FC:45:83:C5:FF:21:86:55:F7:82:7E:52:1F:BA:A7 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584F497460CC542BA91FE0AB3400 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397325 IP address blocks: 23.29.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:60:cc:54:2b:a9:1f:e0:ab:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e4b85f95-7be2-47ef-aeab-f6b25853a85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:eb:a0:53:d4:64:41:ca:6e:3f:3b:c3:06: e6:63:67:cc:30:be:d4:37:81:8f:0e:9d:3d:bc:77: 4a:d3:62:21:03:f6:98:14:34:27:53:03:84:89:64: 8b:89:c0:a3:1c:b4:24:9f:d3:28:98:a0:6d:79:a0: 3d:30:90:ac:2a:d3:77:78:20:a1:23:c1:b5:58:20: be:dd:78:d7:9e:d4:41:89:a0:b5:56:1a:aa:cc:1a: 87:77:64:75:60:8d:36:40:7b:dc:5a:ed:c7:51:44: 30:bd:ff:db:c8:49:ec:29:1f:05:0a:1e:37:e7:24: 20:ea:2f:95:b8:15:94:7d:71:e9:9e:c8:1d:23:93: a5:b9:58:63:3b:ef:36:22:d7:51:d3:86:fd:42:8b: 7b:b7:79:a3:a9:99:ec:5b:40:92:3c:3c:8f:57:12: 10:8e:da:71:50:75:ff:5d:ab:81:a1:79:da:c8:a8: a0:fb:ce:24:02:fb:37:c0:03:fe:38:31:5e:7f:a9: 1d:fb:01:b3:96:5c:2a:4e:a4:d0:0a:96:cd:28:af: bd:70:23:17:b1:08:49:d0:c4:40:ea:b1:44:59:13: 61:6c:b4:e2:ee:a9:82:d7:79:c9:3c:9c:4d:71:00: f7:6b:a0:1a:c0:61:15:b0:77:c4:14:e9:71:a8:e2: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D0:DA:66:F9:FC:45:83:C5:FF:21:86:55:F7:82:7E:52:1F:BA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/ef971431-27a3-3019-93d7-a6c64c0587d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:92:dc:ce:c9:b8:e0:d8:d8:40:0c:1d:ef:f8:c7:37:5b:03: bb:0e:41:4a:ff:df:21:7f:76:73:6b:30:b6:9e:56:bf:44:62: d4:90:92:47:b8:48:85:1e:0d:33:ce:a2:b0:43:83:10:15:b0: b3:6b:64:7c:11:53:89:57:ec:b1:31:c1:1e:5d:fd:37:62:b4: ab:83:0f:8c:25:f7:4a:c0:e2:0d:5a:71:5b:6e:d0:e7:7a:90: 68:55:24:67:77:1d:0b:d8:b9:bf:54:b1:c8:ec:46:96:36:75: eb:d7:0c:0b:c8:f1:c7:90:59:82:a3:6a:79:5c:1b:f2:63:c7: 43:57:77:79:fc:e4:e8:5f:1c:ac:01:ce:36:1f:a8:15:2c:ce: c6:28:72:51:0b:0e:0f:42:0a:52:33:46:03:e0:dd:f6:e4:10: 01:81:20:13:54:c5:79:e7:8e:32:ff:6b:a6:8d:ad:a3:12:4f: 9f:dc:37:ab:97:a5:86:aa:d3:ce:cc:71:aa:32:83:ce:4f:b9: db:42:b0:62:4e:81:c2:5b:aa:c7:af:07:a2:97:b1:10:be:34: 31:0b:03:65:5e:02:c0:a7:75:30:ee:5d:87:89:e2:04:b9:79: be:9f:bc:11:68:22:53:a4:ac:82:8d:7f:5b:c7:62:fb:5e:38: 01:0f:30:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGDMVCupH+CrNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTRiODVmOTUtN2JlMi00N2VmLWFlYWItZjZiMjU4NTNhODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkivroFPUZEHKbj87wwbmY2fMML7UN4GPDp09 vHdK02IhA/aYFDQnUwOEiWSLicCjHLQkn9MomKBteaA9MJCsKtN3eCChI8G1WCC+ 3XjXntRBiaC1VhqqzBqHd2R1YI02QHvcWu3HUUQwvf/byEnsKR8FCh435yQg6i+V uBWUfXHpnsgdI5OluVhjO+82ItdR04b9Qot7t3mjqZnsW0CSPDyPVxIQjtpxUHX/ XauBoXnayKig+84kAvs3wAP+ODFef6kd+wGzllwqTqTQCpbNKK+9cCMXsQhJ0MRA 6rFEWRNhbLTi7qmC13nJPJxNcQD3a6AawGEVsHfEFOlxqOKgLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/Q2mb5/EWDxf8hhlX3gn5SH7qnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvZWY5NzE0MzEtMjdhMy0z MDE5LTkzZDctYTZjNjRjMDU4N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFx0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2S3M7JuODY2EAMHe/4xzdbA7sOQUr/3yF/dnNrMLaeVr9EYtSQkke4 SIUeDTPOorBDgxAVsLNrZHwRU4lX7LExwR5d/TditKuDD4wl90rA4g1acVtu0Od6 kGhVJGd3HQvYub9UscjsRpY2devXDAvI8ceQWYKjanlcG/Jjx0NXd3n85OhfHKwB zjYfqBUszsYoclELDg9CClIzRgPg3fbkEAGBIBNUxXnnjjL/a6aNraMST5/cN6uX pYaq087Mcaoyg85PudtCsGJOgcJbqsevB6KXsRC+NDELA2VeAsCndTDuXYeJ4gS5 eb6fvBFoIlOkrIKNf1vHYvteOAEPMIk= -----END CERTIFICATE-----Generated at Sat Sep 26 13:39:14 2026 by rpki-client