$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa File: 32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa (raw, json) Hash identifier: 0yOnjeTC99W/EXzhIRDClsdXBKEvKctzlhhN4zplFvw= Subject key identifier: 04:9B:8C:36:85:CE:EE:E0:8A:97:3C:98:90:E0:DD:A2:BE:1F:95:9B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498967DFE8FE69E56BF5AE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:67:df:e8:fe:69:e5:6b:f5:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=db98cf6f-30c2-4d19-8af1-66259a867115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:bc:a5:23:f6:93:f7:22:67:bf:3b:24:ba: 14:0a:1a:63:02:6b:34:76:c5:4d:f7:fd:1e:41:8b: d1:a9:a9:fd:6e:c4:0e:5c:ac:ec:51:24:7d:fc:e8: cf:2e:54:6e:5d:fb:a6:09:cb:37:7a:c8:ea:21:96: 56:4b:ae:e7:6b:ba:49:c1:99:1e:1e:62:66:6b:e1: bb:70:e2:da:55:49:89:aa:26:94:5d:4e:f9:9b:ac: f0:76:54:03:8f:99:d6:c7:f7:c3:3f:85:a2:6d:c3: bc:a5:a1:d3:1e:8a:94:7d:79:30:a1:e0:5d:b8:66: 01:f0:b3:56:5b:2c:2f:db:e5:7d:7a:31:8b:54:d3: 6e:b0:c9:c1:7a:b2:f3:32:fa:09:10:fd:21:04:16: 64:ce:68:d9:4f:3e:d6:84:74:60:6d:47:c8:73:16: e3:f6:1e:d2:a6:3e:77:3c:32:64:aa:bd:09:41:d9: f0:d4:6c:05:2e:14:61:23:d0:90:b2:19:8c:40:a4: 99:fa:d0:1e:05:25:ef:95:bf:a2:2d:f5:dc:91:57: 8e:51:0c:b5:2d:9c:67:be:54:89:96:ee:f5:8b:aa: e6:af:12:7a:09:ae:30:3d:e6:ee:8a:07:f1:c0:c5: 90:98:11:ec:10:fc:91:ed:8d:00:35:5b:81:de:05: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9B:8C:36:85:CE:EE:E0:8A:97:3C:98:90:E0:DD:A2:BE:1F:95:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/32662e2c-27f3-3e6e-a313-4fd6e74ce820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f8:18:67:90:20:f5:ec:4b:fe:1f:79:c1:f5:ba:ce:49:13: ec:44:b1:83:93:eb:99:20:8d:e6:2f:ff:ac:07:99:ec:bb:07: 8c:bb:e9:0f:f5:de:6c:e6:df:d3:e4:b9:63:cb:5c:4b:9e:df: 99:43:80:80:7d:cd:bc:aa:b3:12:25:31:f7:a6:c1:7e:b5:1d: fe:bd:ef:25:0a:ac:3f:fa:f8:d5:0d:b6:22:c8:38:48:b8:93: 4b:ff:7a:13:0b:ea:2c:bd:cd:9a:09:99:62:c7:b9:64:ec:eb: df:f3:62:cd:f7:ee:9b:19:3f:08:bd:76:d4:82:60:b5:c1:2b: f5:d4:e8:7f:b9:8a:56:f6:bc:64:59:e4:b2:75:99:d9:2b:06: 8b:96:f1:d6:56:3b:46:fe:a5:db:dc:7f:15:50:a7:ee:bd:6a: 21:4e:3d:0b:5c:bc:ab:dd:ef:0f:cc:39:4d:98:16:65:2f:39: 23:2b:db:65:0e:26:be:4a:ac:ac:fa:cb:df:63:fd:08:1c:57: e2:ab:1d:7e:a6:86:d2:8c:18:bd:34:c9:b7:13:71:da:8e:bf: 6b:43:8c:2d:3e:51:4b:a2:09:37:c7:38:a1:e7:d4:16:2f:84: a5:71:7a:0b:ec:0f:ba:41:2e:9f:6e:e1:aa:44:28:ae:ec:96: e3:6d:7b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiWff6P5p5Wv1rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGI5OGNmNmYtMzBjMi00ZDE5LThhZjEtNjYyNTlhODY3MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7S8pSP2k/ciZ787JLoUChpjAms0dsVN9/0e QYvRqan9bsQOXKzsUSR9/OjPLlRuXfumCcs3esjqIZZWS67na7pJwZkeHmJma+G7 cOLaVUmJqiaUXU75m6zwdlQDj5nWx/fDP4WibcO8paHTHoqUfXkwoeBduGYB8LNW Wywv2+V9ejGLVNNusMnBerLzMvoJEP0hBBZkzmjZTz7WhHRgbUfIcxbj9h7Spj53 PDJkqr0JQdnw1GwFLhRhI9CQshmMQKSZ+tAeBSXvlb+iLfXckVeOUQy1LZxnvlSJ lu71i6rmrxJ6Ca4wPebuigfxwMWQmBHsEPyR7Y0ANVuB3gVfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASbjDaFzu7gipc8mJDg3aK+H5WbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI2NjJlMmMtMjdmMy0z ZTZlLWEzMTMtNGZkNmU3NGNlODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv4GGeQIPXsS/4fecH1us5JE+xEsYOT65kgjeYv/6wHmey7B4y76Q/1 3mzm39PkuWPLXEue35lDgIB9zbyqsxIlMfemwX61Hf697yUKrD/6+NUNtiLIOEi4 k0v/ehML6iy9zZoJmWLHuWTs69/zYs337psZPwi9dtSCYLXBK/XU6H+5ilb2vGRZ 5LJ1mdkrBouW8dZWO0b+pdvcfxVQp+69aiFOPQtcvKvd7w/MOU2YFmUvOSMr22UO Jr5KrKz6y99j/QgcV+KrHX6mhtKMGL00ybcTcdqOv2tDjC0+UUuiCTfHOKHn1BYv hKVxegvsD7pBLp9u4apEKK7sluNte6k= -----END CERTIFICATE-----Generated at Sun Sep 27 01:28:17 2026 by rpki-client