$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/32baef5c-5cf4-364b-ae83-480a9e496e10.roa File: 32baef5c-5cf4-364b-ae83-480a9e496e10.roa (raw, json) Hash identifier: sJvTbefpB+onO5fCB3Hap/j4Y3atSITx0YB3hVYOT8M= Subject key identifier: 95:2B:35:4C:54:31:DA:85:0B:17:D8:8C:6B:D7:B4:E7:22:0C:A1:3A Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Certificate serial: 010D0C9F4328584F3E47E6541C610BF6DB16F3A0 Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/32baef5c-5cf4-364b-ae83-480a9e496e10.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7992 IP address blocks: 108.162.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e6:54:1c:61:0b:f6:db:16:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=68927adc-e49c-4b3b-b980-cda8c1808b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:f6:aa:d9:1e:4a:91:c7:58:a2:d6:35:42: 59:0c:2d:8c:82:dd:70:67:c3:00:cf:11:69:1c:e3: 87:aa:45:ce:10:c1:54:87:03:aa:66:65:83:9c:b8: d6:46:4b:20:16:f6:af:c5:5a:47:08:b3:cd:c7:95: b0:5c:5a:41:aa:a2:31:79:b3:f8:0d:87:b0:ab:d4: 62:1b:eb:a7:fd:ca:c6:c7:5b:a9:89:27:37:08:f6: 7e:23:dd:09:70:c1:ae:f4:52:e2:a0:f7:93:9b:08: 0c:d7:c3:c8:1f:a5:6e:1a:8a:23:6e:37:ac:89:69: 73:cd:c8:7d:0b:65:f3:a9:65:a5:e4:ec:6f:e8:77: c3:25:57:7e:98:14:0e:b7:6e:ca:86:43:23:99:93: 2f:31:58:ef:54:06:2a:de:cb:dd:de:24:c2:5c:6a: a4:10:16:63:d7:70:24:68:09:ab:c2:04:d8:9c:9c: 06:c0:58:c7:61:94:16:4d:ab:01:81:68:6a:23:cd: 2c:d3:9d:ad:b3:8e:e0:0d:c9:47:28:40:80:96:46: 37:a7:93:9e:7e:fd:de:bc:b1:f3:1a:fa:f4:bc:c7: f4:7c:2b:1c:f7:09:54:1d:3f:3a:dd:09:2f:2c:bc: 74:1b:42:9c:22:ef:76:83:02:72:a8:34:33:e6:c8: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:35:4C:54:31:DA:85:0B:17:D8:8C:6B:D7:B4:E7:22:0C:A1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/32baef5c-5cf4-364b-ae83-480a9e496e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl X509v3 Authority Key Identifier: keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer sbgp-ipAddrBlock: critical IPv4: 108.162.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9f:61:7e:59:d2:20:35:57:ce:3f:1a:7c:a6:9e:d1:f4:14: c1:64:47:26:8c:2d:7a:be:57:cc:59:4c:c3:c8:6c:67:5b:6c: b2:56:f8:aa:70:06:4b:1e:c1:77:20:eb:17:24:4c:05:59:24: c7:c4:76:8b:61:27:5d:39:36:60:bf:75:4f:bf:5d:d9:2b:3c: d9:5e:4d:8b:5e:61:36:6d:c7:0d:40:54:3b:f3:4d:49:0c:ba: 28:38:a3:91:07:0a:4f:0d:85:18:6f:30:27:5e:24:c9:b9:b7: 0b:3e:1c:00:7f:96:41:67:9a:0f:4c:1f:aa:fc:44:4b:55:00: 5e:69:2c:09:be:25:70:2f:b7:5a:f3:89:e1:0b:65:cd:6b:28: b8:7e:13:88:e3:6a:83:07:da:70:f2:b3:8f:33:ea:f0:05:5d: bc:e9:96:7e:cd:95:15:f6:3d:b7:0e:9c:cf:41:8d:25:a6:82: 35:09:6e:a1:24:3a:62:8d:15:e4:62:db:ab:8a:25:c4:b8:ce: 3c:a7:2d:5f:e1:48:f3:86:47:98:f1:e1:94:8a:ca:65:c3:63: 30:21:b9:a7:a2:3d:8a:7c:49:fd:93:a6:36:e5:31:9d:33:2a: ac:63:d2:d2:97:1e:34:4d:5d:ba:e0:fc:45:a0:b0:1a:7f:54: cb:c3:d5:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+ZUHGEL9tsW86AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm Zjk4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Njg5MjdhZGMtZTQ5Yy00YjNiLWI5ODAtY2RhOGMxODA4YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUv2qtkeSpHHWKLWNUJZDC2Mgt1wZ8MAzxFp HOOHqkXOEMFUhwOqZmWDnLjWRksgFvavxVpHCLPNx5WwXFpBqqIxebP4DYewq9Ri G+un/crGx1upiSc3CPZ+I90JcMGu9FLioPeTmwgM18PIH6VuGoojbjesiWlzzch9 C2XzqWWl5Oxv6HfDJVd+mBQOt27KhkMjmZMvMVjvVAYq3svd3iTCXGqkEBZj13Ak aAmrwgTYnJwGwFjHYZQWTasBgWhqI80s052ts47gDclHKECAlkY3p5Oefv3evLHz Gvr0vMf0fCsc9wlUHT863QkvLLx0G0KcIu92gwJyqDQz5sgS4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUrNUxUMdqFCxfYjGvXtOciDKE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvMzJiYWVmNWMtNWNmNC0z NjRiLWFlODMtNDgwYTllNDk2ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1 ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3 ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5 OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOfYX5Z0iA1V84/GnymntH0FMFkRyaMLXq+V8xZTMPIbGdbbLJW+Kpw BksewXcg6xckTAVZJMfEdothJ105NmC/dU+/XdkrPNleTYteYTZtxw1AVDvzTUkM uig4o5EHCk8NhRhvMCdeJMm5tws+HAB/lkFnmg9MH6r8REtVAF5pLAm+JXAvt1rz ieELZc1rKLh+E4jjaoMH2nDys48z6vAFXbzpln7NlRX2PbcOnM9BjSWmgjUJbqEk OmKNFeRi26uKJcS4zjynLV/hSPOGR5jx4ZSKymXDYzAhuaeiPYp8Sf2TpjblMZ0z Kqxj0tKXHjRNXbrg/EWgsBp/VMvD1bI= -----END CERTIFICATE-----Generated at Tue Sep 22 19:17:21 2026 by rpki-client