$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa File: e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa (raw, json) Hash identifier: xQa/EaWni9Q8w92+LPEoAZT3PzOTBVD2uxAeHdQd2m0= Subject key identifier: D7:CF:3F:1B:0E:A0:84:04:9E:3E:76:01:71:8D:6E:7E:45:3E:01:A7 Certificate issuer: /CN=e0927227-fbc8-4924-89af-1885637cb07c Certificate serial: 010D0C9F4328584F2EED149FE3EFA3A70D02D470 Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 35280 IP address blocks: 23.158.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:14:9f:e3:ef:a3:a7:0d:02:d4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=0fcc7fb9-bad4-4c4b-a2ed-f38e5495d655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a4:be:70:52:45:bb:72:5a:86:fe:65:d4:e4: d5:b8:37:43:e3:59:68:8b:e6:06:91:b2:3c:a3:4b: 0e:8a:af:87:b2:e7:01:32:e7:a2:25:f1:85:ec:62: 19:64:70:27:30:81:b7:67:f4:fc:2c:5c:72:51:fa: 6f:de:a4:7c:e7:fa:e5:94:2d:48:ad:a4:8d:d5:76: 61:d3:d0:af:c0:d6:12:3f:cb:db:4c:4c:df:f2:d7: ae:c6:c1:6e:0e:e8:93:1c:8f:bf:7b:da:31:94:de: e5:e3:b0:a6:9b:f6:e6:0c:e2:b4:03:ae:96:e2:dc: 79:c5:19:a0:07:1c:62:42:fd:4b:ce:d6:94:66:bd: 0d:b8:2c:9d:5c:93:27:22:92:47:b3:cb:14:56:48: 2b:79:cd:9d:50:e7:38:bb:10:d7:25:7c:13:f9:97: 14:2d:1b:bc:5e:bb:e5:45:42:ff:0b:a0:0f:28:06: 44:89:73:6f:4a:23:71:2e:1c:ee:4f:2c:e3:44:af: 66:46:9c:9d:79:a9:73:49:ae:b3:1d:56:90:1c:e7: 93:ec:c9:7e:3b:e4:59:32:62:b7:ca:af:4f:29:6f: d4:6b:37:60:bb:05:8e:e4:db:d8:aa:e6:14:49:95: 41:fc:5b:e5:60:21:f4:ec:bd:96:f6:0c:01:fd:a4: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CF:3F:1B:0E:A0:84:04:9E:3E:76:01:71:8D:6E:7E:45:3E:01:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl X509v3 Authority Key Identifier: keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer sbgp-ipAddrBlock: critical IPv4: 23.158.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f5:2a:fa:a9:37:69:af:89:fb:c3:7e:9d:60:13:ac:ad:65: 8c:55:46:25:4b:52:bf:de:69:f0:5f:d7:f8:ce:04:75:2b:dd: ae:19:09:b7:d3:6b:b1:b8:0e:c8:e7:60:c6:4d:3a:0d:0f:6c: 52:9e:db:0f:0c:92:5a:f3:44:d7:fe:7b:77:03:99:3b:5f:09: c2:69:44:21:0a:5b:70:2e:e6:7f:71:52:b6:2d:f4:de:89:2f: e4:bd:16:a6:92:8f:9e:11:82:bb:21:a1:88:34:28:fb:8f:e7: 00:19:81:0f:20:9f:c9:81:5c:68:49:8f:aa:03:89:5d:3a:f9: a0:1e:5c:2a:3d:1b:dc:e1:f5:c6:b9:a2:f3:21:c0:a8:a2:fc: 37:a0:37:a5:7a:49:44:a4:b4:40:99:57:01:09:aa:ec:7c:89: 4c:8a:4c:f4:4e:3f:45:91:94:3e:2b:45:b3:8b:fe:8a:97:75: 8b:ee:1e:c2:a7:8c:ff:b6:b0:c2:19:61:7c:d6:ae:44:92:aa: 5d:8a:ef:7b:3c:07:38:48:a2:ae:52:6a:29:c9:ef:7f:82:7e: 55:5b:c9:9f:c0:08:ab:24:e9:73:51:00:9a:aa:8c:a8:4e:92: 7f:9d:ab:f0:59:5a:da:aa:67:c5:a2:96:43:82:26:b6:eb:1e: a6:ff:05:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RSf4++jpw0C1HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2Ni MDdjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MGZjYzdmYjktYmFkNC00YzRiLWEyZWQtZjM4ZTU0OTVkNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aS+cFJFu3Jahv5l1OTVuDdD41loi+YGkbI8 o0sOiq+HsucBMueiJfGF7GIZZHAnMIG3Z/T8LFxyUfpv3qR85/rllC1IraSN1XZh 09CvwNYSP8vbTEzf8teuxsFuDuiTHI+/e9oxlN7l47Cmm/bmDOK0A66W4tx5xRmg BxxiQv1LztaUZr0NuCydXJMnIpJHs8sUVkgrec2dUOc4uxDXJXwT+ZcULRu8Xrvl RUL/C6APKAZEiXNvSiNxLhzuTyzjRK9mRpydealzSa6zHVaQHOeT7Ml+O+RZMmK3 yq9PKW/UazdguwWO5NvYquYUSZVB/FvlYCH07L2W9gwB/aQ7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfPPxsOoIQEnj52AXGNbn5FPgGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMDky NzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvZTNmNWExZDctNmE2Yy0z MTZjLTgzZmQtNDM2NmQ5OGNhOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTA5MjcyMjctZmJjOC00OTI0LTg5 YWYtMTg4NTYzN2NiMDdjL2UwOTI3MjI3LWZiYzgtNDkyNC04OWFmLTE4ODU2Mzdj YjA3Yy5jcmwwHwYDVR0jBBgwFoAUQtTA1qsZ7oEiV73CtogcoXHAf8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1 NjM3Y2IwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC71KvqpN2mvifvDfp1gE6ytZYxVRiVLUr/eafBf1/jOBHUr3a4ZCbfT a7G4DsjnYMZNOg0PbFKe2w8MklrzRNf+e3cDmTtfCcJpRCEKW3Au5n9xUrYt9N6J L+S9FqaSj54RgrshoYg0KPuP5wAZgQ8gn8mBXGhJj6oDiV06+aAeXCo9G9zh9ca5 ovMhwKii/DegN6V6SUSktECZVwEJqux8iUyKTPROP0WRlD4rRbOL/oqXdYvuHsKn jP+2sMIZYXzWrkSSql2K73s8BzhIoq5SainJ73+CflVbyZ/ACKsk6XNRAJqqjKhO kn+dq/BZWtqqZ8WilkOCJrbrHqb/BTE= -----END CERTIFICATE-----Generated at Mon Sep 21 21:03:09 2026 by rpki-client