$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa File: 322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa (raw, json) Hash identifier: BQabHu+O/avilyiKCZksT0jwYolS1Qoc5YhnVSsdDsk= Subject key identifier: 3A:29:60:45:96:EE:51:97:CF:4C:9F:88:63:92:C0:51:8F:9F:C6:57 Certificate issuer: /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Certificate serial: 010D0C9F4328584F3E47E9C7B930378C42E763EC Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 53856 IP address blocks: 23.174.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e9:c7:b9:30:37:8c:42:e7:63:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=f48589b5-eace-48d4-a59d-ccf74db4a131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:2d:4e:3e:93:2a:f1:2a:da:7b:36:23:0f: 76:25:b7:d7:45:91:09:62:05:2d:1c:49:f3:c5:d5: 77:bb:1d:d4:d0:a1:17:ef:0b:ed:59:3f:a7:8b:88: 79:08:3c:98:e5:72:2c:d2:25:07:5f:96:cf:d1:9f: d8:5f:98:82:fc:97:bc:de:81:6c:69:32:42:de:13: 52:d2:47:9e:76:52:40:ef:96:0a:f9:2b:dd:7e:5e: 13:9a:70:fc:bd:92:98:c1:d5:6f:bb:69:52:d1:2d: c6:46:1a:1d:eb:1f:8b:02:cb:93:a1:49:f4:59:32: 97:3b:7b:ed:8b:80:68:c6:28:db:4d:73:4d:07:4b: f8:64:11:04:7b:55:b5:76:bc:72:9b:27:53:88:71: cc:1a:ca:23:39:f4:bd:63:f3:3b:c8:87:c3:3e:26: 59:4f:ec:d5:be:14:3b:c7:15:91:0d:d8:e8:95:b1: c6:f3:ee:2e:e5:bb:af:62:fb:58:f0:11:b5:ba:48: 48:3c:12:74:b4:66:50:4d:3a:77:89:da:b4:00:53: 28:e2:07:66:33:f9:8c:05:b1:90:1c:ac:a7:e3:01: 62:5c:aa:8f:63:a0:be:c2:ee:f1:e9:88:59:ff:c9: 7d:dc:59:30:af:2f:ba:3a:fb:15:c1:e3:e9:70:e7: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:60:45:96:EE:51:97:CF:4C:9F:88:63:92:C0:51:8F:9F:C6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl X509v3 Authority Key Identifier: keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer sbgp-ipAddrBlock: critical IPv4: 23.174.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cd:bc:d3:eb:4e:54:ec:9a:cc:42:42:3b:5f:44:b4:77:35: f2:72:51:12:28:13:44:73:5f:c4:a8:ad:56:c5:be:92:63:76: 14:de:9f:61:af:c3:9e:14:24:c9:4c:fa:74:d9:4a:51:57:ee: 26:e5:9c:35:2b:d5:4d:c5:ff:85:d4:26:6d:a2:23:2b:ce:54: ae:ce:03:73:dd:e1:fc:4e:13:02:85:ab:94:e1:68:c4:74:62: 32:73:fb:9a:c9:7a:94:08:e4:9f:b2:8e:e9:a0:2a:2f:59:d9: 59:99:2b:0c:0c:4b:70:5b:bc:08:2d:fb:e0:a3:52:c7:a6:94: 34:92:c7:c7:c1:87:45:83:d1:18:a4:6e:2b:5e:fd:84:44:59: 7c:af:a9:a2:fe:fb:3b:2d:f3:6f:37:b0:72:79:c8:57:96:bd: 89:39:78:70:35:3a:7d:85:13:2d:e0:64:6b:fc:fb:d3:b4:ba: 07:af:96:18:65:8b:c0:50:22:02:16:73:3e:91:4a:59:c9:74: aa:1c:08:dd:63:29:4e:56:e8:f9:03:91:40:f2:51:f4:1b:12: 11:b7:2a:56:57:71:4b:91:da:c7:db:1d:df:b6:04:7f:1e:49: 5b:84:a3:19:b7:f4:20:03:b1:08:01:95:09:5c:ae:e2:64:3b: 3e:bc:00:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+nHuTA3jELnY+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4 MTljMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZjQ4NTg5YjUtZWFjZS00OGQ0LWE1OWQtY2NmNzRkYjRhMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1gtTj6TKvEq2ns2Iw92JbfXRZEJYgUtHEnz xdV3ux3U0KEX7wvtWT+ni4h5CDyY5XIs0iUHX5bP0Z/YX5iC/Je83oFsaTJC3hNS 0keedlJA75YK+Svdfl4TmnD8vZKYwdVvu2lS0S3GRhod6x+LAsuToUn0WTKXO3vt i4BoxijbTXNNB0v4ZBEEe1W1drxymydTiHHMGsojOfS9Y/M7yIfDPiZZT+zVvhQ7 xxWRDdjolbHG8+4u5buvYvtY8BG1ukhIPBJ0tGZQTTp3idq0AFMo4gdmM/mMBbGQ HKyn4wFiXKqPY6C+wu7x6YhZ/8l93Fkwry+6OvsVwePpcOcJjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDopYEWW7lGXz0yfiGOSwFGPn8ZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvMzIyY2JkMGMtNGQzNi0z MDZmLWFiM2QtZTA4MWRmNWZlMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky NWQ1YTgxOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF65wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHNvNPrTlTsmsxCQjtfRLR3NfJyURIoE0RzX8SorVbFvpJjdhTen2Gv w54UJMlM+nTZSlFX7iblnDUr1U3F/4XUJm2iIyvOVK7OA3Pd4fxOEwKFq5ThaMR0 YjJz+5rJepQI5J+yjumgKi9Z2VmZKwwMS3BbvAgt++CjUsemlDSSx8fBh0WD0Rik bite/YREWXyvqaL++zst8283sHJ5yFeWvYk5eHA1On2FEy3gZGv8+9O0ugevlhhl i8BQIgIWcz6RSlnJdKocCN1jKU5W6PkDkUDyUfQbEhG3KlZXcUuR2sfbHd+2BH8e SVuEoxm39CADsQgBlQlcruJkOz68AIk= -----END CERTIFICATE-----Generated at Tue Sep 22 06:32:47 2026 by rpki-client