$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa File: 3703ae97-7694-31f8-a5e2-913a128e0be6.roa (raw, json) Hash identifier: Q1kdXwFrZ14JOuwJ7pUUc5/W1tKZJWl8lbn6aHphg9Q= Subject key identifier: 8E:15:EB:74:CB:8D:3D:22:1E:1C:AF:6F:2F:50:F0:42:AE:08:C8:83 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584F5E62C68EE7E7745EAC7CE6C0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 5645 IP address blocks: 135.23.0.0/16 maxlen: 16 135.23.0.0/19 maxlen: 19 135.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c6:8e:e7:e7:74:5e:ac:7c:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3d117336-3000-4336-9ce8-47c6da4da4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:a8:de:d8:bb:fa:bd:70:50:e7:e9:f7:dd: 75:9b:37:9b:43:66:c8:c6:71:50:e6:f2:56:f8:dc: 76:e4:75:28:48:1d:84:d6:6b:41:46:a2:51:06:cc: ab:a7:58:6b:85:22:27:f7:b4:b4:2e:9e:39:40:87: 33:05:28:2e:e6:3c:ea:6e:ba:6a:80:db:72:bd:39: 01:3d:9d:11:4f:d9:3c:64:cc:72:93:5b:ce:ab:c6: 1d:e8:99:51:fb:dd:40:25:80:5e:8c:1c:07:f8:52: 15:dc:50:2c:cd:d7:84:30:3e:c8:89:26:66:75:cb: 12:da:67:a6:ff:5f:20:18:fc:2c:db:5f:dd:2d:1e: 46:62:fa:ec:de:61:4a:fb:86:cf:de:19:40:2d:56: 60:72:54:28:56:f6:2d:2f:91:63:4f:61:8a:80:93: 15:62:65:6a:dd:bb:d7:07:5e:a5:71:a5:19:80:ca: a7:57:5e:f8:4e:2f:39:27:64:37:64:da:a3:d1:78: 6a:34:cf:21:6b:28:99:0e:e6:75:28:b9:9b:ae:b3: 5a:56:da:75:a2:13:81:70:da:6c:03:18:1a:b5:4e: 00:31:bc:e4:f0:32:28:81:d8:ff:9e:ce:77:df:0d: 34:dc:d0:a0:ef:dc:ed:c6:0b:af:85:ff:d4:a0:e9: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:15:EB:74:CB:8D:3D:22:1E:1C:AF:6F:2F:50:F0:42:AE:08:C8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 135.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ac:7c:cf:7d:25:62:4a:d5:44:41:47:63:ce:8b:cf:21:13: 92:74:c0:11:1a:e3:57:36:c2:97:70:38:6d:99:de:09:7e:d7: 35:69:17:f1:d0:ef:70:f4:94:7b:17:36:4f:0e:be:e9:b6:92: eb:ff:f7:d3:a7:0d:6d:63:de:0c:bd:e7:9b:20:ff:ce:51:ad: d7:5e:75:50:f5:2d:b6:10:0d:d4:5f:f5:2f:25:ea:38:c6:98: 2a:d6:84:2b:47:28:18:46:0a:8a:1a:77:75:c0:4f:54:43:f5: a7:80:a0:91:3c:36:95:fe:91:1a:b7:cb:e4:fa:1e:0f:dd:89: 77:26:25:9f:fd:8a:4e:3b:d0:52:cb:2e:9a:8c:a7:60:49:f2: 8c:95:8d:9f:35:e0:d8:3e:aa:81:02:4e:23:dc:24:91:75:2c: 3f:6e:f8:94:ad:f6:bf:89:3d:41:59:eb:27:4c:7a:c2:42:f5: e5:5f:cc:b5:02:0f:dc:18:74:09:f8:43:51:38:e2:c5:ac:55: 78:7f:b5:b7:b0:82:90:1d:1e:a6:3f:99:83:dc:45:59:4e:bd: 27:8d:5a:9f:ef:db:61:76:12:55:0c:85:6d:c7:ef:62:78:6e: 98:2a:33:7b:62:f4:99:c8:3d:a6:83:09:12:6b:31:38:e8:60: 0b:91:4e:a0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9eYsaO5+d0Xqx85sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2QxMTczMzYtMzAwMC00MzM2LTljZTgtNDdjNmRhNGRhNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6eo3ti7+r1wUOfp9911mzebQ2bIxnFQ5vJW +Nx25HUoSB2E1mtBRqJRBsyrp1hrhSIn97S0Lp45QIczBSgu5jzqbrpqgNtyvTkB PZ0RT9k8ZMxyk1vOq8Yd6JlR+91AJYBejBwH+FIV3FAszdeEMD7IiSZmdcsS2mem /18gGPws21/dLR5GYvrs3mFK+4bP3hlALVZgclQoVvYtL5FjT2GKgJMVYmVq3bvX B16lcaUZgMqnV174Ti85J2Q3ZNqj0XhqNM8hayiZDuZ1KLmbrrNaVtp1ohOBcNps AxgatU4AMbzk8DIogdj/ns533w003NCg79ztxguvhf/UoOmwXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI4V63TLjT0iHhyvby9Q8EKuCMiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMzcwM2FlOTctNzY5NC0z MWY4LWE1ZTItOTEzYTEyOGUwYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhxcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEArax8z30lYkrVREFHY86LzyETknTAERrjVzbCl3A4bZneCX7XNWkX8dDv cPSUexc2Tw6+6baS6//306cNbWPeDL3nmyD/zlGt1151UPUtthAN1F/1LyXqOMaY KtaEK0coGEYKihp3dcBPVEP1p4CgkTw2lf6RGrfL5PoeD92JdyYln/2KTjvQUssu moynYEnyjJWNnzXg2D6qgQJOI9wkkXUsP274lK32v4k9QVnrJ0x6wkL15V/MtQIP 3Bh0CfhDUTjixaxVeH+1t7CCkB0epj+Zg9xFWU69J41an+/bYXYSVQyFbcfvYnhu mCoze2L0mcg9poMJEmsxOOhgC5FOoA== -----END CERTIFICATE-----Generated at Wed Oct 14 04:14:27 2026 by rpki-client