$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa File: d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa (raw, json) Hash identifier: G/3lrs6B7g/Jt73mx2TcWr6wp0zC+Yd7OEmxbzC8HB0= Subject key identifier: 13:C1:4A:5A:8A:18:52:76:37:6A:05:C4:9B:DC:55:6C:8F:09:44:7F Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584F4974CB6C325E3FAD3F864480 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7489 IP address blocks: 23.133.0.0/24 maxlen: 24 202.5.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:cb:6c:32:5e:3f:ad:3f:86:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0b74a432-61d6-4b03-aa0a-5029fde73efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:2b:18:83:74:74:7f:b9:db:27:02:38:23: 90:7e:05:86:9f:b1:93:ff:45:f8:3a:13:e5:10:f2: ac:55:95:85:4c:b5:8c:de:c7:86:04:af:6a:d7:d8: bc:2c:4a:74:a0:e3:c1:a4:9f:da:33:a6:ae:5a:e7: dc:3d:c5:31:db:f2:4a:a6:a5:79:17:8c:5b:da:41: f8:aa:d7:17:60:9b:e7:02:d8:f5:0d:c4:94:53:8a: 45:b5:98:52:57:a3:e2:86:65:10:cc:0d:e6:bc:06: 60:cc:2d:66:4b:7f:fd:82:59:d4:5c:51:06:97:cd: 99:8c:98:75:38:e5:d8:14:0e:22:0b:3d:dd:60:07: 82:9a:e0:23:65:6e:f0:83:a4:11:9a:01:c2:f9:b7: c2:65:ae:66:fb:73:38:cf:b4:d9:6f:1a:c3:da:93: 94:48:93:a7:7d:c8:e7:a6:6a:6d:8e:6a:18:fb:b9: 0f:47:2d:57:e2:0d:76:8c:7e:7e:6a:7d:ef:01:7c: ec:ba:11:d6:05:fc:b5:52:fd:9d:7f:58:16:ec:6e: 6a:26:c6:8b:3f:d8:90:1c:0c:c0:a9:8d:53:22:6e: 6b:fc:dc:19:52:ec:7f:3b:f7:7b:21:72:42:64:e4: db:6b:7d:2b:3f:5a:11:5e:94:91:0a:07:64:3d:63: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:4A:5A:8A:18:52:76:37:6A:05:C4:9B:DC:55:6C:8F:09:44:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/d32c4d0b-ff22-3ce7-8796-58eb2e9e8671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.0.0/24 202.5.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:cf:93:ca:b3:00:63:77:85:7b:8e:0a:0f:bd:52:61:18:53: 71:d9:7d:15:9c:cf:c4:af:a5:bc:c7:e6:57:8a:82:42:c6:a9: e4:a1:93:b2:1a:a5:23:4c:f1:10:15:47:e5:42:21:c4:c3:0e: 06:c7:c0:e5:33:80:95:4e:cb:69:06:c1:81:12:f3:0f:92:c8: e9:0d:2e:ec:a8:87:6f:7e:46:39:ad:f9:47:d5:24:77:8e:4e: 76:eb:4a:8e:16:01:e5:32:09:ec:42:f0:c7:da:36:9b:25:df: a9:77:e5:72:04:06:46:b5:1a:65:28:0e:e8:cd:ae:24:fd:53: 6b:4f:ab:8c:a4:61:22:04:fb:3d:c4:f1:ec:65:e6:31:84:74: c8:fb:39:b6:93:a1:e7:67:c1:f3:ab:67:bb:1b:71:24:89:5a: 3f:e7:9f:f1:ed:aa:ea:09:4b:67:99:3e:3c:ed:63:68:48:ac: 0b:d6:6c:df:10:38:c0:88:c3:61:ce:5b:7a:1a:11:44:72:d7: 7a:1b:52:3b:d0:31:99:a0:68:bb:6b:33:15:d4:1f:96:62:7e: 9c:aa:62:c1:5f:46:a4:88:86:d0:7e:9c:e7:1f:25:1b:47:27: 40:9a:d3:e4:a5:77:b4:a7:e9:4f:07:c0:86:59:a1:d7:65:05: cc:4a:ff:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdMtsMl4/rT+GRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGI3NGE0MzItNjFkNi00YjAzLWFhMGEtNTAyOWZkZTczZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZcrGIN0dH+52ycCOCOQfgWGn7GT/0X4OhPl EPKsVZWFTLWM3seGBK9q19i8LEp0oOPBpJ/aM6auWufcPcUx2/JKpqV5F4xb2kH4 qtcXYJvnAtj1DcSUU4pFtZhSV6PihmUQzA3mvAZgzC1mS3/9glnUXFEGl82ZjJh1 OOXYFA4iCz3dYAeCmuAjZW7wg6QRmgHC+bfCZa5m+3M4z7TZbxrD2pOUSJOnfcjn pmptjmoY+7kPRy1X4g12jH5+an3vAXzsuhHWBfy1Uv2df1gW7G5qJsaLP9iQHAzA qY1TIm5r/NwZUux/O/d7IXJCZOTba30rP1oRXpSRCgdkPWMHCQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBPBSlqKGFJ2N2oFxJvcVWyPCUR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZDMyYzRkMGItZmYyMi0z Y2U3LTg3OTYtNThlYjJlOWU4NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4UAAwQA ygUdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAATPk8qzAGN3hXuOCg+9UmEYU3HZfRWcz8SvpbzH5leKgkLG qeShk7IapSNM8RAVR+VCIcTDDgbHwOUzgJVOy2kGwYES8w+SyOkNLuyoh29+Rjmt +UfVJHeOTnbrSo4WAeUyCexC8MfaNpsl36l35XIEBka1GmUoDujNriT9U2tPq4yk YSIE+z3E8exl5jGEdMj7ObaToednwfOrZ7sbcSSJWj/nn/HtquoJS2eZPjztY2hI rAvWbN8QOMCIw2HOW3oaEURy13obUjvQMZmgaLtrMxXUH5ZifpyqYsFfRqSIhtB+ nOcfJRtHJ0Ca0+Sld7Sn6U8HwIZZoddlBcxK/w8= -----END CERTIFICATE-----Generated at Fri Sep 25 05:19:31 2026 by rpki-client