$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa File: 4646c58c-7f13-3a17-940a-37378358232c.roa (raw, json) Hash identifier: 0CQCQKVibUz0DX5hHHvo19v1QZcB/l0IkiUMXJRbGns= Subject key identifier: C6:28:9F:87:55:1A:90:87:D2:0E:08:53:56:19:20:D1:32:B5:38:73 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584F42781E65F90D71FE23558900 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 10506 IP address blocks: 168.99.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1e:65:f9:0d:71:fe:23:55:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=35c630f6-59ef-43ab-a74b-5b166ba56183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:5e:b1:a9:81:d3:11:61:76:e2:89:25:da: 7e:3a:2c:64:cd:31:19:ed:63:c0:0c:12:6b:aa:f4: ac:57:2d:4f:77:c1:e4:49:c6:cb:24:84:31:50:cb: 09:0b:5e:de:d1:76:d7:42:79:8a:a4:0a:2c:43:25: c7:80:fb:f7:ad:1a:4d:f9:50:60:76:50:22:95:a0: ed:53:b7:0b:16:b5:96:5d:c7:08:37:09:b3:36:d7: 21:1f:4d:0c:70:f6:23:b4:6d:56:df:59:9e:03:35: 00:a7:02:2c:1c:9d:11:9f:90:f4:7b:1e:38:9b:dc: 54:35:17:de:82:00:5e:d5:00:3c:a7:f4:aa:ec:b3: ac:82:94:91:45:9a:12:d6:48:4b:29:ce:a5:3b:ef: 34:36:54:5d:bb:e9:3d:08:26:4f:9d:67:04:ad:36: d5:c5:ae:09:fd:bd:4a:6c:26:3e:fe:b4:6a:1c:dc: 86:23:21:1d:26:7b:41:d2:b9:53:36:1f:95:d4:0a: e8:a0:52:68:6c:bc:c0:96:b1:05:e3:55:ed:80:99: 67:ad:e7:b0:5e:16:99:8b:f0:c7:62:d6:f4:15:e9: f8:8c:ed:10:80:f6:bb:0e:6b:09:bf:a4:96:86:62: b0:b5:58:cc:5f:9a:87:39:6e:52:32:c5:ca:56:61: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:28:9F:87:55:1A:90:87:D2:0E:08:53:56:19:20:D1:32:B5:38:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 168.99.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:dc:80:29:81:73:d3:6a:3c:62:62:d4:95:24:94:6f:85:b3: c9:66:c0:64:b6:40:f3:40:6a:9b:2e:37:c8:4e:e1:4b:ff:cf: 4b:d2:ab:9c:29:eb:31:1b:9b:4b:72:2b:8a:4a:b7:5f:73:23: b3:a9:12:49:db:8c:5d:e5:a2:2d:9e:3e:78:8d:5f:4c:7d:5e: 2b:3d:e5:28:b2:b5:34:f9:4e:61:10:c2:a9:e1:45:aa:79:d9: d3:10:b3:8d:79:ed:61:bf:26:28:7e:a1:36:e1:60:fe:7a:72: c1:f8:97:19:6b:6d:45:17:ba:e3:b1:cf:18:44:fb:c9:77:5a: aa:79:e9:68:0a:e9:86:d0:89:61:1a:ea:fa:1e:05:8d:31:55: 0f:30:8e:2f:b1:78:77:fd:42:7b:61:41:18:15:8e:29:f4:65: 4f:5e:78:d9:fa:27:3e:2a:e8:f1:58:0b:ac:e5:49:d5:8f:4a: fb:93:b7:22:8b:fa:3e:22:ec:3e:57:f7:3a:9c:45:ce:51:08: 62:8e:cf:00:4e:e6:d9:a1:1a:6f:08:75:16:d8:d8:5b:56:06: c6:e0:22:da:42:2f:95:fc:55:8a:fb:f2:a5:80:3d:50:9d:73: 29:de:de:bd:6c:a0:5b:7e:12:89:1d:86:4f:91:ed:d6:e2:7a: ee:6f:03:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeB5l+Q1x/iNViQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzVjNjMwZjYtNTllZi00M2FiLWE3NGItNWIxNjZiYTU2MTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNJesamB0xFhduKJJdp+OixkzTEZ7WPADBJr qvSsVy1Pd8HkScbLJIQxUMsJC17e0XbXQnmKpAosQyXHgPv3rRpN+VBgdlAilaDt U7cLFrWWXccINwmzNtchH00McPYjtG1W31meAzUApwIsHJ0Rn5D0ex44m9xUNRfe ggBe1QA8p/Sq7LOsgpSRRZoS1khLKc6lO+80NlRdu+k9CCZPnWcErTbVxa4J/b1K bCY+/rRqHNyGIyEdJntB0rlTNh+V1ArooFJobLzAlrEF41XtgJlnreewXhaZi/DH Ytb0Fen4jO0QgPa7DmsJv6SWhmKwtVjMX5qHOW5SMsXKVmEEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYon4dVGpCH0g4IU1YZINEytThzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNDY0NmM1OGMtN2YxMy0z YTE3LTk0MGEtMzczNzgzNTgyMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqGMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPcgCmBc9NqPGJi1JUklG+Fs8lmwGS2QPNAapsuN8hO4Uv/z0vSq5wp 6zEbm0tyK4pKt19zI7OpEknbjF3loi2ePniNX0x9Xis95SiytTT5TmEQwqnhRap5 2dMQs4157WG/Jih+oTbhYP56csH4lxlrbUUXuuOxzxhE+8l3Wqp56WgK6YbQiWEa 6voeBY0xVQ8wji+xeHf9QnthQRgVjin0ZU9eeNn6Jz4q6PFYC6zlSdWPSvuTtyKL +j4i7D5X9zqcRc5RCGKOzwBO5tmhGm8IdRbY2FtWBsbgItpCL5X8VYr78qWAPVCd cyne3r1soFt+Eokdhk+R7dbieu5vA3w= -----END CERTIFICATE-----Generated at Thu Sep 24 18:20:27 2026 by rpki-client