$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/686c395c-54ad-31c1-96df-b204d2205313.roa File: 686c395c-54ad-31c1-96df-b204d2205313.roa (raw, json) Hash identifier: K37WnIZZ0tkplvCXWcXhLvWEp1KLtxkDSDuFwL0wmmU= Subject key identifier: 35:02:DE:C7:11:29:30:65:80:B1:78:B3:CC:86:53:60:71:F4:6F:B2 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584F4975DAC2D49206B38FAD158B Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/686c395c-54ad-31c1-96df-b204d2205313.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 965 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:da:c2:d4:92:06:b3:8f:ad:15:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0310e951-e580-4268-a479-091ee9600081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:54:27:84:f4:da:c7:6c:05:7d:37:50:fb: fe:9f:b2:30:0a:80:c2:d1:c5:08:16:81:96:b6:27: 74:6a:e4:04:5e:d7:d9:16:37:52:48:60:64:a4:46: a8:4e:cf:3e:4d:b1:65:e0:d0:f8:ae:ee:28:1e:d9: 42:20:20:53:14:09:95:d8:37:d9:8b:8f:8d:1c:02: f7:ad:d4:04:28:7e:b7:71:6c:18:84:25:9d:6a:23: 92:6c:6b:47:65:15:16:dd:08:d1:3b:51:54:3f:d3: a3:9f:ec:40:9f:f3:4a:d5:43:9c:10:ec:64:6f:ce: c8:6a:ba:ac:21:30:cf:e9:7a:46:fb:4a:15:3f:7a: 2b:be:4f:4c:df:4a:4d:f7:2a:4b:d6:2f:d4:73:c4: 53:ff:91:15:d8:ae:65:5d:44:7b:e2:ee:33:9c:de: 70:5d:62:a1:b9:3c:05:35:c7:9e:f4:58:07:2b:7b: 66:f4:db:7d:6a:5f:a9:54:c9:c4:be:10:c9:c7:02: 0e:ed:33:53:1d:95:64:64:d2:9c:f2:9c:f9:1f:b0: f8:12:f1:7c:c8:e2:7e:92:fa:38:d5:3a:3e:e7:77: c6:b2:8d:aa:a5:1f:5c:77:62:e8:bb:4a:bc:e5:bb: aa:b2:d8:10:a4:a5:73:03:db:77:2c:07:26:42:fb: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:02:DE:C7:11:29:30:65:80:B1:78:B3:CC:86:53:60:71:F4:6F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/686c395c-54ad-31c1-96df-b204d2205313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:76:6b:62:56:0d:01:22:1b:9d:8b:9a:e7:15:b2:3e:e7:99: 7f:95:33:fb:cc:d4:b9:7b:75:55:71:99:2e:89:98:79:80:35: 7a:79:83:95:65:71:38:84:15:e9:c2:5d:77:b3:b2:65:8f:06: 79:4f:67:d1:7a:04:2f:81:46:7c:5f:9b:34:d4:93:2c:c7:7c: 75:97:54:ee:ab:59:0e:f0:4d:02:46:39:db:5e:a9:f3:e1:55: 3e:46:13:e4:ee:3d:35:bf:8a:d2:a7:53:28:ce:06:98:98:be: 8b:74:ac:2e:5a:9f:8a:6e:f7:dd:ed:09:17:a3:66:69:1d:ea: 98:39:3a:63:a8:50:4f:70:62:ae:fe:fd:68:4d:f9:51:c2:55: ed:3a:6a:ef:19:4e:bd:5f:ef:14:fe:cd:4b:20:1e:37:3c:e8: 59:4c:e8:eb:87:d1:5b:65:ab:af:fe:1b:bc:f7:30:51:96:1c: dd:bb:44:2e:46:ac:a2:8f:d9:65:9e:44:8e:e7:da:19:9e:e1: 6d:a7:9d:b0:6f:9a:60:5e:10:5b:8e:be:c4:04:d9:23:de:6b: 90:6d:75:52:bf:48:90:b2:4c:06:21:eb:ca:9e:c1:51:dd:00: 6e:40:3c:50:4b:e4:70:81:12:4c:43:c5:23:4a:a2:bc:68:c1: 31:d9:8a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddrC1JIGs4+tFYswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDMxMGU5NTEtZTU4MC00MjY4LWE0NzktMDkxZWU5NjAwMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPRUJ4T02sdsBX03UPv+n7IwCoDC0cUIFoGW tid0auQEXtfZFjdSSGBkpEaoTs8+TbFl4ND4ru4oHtlCICBTFAmV2DfZi4+NHAL3 rdQEKH63cWwYhCWdaiOSbGtHZRUW3QjRO1FUP9Ojn+xAn/NK1UOcEOxkb87Iarqs ITDP6XpG+0oVP3orvk9M30pN9ypL1i/Uc8RT/5EV2K5lXUR74u4znN5wXWKhuTwF Ncee9FgHK3tm9Nt9al+pVMnEvhDJxwIO7TNTHZVkZNKc8pz5H7D4EvF8yOJ+kvo4 1To+53fGso2qpR9cd2Lou0q85buqstgQpKVzA9t3LAcmQvthlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUC3scRKTBlgLF4s8yGU2Bx9G+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNjg2YzM5NWMtNTRhZC0z MWMxLTk2ZGYtYjIwNGQyMjA1MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt2a2JWDQEiG52LmucVsj7nmX+VM/vM1Ll7dVVxmS6JmHmANXp5g5Vl cTiEFenCXXezsmWPBnlPZ9F6BC+BRnxfmzTUkyzHfHWXVO6rWQ7wTQJGOdteqfPh VT5GE+TuPTW/itKnUyjOBpiYvot0rC5an4pu993tCRejZmkd6pg5OmOoUE9wYq7+ /WhN+VHCVe06au8ZTr1f7xT+zUsgHjc86FlM6OuH0Vtlq6/+G7z3MFGWHN27RC5G rKKP2WWeRI7n2hme4W2nnbBvmmBeEFuOvsQE2SPea5BtdVK/SJCyTAYh68qewVHd AG5APFBL5HCBEkxDxSNKorxowTHZikg= -----END CERTIFICATE-----Generated at Thu Oct 8 20:14:09 2026 by rpki-client