$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa File: 3ca46559-d881-37b1-a497-2d37eac333b4.roa (raw, json) Hash identifier: Jn7sI6vpfMn1Ht6k+KZ6pbJ0TuodH2u74cF8YoLxSs8= Subject key identifier: B7:F0:7E:53:E5:C9:19:FF:15:D9:D3:C2:4A:11:16:00:9A:B5:6F:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F02422DB3E16DB05CD4327E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 20940 IP address blocks: 23.32.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2d:b3:e1:6d:b0:5c:d4:32:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=4bdb7969-9e39-48f4-ad9c-b3d79bf34544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ac:c1:a1:db:c3:6c:c0:d0:6f:99:37:8a:64: 91:5a:1a:29:ac:c3:44:17:f0:33:dd:bb:37:55:90: 3c:f5:95:5a:fe:69:d9:e1:5c:cd:35:66:4a:92:5a: 94:52:01:e4:1d:00:5c:5f:cb:67:e5:b8:4d:ae:16: 7f:53:a0:0f:57:e8:6c:ab:5a:19:01:50:46:c0:66: c2:d8:d9:3d:58:ff:83:9b:06:6a:aa:e2:96:97:c7: f9:51:5f:5a:29:52:a4:61:fa:ee:6d:72:40:0f:05: 20:dc:f1:14:b3:fa:32:ad:a6:4b:8a:3d:4e:af:75: a7:84:ac:38:9d:e8:4d:c5:36:2d:9b:ec:d6:39:9d: 91:0d:f9:fd:6e:e9:dc:03:53:90:a7:a1:de:39:df: ab:ca:e9:3b:9e:44:46:91:3f:68:ad:6c:52:5e:ac: 3c:a4:4f:d3:aa:03:68:50:32:13:28:d5:41:a2:e2: bc:c7:3b:f7:78:d6:9b:bd:7a:36:02:d5:2e:13:00: db:36:a9:cb:2d:ae:8d:ac:db:b2:41:ef:32:65:01: ae:ee:90:b5:34:6c:fa:1c:ba:07:57:f9:97:1a:19: 93:c4:c8:c7:d8:5a:55:3e:68:58:90:93:5e:32:d8: 7a:9f:bb:a6:42:db:cd:b8:96:d4:5e:b2:96:e6:ff: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F0:7E:53:E5:C9:19:FF:15:D9:D3:C2:4A:11:16:00:9A:B5:6F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b5:21:0d:a8:9e:57:48:20:a8:f7:12:7e:5e:ae:bc:dd:fa: 89:8f:db:a2:c3:ce:ce:da:df:4b:5c:f0:fb:1e:76:d5:9d:aa: 93:7a:0e:f1:68:54:bf:5d:90:40:6f:c0:ed:30:d8:11:b3:44: a6:8b:20:b3:90:d4:8f:65:50:1c:c0:49:8f:a7:40:1f:21:36: 1e:1f:89:29:96:91:ed:c0:72:aa:bc:c8:7b:21:ff:cf:d9:9f: 2c:47:fe:5d:d4:c1:22:8d:4e:07:ba:a9:a6:94:5b:6e:5f:f4: 46:04:6c:8b:32:47:1b:34:73:49:4d:d4:af:b9:e4:12:4a:dc: f6:80:7a:e6:65:6d:2b:4f:b4:98:c0:c3:a0:76:fc:24:05:21: b2:c5:76:d1:85:68:e8:cd:c9:59:53:78:cf:d5:c5:e7:f2:7d: 7b:c4:4e:23:54:2a:0b:a1:b9:9d:f1:1a:26:d8:cc:df:45:d0: 02:eb:c8:04:f3:74:d7:a3:0d:ea:b2:8b:c1:7b:aa:0c:5f:82: 49:47:47:63:f6:4a:b6:7c:63:ff:5a:61:8e:3f:5a:26:f4:2a: b3:47:a1:8d:27:fb:d5:b3:45:10:bc:d8:ad:c9:9d:6d:ae:91: 99:0a:7f:46:0a:67:6f:ff:47:08:d1:6e:30:b5:be:44:ea:c4: 41:18:1b:36 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8CQi2z4W2wXNQyfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NGJkYjc5NjktOWUzOS00OGY0LWFkOWMtYjNkNzliZjM0NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqzBodvDbMDQb5k3imSRWhoprMNEF/Az3bs3 VZA89ZVa/mnZ4VzNNWZKklqUUgHkHQBcX8tn5bhNrhZ/U6APV+hsq1oZAVBGwGbC 2Nk9WP+DmwZqquKWl8f5UV9aKVKkYfrubXJADwUg3PEUs/oyraZLij1Or3WnhKw4 nehNxTYtm+zWOZ2RDfn9buncA1OQp6HeOd+ryuk7nkRGkT9orWxSXqw8pE/TqgNo UDITKNVBouK8xzv3eNabvXo2AtUuEwDbNqnLLa6NrNuyQe8yZQGu7pC1NGz6HLoH V/mXGhmTxMjH2FpVPmhYkJNeMth6n7umQtvNuJbUXrKW5v/5lQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLfwflPlyRn/FdnTwkoRFgCatW+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NhNDY1NTktZDg4MS0z N2IxLWE0OTctMmQzN2VhYzMzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFFyAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAL7UhDaieV0ggqPcSfl6uvN36iY/bosPOztrfS1zw+x521Z2qk3oO8WhU v12QQG/A7TDYEbNEposgs5DUj2VQHMBJj6dAHyE2Hh+JKZaR7cByqrzIeyH/z9mf LEf+XdTBIo1OB7qpppRbbl/0RgRsizJHGzRzSU3Ur7nkEkrc9oB65mVtK0+0mMDD oHb8JAUhssV20YVo6M3JWVN4z9XF5/J9e8ROI1QqC6G5nfEaJtjM30XQAuvIBPN0 16MN6rKLwXuqDF+CSUdHY/ZKtnxj/1phjj9aJvQqs0ehjSf71bNFELzYrcmdba6R mQp/Rgpnb/9HCNFuMLW+ROrEQRgbNg== -----END CERTIFICATE-----Generated at Sat Sep 5 01:27:39 2026 by rpki-client