$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/13bfe39e-8a27-394c-9783-5ba2cad68de2.roa File: 13bfe39e-8a27-394c-9783-5ba2cad68de2.roa (raw, json) Hash identifier: knzckXQBMLKp555rKfhkTBd+83MvOFclDQXoPPJT0JA= Subject key identifier: 96:8F:71:9D:56:A5:10:4D:01:A0:58:4F:24:11:82:EB:57:84:19:BB Certificate issuer: /CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487 Certificate serial: 010D0C9F4328584F7088247B1DEFD68F5DA15CAC Authority key identifier: F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/13bfe39e-8a27-394c-9783-5ba2cad68de2.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 213159 IP address blocks: 23.139.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:24:7b:1d:ef:d6:8f:5d:a1:5c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=28a6a40b-cff2-43f4-8006-cdd4311a120c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:de:d4:d4:3e:f6:db:b0:ac:65:0d:f0:5a: 40:65:44:30:91:db:12:37:3f:b1:11:a3:23:21:a8: 2e:4a:c6:a2:83:e6:80:59:c8:94:39:55:e5:be:9a: db:02:76:b2:2c:fe:be:85:4f:2b:7e:35:3b:4b:57: 46:68:e5:64:3d:e8:c1:0e:05:ca:93:dc:fa:50:c2: d4:1f:35:19:87:82:dd:df:e3:ce:5e:1d:ce:76:19: f6:da:ca:af:90:68:91:96:fc:9a:bf:b0:99:c8:ab: 3b:20:6e:44:66:0c:ee:dd:09:dc:d7:2f:06:63:e0: cb:8e:bd:b4:16:58:47:b4:8c:c0:61:3d:3e:2e:d8: e0:85:1c:d6:ce:1a:32:2a:48:8e:e6:11:35:31:93: c1:70:90:0f:11:f7:78:35:1a:81:e6:49:0d:d9:f9: 8c:b0:63:ae:db:e6:11:8d:4a:89:0c:5d:39:82:37: ae:3a:51:ec:86:55:5b:20:63:92:d7:ee:8e:59:52: e1:93:5f:b0:3c:6b:c6:bd:97:47:e4:3a:af:02:ac: ef:56:62:d9:f1:42:05:a2:84:7c:2e:d5:1d:33:ce: 03:2f:18:4e:7d:27:1d:fa:f4:74:f0:45:a7:ce:cf: a5:fa:ac:41:b8:4c:10:ae:a1:30:9a:2b:ff:19:9d: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:71:9D:56:A5:10:4D:01:A0:58:4F:24:11:82:EB:57:84:19:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/13bfe39e-8a27-394c-9783-5ba2cad68de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl X509v3 Authority Key Identifier: keyid:F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer sbgp-ipAddrBlock: critical IPv4: 23.139.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:39:04:67:f2:b5:63:6c:26:f8:d2:ae:a2:e6:08:a3:3b:60: c9:4a:26:3f:0e:8a:63:28:28:8f:ea:31:91:ae:88:35:c5:a4: 24:a1:fe:1f:0b:2c:15:2d:7b:15:a3:0c:45:2e:35:1e:ef:f6: 88:69:f0:6c:49:ad:68:89:e9:88:13:2a:3e:1e:5e:7e:49:82: ad:21:86:57:a6:5b:47:49:e2:ad:4f:45:3b:f8:63:e6:c2:00: d8:ce:a7:a8:ab:b1:b8:e6:a9:14:61:2b:b4:da:97:61:0f:ce: d0:ce:f9:7e:42:fb:01:8b:f7:b0:96:e8:eb:82:71:c6:9d:b1: f4:17:c4:3b:39:ed:bb:28:db:ee:9d:b3:3b:a6:14:80:a5:41: cb:1a:bc:ab:b4:67:f2:10:06:f4:2f:56:f9:e3:63:cc:36:f4: d8:45:11:6d:00:39:c9:20:a5:88:b4:2d:62:ba:93:a5:bb:59: 45:2f:76:cd:77:c1:41:4c:fa:5f:b1:f0:f6:32:50:04:e6:d3: cb:b4:e8:e6:3c:ea:ec:de:97:ea:df:b3:d5:2d:ed:49:4b:34: a0:88:db:8d:ac:00:29:6a:36:65:f6:b6:24:4f:4a:74:f7:39: 7f:78:30:46:93:e7:de:26:95:8d:88:60:eb:c6:98:91:53:7d: 19:58:40:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiCR7He/Wj12hXKwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJjYmRhZjYtZTUyOC00YTE0LTllNDktZWJmZGQ1NjZj NDg3MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk MjhhNmE0MGItY2ZmMi00M2Y0LTgwMDYtY2RkNDMxMWExMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzne1NQ+9tuwrGUN8FpAZUQwkdsSNz+xEaMj IaguSsaig+aAWciUOVXlvprbAnayLP6+hU8rfjU7S1dGaOVkPejBDgXKk9z6UMLU HzUZh4Ld3+POXh3Odhn22sqvkGiRlvyav7CZyKs7IG5EZgzu3Qnc1y8GY+DLjr20 FlhHtIzAYT0+LtjghRzWzhoyKkiO5hE1MZPBcJAPEfd4NRqB5kkN2fmMsGOu2+YR jUqJDF05gjeuOlHshlVbIGOS1+6OWVLhk1+wPGvGvZdH5DqvAqzvVmLZ8UIFooR8 LtUdM84DLxhOfScd+vR08EWnzs+l+qxBuEwQrqEwmiv/GZ0bwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaPcZ1WpRBNAaBYTyQRgutXhBm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMmNi ZGFmNi1lNTI4LTRhMTQtOWU0OS1lYmZkZDU2NmM0ODcvMTNiZmUzOWUtOGEyNy0z OTRjLTk3ODMtNWJhMmNhZDY4ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzJjYmRhZjYtZTUyOC00YTE0LTll NDktZWJmZGQ1NjZjNDg3LzMyY2JkYWY2LWU1MjgtNGExNC05ZTQ5LWViZmRkNTY2 YzQ4Ny5jcmwwHwYDVR0jBBgwFoAU9FttUn2s37NqM4CuTn4NdkgwXlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zMmNiZGFmNi1lNTI4LTRhMTQtOWU0OS1lYmZk ZDU2NmM0ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM5BGfytWNsJvjSrqLmCKM7YMlKJj8OimMoKI/qMZGuiDXFpCSh/h8L LBUtexWjDEUuNR7v9ohp8GxJrWiJ6YgTKj4eXn5Jgq0hhlemW0dJ4q1PRTv4Y+bC ANjOp6irsbjmqRRhK7Tal2EPztDO+X5C+wGL97CW6OuCccadsfQXxDs57bso2+6d szumFIClQcsavKu0Z/IQBvQvVvnjY8w29NhFEW0AOckgpYi0LWK6k6W7WUUvds13 wUFM+l+x8PYyUATm08u06OY86uzel+rfs9Ut7UlLNKCI242sAClqNmX2tiRPSnT3 OX94MEaT594mlY2IYOvGmJFTfRlYQH0= -----END CERTIFICATE-----Generated at Fri Oct 30 13:51:06 2026 by rpki-client