$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8864e176-302d-3c93-9771-2b340f4b9db4.roa File: 8864e176-302d-3c93-9771-2b340f4b9db4.roa (raw, json) Hash identifier: c5ErB+1MEREonhHjAAtWAXa7aJVQ8KOXFGLU1qJmdNQ= Subject key identifier: B2:DE:34:87:71:97:34:A7:1D:97:22:30:5D:1D:E1:2A:20:40:7E:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCF355B5C529562BBA2800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8864e176-302d-3c93-9771-2b340f4b9db4.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 397196 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f3:55:b5:c5:29:56:2b:ba:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=1afbd92b-0221-4271-8950-ab32f084bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:86:99:f3:5b:f9:32:84:88:b7:33:29:b2: 01:3b:a8:1a:43:c4:61:31:2c:b7:26:35:85:62:d5: 23:a7:08:57:4d:d8:83:0d:c9:cf:65:00:e6:9f:8b: 45:bb:4f:5e:1c:42:57:ab:43:2b:a9:ff:59:fb:3b: 45:0c:00:49:1f:be:66:8d:74:7f:16:36:8c:36:86: 02:5a:4e:9e:e5:59:63:4b:b0:21:25:5d:74:0f:45: 1e:f9:d8:97:13:cb:84:cb:ad:24:74:2b:19:f6:79: 8b:9a:81:10:46:dd:e7:5e:e6:de:65:61:a0:bc:0b: cf:44:b5:47:3f:fd:cb:31:9d:cd:b9:2a:d6:61:20: be:fb:fd:3f:70:d6:60:89:62:64:ba:68:26:ba:4c: 15:a6:6e:5a:87:05:a5:1e:89:2e:95:74:15:42:e2: af:e0:b5:bd:76:9e:fa:a2:9a:a3:4e:8d:b8:16:7d: cd:49:ea:b8:58:2f:d4:25:db:30:8c:6f:c3:fd:b7: d4:38:9f:50:2a:a7:3c:6c:84:33:57:cc:fb:b4:63: 3e:86:89:f3:e7:3f:9f:36:c1:e5:1b:c0:cb:c9:06: c2:c2:67:7d:61:80:9b:35:b7:22:fd:dd:68:31:fe: f3:0f:f8:49:9f:5c:5a:14:98:98:80:a7:10:9c:02: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:34:87:71:97:34:A7:1D:97:22:30:5D:1D:E1:2A:20:40:7E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8864e176-302d-3c93-9771-2b340f4b9db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a0:12:eb:f6:08:3c:f0:95:6b:7b:84:ce:90:fb:e4:bb:4c: e1:70:71:67:07:31:59:ce:64:08:c2:f9:b7:28:f9:2a:cb:ca: fe:dc:f9:b1:86:f9:e2:de:bc:53:84:3f:97:97:89:c8:d1:53: af:08:5e:e0:03:62:82:9d:8d:e1:ec:67:83:33:43:9a:50:a6: 29:3c:af:6d:d4:d8:10:30:8d:37:02:72:5f:b6:ab:c2:20:86: b8:d8:cd:eb:32:16:25:1d:0d:62:0e:94:94:06:1e:2c:5c:97: 5d:31:24:08:9e:1c:e7:b0:9b:bb:d5:fc:ba:64:cc:4e:ad:5b: e0:70:71:e5:19:38:d3:af:27:ca:af:7d:e2:f8:a3:3d:b3:c7: 0b:10:7e:85:c4:d3:89:d2:42:ee:bc:d2:ea:21:79:0d:36:61: 87:91:5b:c6:8f:44:a8:03:d1:2d:a7:72:be:c7:9f:35:18:32: 12:52:be:29:0a:d8:3a:20:42:7d:d1:17:79:5d:62:dd:08:d8: cf:1f:e7:8c:dc:cd:2f:8a:68:b4:5e:5c:72:0a:68:63:4d:73: bb:84:38:65:ed:d5:2a:22:07:74:99:b0:8b:f8:51:a5:55:30: ea:95:6f:bf:e5:63:61:09:63:a4:ca:cd:f0:cf:cf:b7:01:9d: 6e:ad:08:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PNVtcUpViu6KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MWFmYmQ5MmItMDIyMS00MjcxLTg5NTAtYWIzMmYwODRiZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTGGmfNb+TKEiLczKbIBO6gaQ8RhMSy3JjWF YtUjpwhXTdiDDcnPZQDmn4tFu09eHEJXq0Mrqf9Z+ztFDABJH75mjXR/FjaMNoYC Wk6e5VljS7AhJV10D0Ue+diXE8uEy60kdCsZ9nmLmoEQRt3nXubeZWGgvAvPRLVH P/3LMZ3NuSrWYSC++/0/cNZgiWJkumgmukwVpm5ahwWlHokulXQVQuKv4LW9dp76 opqjTo24Fn3NSeq4WC/UJdswjG/D/bfUOJ9QKqc8bIQzV8z7tGM+honz5z+fNsHl G8DLyQbCwmd9YYCbNbci/d1oMf7zD/hJn1xaFJiYgKcQnAIgMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLeNIdxlzSnHZciMF0d4SogQH71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg2NGUxNzYtMzAyZC0z YzkzLTk3NzEtMmIzNDBmNGI5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADugEuv2CDzwlWt7hM6Q++S7TOFwcWcHMVnOZAjC+bco+SrLyv7c+bGG +eLevFOEP5eXicjRU68IXuADYoKdjeHsZ4MzQ5pQpik8r23U2BAwjTcCcl+2q8Ig hrjYzesyFiUdDWIOlJQGHixcl10xJAieHOewm7vV/LpkzE6tW+BwceUZONOvJ8qv feL4oz2zxwsQfoXE04nSQu680uoheQ02YYeRW8aPRKgD0S2ncr7HnzUYMhJSvikK 2DogQn3RF3ldYt0I2M8f54zczS+KaLReXHIKaGNNc7uEOGXt1SoiB3SZsIv4UaVV MOqVb7/lY2EJY6TKzfDPz7cBnW6tCOo= -----END CERTIFICATE-----Generated at Tue Sep 22 18:26:10 2026 by rpki-client