$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa File: 3570b9a2-7257-34c2-8ad6-93b2c8045343.roa (raw, json) Hash identifier: oklS+bzRQqih7Ss5vMoawR+rExDgePPKqY1cjR7aUXs= Subject key identifier: 45:81:00:AF:88:DC:1A:32:6C:A8:DD:CC:C7:B3:02:CC:B6:BF:BA:FB Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584EA78833281AA9286A793E7F70 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 4812 IP address blocks: 192.163.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:33:28:1a:a9:28:6a:79:3e:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=62f597ce-2790-4957-beb6-50295710fa35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:69:2a:87:7a:f9:c1:c3:ba:48:df:0c:93: 20:a7:e6:a5:24:73:57:df:c4:3d:fd:53:df:93:ad: 84:21:05:0d:9c:1d:95:7d:a7:9d:68:53:fd:a2:59: fa:16:f4:c0:9c:19:ed:c2:8e:f1:93:69:4d:dd:2e: 77:e5:2a:0b:62:e7:3e:f3:b5:02:26:81:a8:af:c5: 0b:13:52:b9:d4:9a:22:6e:18:b4:14:6c:49:b2:28: 3e:76:cb:b0:82:ac:b3:31:24:ac:77:36:5d:9e:da: 36:85:89:99:cb:ee:05:9b:e0:90:07:e0:bb:d0:cb: f5:2c:31:fb:17:31:42:b5:df:7f:89:01:04:15:c5: 77:9a:01:1c:6e:a5:e6:1a:e4:ad:21:60:54:fd:2d: aa:da:b8:f6:6f:a7:98:87:a0:e9:2e:1e:a4:4c:7a: 80:b3:74:16:0f:69:71:68:fd:84:d1:bf:a7:c2:a3: 9b:d2:44:83:d1:3f:90:40:ba:9e:09:62:ee:3e:f2: c9:39:e9:12:8e:0a:9d:75:e9:ac:30:1c:2c:eb:18: a5:43:cb:02:97:65:38:e1:22:d0:10:9b:02:ec:63: 76:8a:c6:62:2c:ab:2a:95:65:16:69:83:d7:9b:f5: 28:3e:ff:c3:b4:f5:d3:2c:3e:91:90:ca:4c:08:a6: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:00:AF:88:DC:1A:32:6C:A8:DD:CC:C7:B3:02:CC:B6:BF:BA:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7c:73:55:25:a8:98:5a:d2:53:7e:4d:ca:95:3e:81:28:af: dc:8b:9f:53:96:64:70:eb:29:2a:24:43:d3:96:ec:29:b5:e5: 0c:22:44:6e:ce:c6:35:5f:26:0c:09:58:88:a7:2d:be:0e:08: 21:99:f9:46:65:cb:dc:6f:00:fc:59:1a:bf:2d:59:43:84:e7: 4b:20:50:c1:01:86:fb:45:41:d8:4d:7a:68:8c:cd:bd:a7:e5: fc:24:b5:b8:07:0f:1b:d8:c6:9f:e4:66:fd:72:fb:ce:e4:3c: 6c:85:64:c4:df:a5:8c:1f:c2:77:c1:a0:dc:7f:85:48:b2:ab: c5:5b:88:b0:db:bd:c1:f2:0a:61:52:f1:ef:2f:6f:bd:97:22: 36:b4:42:67:62:04:a9:f3:51:b6:7b:98:7b:a9:82:8d:5c:f7: 95:82:e4:18:e8:7b:0a:f0:40:75:80:f6:8f:15:80:3e:85:31: cb:8f:17:53:2f:3b:9e:22:36:e2:e4:91:ce:96:c0:13:fa:79: 56:24:ac:4b:8d:fc:6f:4e:ba:5a:c6:ae:25:f6:52:3d:81:b1: f8:57:c6:db:07:3e:b2:41:9a:82:22:3e:af:88:48:46:6f:70: 34:ed:e0:75:c5:81:be:26:2a:a9:3a:9a:ba:b3:b6:43:4c:c4: 4b:19:63:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niDMoGqkoank+f3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjJmNTk3Y2UtMjc5MC00OTU3LWJlYjYtNTAyOTU3MTBmYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf5pKod6+cHDukjfDJMgp+alJHNX38Q9/VPf k62EIQUNnB2VfaedaFP9oln6FvTAnBntwo7xk2lN3S535SoLYuc+87UCJoGor8UL E1K51Joibhi0FGxJsig+dsuwgqyzMSSsdzZdnto2hYmZy+4Fm+CQB+C70Mv1LDH7 FzFCtd9/iQEEFcV3mgEcbqXmGuStIWBU/S2q2rj2b6eYh6DpLh6kTHqAs3QWD2lx aP2E0b+nwqOb0kSD0T+QQLqeCWLuPvLJOekSjgqddemsMBws6xilQ8sCl2U44SLQ EJsC7GN2isZiLKsqlWUWaYPXm/UoPv/DtPXTLD6RkMpMCKZPtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWBAK+I3BoybKjdzMezAsy2v7r7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvMzU3MGI5YTItNzI1Ny0z NGMyLThhZDYtOTNiMmM4MDQ1MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV8c1UlqJha0lN+TcqVPoEor9yLn1OWZHDrKSokQ9OW7Cm15QwiRG7O xjVfJgwJWIinLb4OCCGZ+UZly9xvAPxZGr8tWUOE50sgUMEBhvtFQdhNemiMzb2n 5fwktbgHDxvYxp/kZv1y+87kPGyFZMTfpYwfwnfBoNx/hUiyq8VbiLDbvcHyCmFS 8e8vb72XIja0QmdiBKnzUbZ7mHupgo1c95WC5BjoewrwQHWA9o8VgD6FMcuPF1Mv O54iNuLkkc6WwBP6eVYkrEuN/G9OulrGriX2Uj2BsfhXxtsHPrJBmoIiPq+ISEZv cDTt4HXFgb4mKqk6mrqztkNMxEsZY5U= -----END CERTIFICATE-----Generated at Wed Jul 29 08:18:25 2026 by rpki-client