$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa File: d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa (raw, json) Hash identifier: 5Ba4mLG/otMFOe4ChJZsd6vjDHwhGpPyFRojmQgXRe4= Subject key identifier: 22:A8:2E:7E:1C:61:C0:10:33:27:93:B3:7B:D7:C7:60:29:A8:29:D4 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584CACF1C20BF02C5F927A187800 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 133462 IP address blocks: 192.91.108.0/24 maxlen: 24 192.91.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c2:0b:f0:2c:5f:92:7a:18:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=d4538b3c-94a5-4800-a646-4b714a16458e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c5:73:00:12:9c:73:fb:b6:1a:94:01:ea:f4: 18:2f:52:fc:68:25:41:32:16:04:cb:86:ed:dd:a8: 1b:6a:a8:1b:ae:de:61:27:6e:10:43:1e:47:b4:ee: a9:80:bd:78:cb:f9:3d:16:5e:ae:60:1e:f9:ac:90: cc:a1:31:4d:b0:18:09:5b:82:af:26:66:26:f8:d6: 88:1b:3a:7e:b7:05:58:31:91:65:13:62:33:25:f4: 20:3e:6d:6d:98:80:56:74:84:04:ee:60:17:ec:2b: 96:14:29:e5:f7:9a:3a:e5:1a:28:53:50:ec:b7:1c: f2:28:38:f8:35:3f:f6:e4:e8:ab:9f:3a:11:b0:6c: 38:2b:a0:06:8b:8f:99:20:6e:f9:f8:59:35:72:30: d9:f7:ff:18:87:e3:08:24:00:14:1c:68:22:7b:37: 51:bc:86:88:dc:2f:e5:5b:02:ea:b5:cb:e7:98:e1: de:7b:d7:bf:c6:f3:1d:82:ac:ce:b2:fb:f0:1c:a7: 0b:53:4c:a5:48:f4:8e:6d:6f:3e:f0:d6:4e:e6:cc: df:bf:82:5e:4b:21:49:03:88:9c:0f:c1:4d:ea:85: 69:15:47:aa:9a:cb:ae:a3:93:24:3f:aa:c0:2e:bb: 07:c4:94:6f:86:23:5a:19:d4:39:26:62:64:c6:fa: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A8:2E:7E:1C:61:C0:10:33:27:93:B3:7B:D7:C7:60:29:A8:29:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.91.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c0:00:e1:c8:67:0b:94:96:38:6c:ae:83:37:9a:f2:8c:1d: f4:12:4f:10:f4:bf:d3:4b:c0:fd:d7:49:40:e3:45:82:35:4b: 08:ef:47:fa:d0:04:9d:7e:84:37:bd:07:8f:e5:d0:f7:ee:c1: 1f:4d:54:f3:15:bb:e0:e0:85:0b:c7:74:e1:ce:d6:29:09:44: a5:98:00:08:98:4a:8f:b4:d1:11:aa:11:d2:34:a4:96:22:e9: dd:8a:86:3c:fd:38:02:19:6b:eb:4c:16:3c:51:9d:91:7b:fa: 0f:b5:82:49:86:10:77:05:4b:42:b6:24:8e:29:e3:2a:13:dd: e0:42:93:23:7e:35:4d:f9:26:a3:ea:c8:31:48:93:80:ba:a7: b4:2c:2e:ee:d6:72:ae:8f:64:c6:ec:9b:54:17:e4:81:8e:0c: 71:5d:b0:78:9c:af:da:e9:90:51:33:74:70:00:79:41:12:75: a3:b1:16:bb:fe:d9:3b:e0:0e:5c:d2:68:80:21:2f:4b:09:8c: 2a:42:08:c7:cd:29:35:ac:ca:b5:65:6e:a1:db:da:1a:a7:4c: 8d:0d:67:be:78:28:cb:69:5b:fa:28:8d:84:93:f8:db:40:1d: d8:46:b8:c4:f9:6e:7a:ae:78:e5:b8:39:e6:e8:e8:01:bf:08: 4c:c2:da:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cIL8CxfknoYeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZDQ1MzhiM2MtOTRhNS00ODAwLWE2NDYtNGI3MTRhMTY0NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cVzABKcc/u2GpQB6vQYL1L8aCVBMhYEy4bt 3agbaqgbrt5hJ24QQx5HtO6pgL14y/k9Fl6uYB75rJDMoTFNsBgJW4KvJmYm+NaI Gzp+twVYMZFlE2IzJfQgPm1tmIBWdIQE7mAX7CuWFCnl95o65RooU1DstxzyKDj4 NT/25OirnzoRsGw4K6AGi4+ZIG75+Fk1cjDZ9/8Yh+MIJAAUHGgiezdRvIaI3C/l WwLqtcvnmOHee9e/xvMdgqzOsvvwHKcLU0ylSPSObW8+8NZO5szfv4JeSyFJA4ic D8FN6oVpFUeqmsuuo5MkP6rALrsHxJRvhiNaGdQ5JmJkxvoifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKoLn4cYcAQMyeTs3vXx2ApqCnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvZDNjYzljYzctZDZjYi0z NjcyLWJjY2UtMWE0MzdjMzRkNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLAAOHIZwuUljhsroM3mvKMHfQSTxD0v9NLwP3XSUDjRYI1SwjvR/rQ BJ1+hDe9B4/l0PfuwR9NVPMVu+DghQvHdOHO1ikJRKWYAAiYSo+00RGqEdI0pJYi 6d2Khjz9OAIZa+tMFjxRnZF7+g+1gkmGEHcFS0K2JI4p4yoT3eBCkyN+NU35JqPq yDFIk4C6p7QsLu7Wcq6PZMbsm1QX5IGODHFdsHicr9rpkFEzdHAAeUESdaOxFrv+ 2TvgDlzSaIAhL0sJjCpCCMfNKTWsyrVlbqHb2hqnTI0NZ754KMtpW/oojYST+NtA HdhGuMT5bnqueOW4Oebo6AG/CEzC2oY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:34:40 2026 by rpki-client