$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3431c3e0-8aa7-33aa-9332-a6774b26a267.roa File: 3431c3e0-8aa7-33aa-9332-a6774b26a267.roa (raw, json) Hash identifier: MXA219MhiiGAMCwnXWupvbJYTMBnwkEiIMft0PWgVBU= Subject key identifier: 25:1D:02:CB:3B:4E:D7:82:6F:C9:92:89:9F:4E:9B:C5:66:DE:48:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E779A212195146D57601418C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3431c3e0-8aa7-33aa-9332-a6774b26a267.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 27544 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:21:21:95:14:6d:57:60:14:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=b9230c70-323d-4542-9452-fb7acd63dfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:4e:da:ae:d6:bf:89:47:00:a3:a6:b4:c3: e9:9f:93:00:5b:06:99:b9:db:69:0a:77:4b:54:fd: 89:d3:05:4a:44:d3:b2:b5:e5:19:94:53:df:53:3f: 98:54:49:90:77:7a:45:c6:db:21:a4:62:91:90:f5: 24:8b:6b:10:c0:f3:5f:4f:7c:6f:a6:09:cc:50:33: f9:46:53:45:de:c2:37:35:54:a3:24:af:f2:be:49: 8c:4f:fd:a9:24:83:e1:da:9a:a8:a7:cc:47:c3:d8: a1:2a:fc:a5:d6:c9:a2:bb:52:7b:71:e7:30:85:dd: c9:84:ad:fd:1d:68:5f:f8:85:34:23:0d:4f:86:05: 0d:45:1a:f8:21:0e:01:67:08:21:6f:13:2b:88:c2: a1:cf:55:30:cc:84:2f:f4:a4:15:20:1b:b1:04:65: 18:ed:d0:99:0d:eb:46:ed:51:c1:a8:be:27:6a:98: 1d:5e:64:0a:c8:c3:f7:e5:ec:2a:ac:8e:80:52:86: 0e:30:ec:7b:12:7e:af:fa:0c:88:53:5a:38:89:36: 00:ed:db:b9:19:25:47:09:b7:24:31:c8:2a:6c:27: ab:6e:06:89:a5:12:8f:c7:28:b1:50:50:26:21:04: 5f:5f:16:78:ff:5b:52:b9:3d:b1:2c:61:02:c6:d6: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1D:02:CB:3B:4E:D7:82:6F:C9:92:89:9F:4E:9B:C5:66:DE:48:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3431c3e0-8aa7-33aa-9332-a6774b26a267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:97:50:a7:74:03:6b:d2:56:3a:70:9b:fa:f7:3f:21:22:e9: e5:5d:97:46:82:60:c4:7d:2c:17:ec:dc:aa:96:35:3d:d7:1d: 1f:d0:e0:64:e1:a7:73:46:cd:f9:b4:66:dc:6d:06:c2:ff:0a: 8b:7c:e7:f2:f8:79:7a:75:2a:ec:d5:26:80:29:08:a3:77:ab: 31:c3:11:aa:4f:d8:81:ac:68:bc:02:23:27:9b:aa:58:58:d5: 13:a3:1b:e1:f8:86:96:f6:da:6f:6c:84:2e:83:a0:dd:25:39: e9:89:f4:19:d4:71:ae:c1:08:2a:52:ac:fa:c4:a9:13:79:1b: df:4c:54:58:b3:71:1d:27:2c:9f:62:b3:1c:8c:18:e6:0c:f1: 55:0d:4d:16:83:ce:21:06:b3:5d:bd:75:03:20:d4:bb:e3:8e: 03:54:8f:23:09:d9:d6:f8:89:07:32:37:a4:39:ae:96:44:54: 7a:32:93:7c:57:ae:73:b8:d1:6e:31:7d:64:51:7f:51:52:25: ca:42:aa:d0:61:63:f2:05:d7:c7:8e:bc:4f:b6:8f:2a:b3:41: d7:3d:29:95:d6:59:3b:08:5a:45:bd:f0:eb:ec:1c:9e:af:57: 47:25:a2:81:f6:46:91:c2:59:77:b1:67:cd:4b:32:d4:13:ac: 2c:96:38:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53miEhlRRtV2AUGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk YjkyMzBjNzAtMzIzZC00NTQyLTk0NTItZmI3YWNkNjNkZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbZO2q7Wv4lHAKOmtMPpn5MAWwaZudtpCndL VP2J0wVKRNOyteUZlFPfUz+YVEmQd3pFxtshpGKRkPUki2sQwPNfT3xvpgnMUDP5 RlNF3sI3NVSjJK/yvkmMT/2pJIPh2pqop8xHw9ihKvyl1smiu1J7cecwhd3JhK39 HWhf+IU0Iw1PhgUNRRr4IQ4BZwghbxMriMKhz1UwzIQv9KQVIBuxBGUY7dCZDetG 7VHBqL4napgdXmQKyMP35ewqrI6AUoYOMOx7En6v+gyIU1o4iTYA7du5GSVHCbck McgqbCerbgaJpRKPxyixUFAmIQRfXxZ4/1tSuT2xLGECxtapxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUdAss7TteCb8mSiZ9Om8Vm3khZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQzMWMzZTAtOGFhNy0z M2FhLTkzMzItYTY3NzRiMjZhMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASXUKd0A2vSVjpwm/r3PyEi6eVdl0aCYMR9LBfs3KqWNT3XHR/Q4GTh p3NGzfm0ZtxtBsL/Cot85/L4eXp1KuzVJoApCKN3qzHDEapP2IGsaLwCIyebqlhY 1ROjG+H4hpb22m9shC6DoN0lOemJ9BnUca7BCCpSrPrEqRN5G99MVFizcR0nLJ9i sxyMGOYM8VUNTRaDziEGs129dQMg1LvjjgNUjyMJ2db4iQcyN6Q5rpZEVHoyk3xX rnO40W4xfWRRf1FSJcpCqtBhY/IF18eOvE+2jyqzQdc9KZXWWTsIWkW98OvsHJ6v V0clooH2RpHCWXexZ81LMtQTrCyWOMk= -----END CERTIFICATE-----Generated at Fri Jul 24 08:01:53 2026 by rpki-client