$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6887c286-3669-3ba0-b44a-a2b3d61df617.roa File: 6887c286-3669-3ba0-b44a-a2b3d61df617.roa (raw, json) Hash identifier: 4thB9KfFctme3vo+794dj6ttgwz1JLAD55mqI1Sc8+k= Subject key identifier: F0:C5:A5:7B:08:EC:7C:5A:D1:23:D2:68:80:81:07:AD:AD:FA:77:F9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCFD031AAD554E3D097680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6887c286-3669-3ba0-b44a-a2b3d61df617.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 396608 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fd:03:1a:ad:55:4e:3d:09:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=870070f7-e110-4b01-bcde-9fbc8b8a7645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:4a:e0:bb:61:41:10:2a:e2:3e:c8:91:ae: 73:8d:be:4e:32:64:70:aa:11:5a:44:bc:fb:57:36: 39:3f:64:5f:b6:a5:a9:8e:3c:6b:c3:41:7c:d6:0e: 05:c4:d4:ac:38:de:88:e5:7b:50:a2:f8:3d:11:d8: d8:18:e0:9b:07:f6:46:b0:6c:99:4d:bd:bc:52:bd: c8:37:da:93:a3:4b:8d:e7:5a:d8:00:50:ae:ea:2f: 75:10:df:70:16:5c:74:2b:71:85:fc:56:23:fa:17: 7a:4d:2f:bb:5f:98:8c:31:c8:8f:c3:c7:35:c1:61: 76:97:10:06:07:0c:c9:db:2d:d5:97:16:bb:4a:05: 8d:3e:12:50:1b:28:16:0e:d6:69:3f:5a:cb:e9:c1: ac:61:70:8f:40:8d:06:59:29:77:e8:06:7c:46:ee: 67:5c:44:81:d7:9b:c3:b9:14:2b:de:bc:9d:6b:01: 77:0f:6a:3c:84:a5:9c:39:b9:93:b5:98:bb:80:28: 4f:46:f6:a3:77:d6:39:0f:f6:61:2c:f5:f1:e3:54: 23:3e:68:67:7e:d4:61:67:28:9d:c1:6d:e7:fc:d9: cc:70:19:76:97:b2:f2:f3:77:6a:ef:28:61:d2:6c: 81:01:e9:95:73:ef:31:ca:b6:2d:da:6d:c0:10:3d: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:A5:7B:08:EC:7C:5A:D1:23:D2:68:80:81:07:AD:AD:FA:77:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6887c286-3669-3ba0-b44a-a2b3d61df617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fd:b5:52:19:22:eb:13:a0:1f:f4:52:30:ec:60:e1:42:ca: 11:a0:01:bc:eb:8a:66:d7:8e:c1:b0:b7:ca:a1:d1:84:e9:48: b8:7e:9c:e3:5c:17:05:68:6d:e7:de:e1:43:f6:e5:2d:ec:f6: 44:26:e3:3e:87:95:4d:31:39:9a:f8:3d:a8:72:02:c7:f8:22: 3e:58:7b:54:66:32:f5:3d:5c:fd:34:39:88:4c:91:7d:b5:b9: fb:26:94:0b:55:c0:dc:0b:5c:04:27:d5:1a:a7:a6:aa:6f:f0: 45:a4:b2:12:8d:8d:9f:7e:7c:b0:3c:0b:23:4c:71:b1:f4:30: 58:ff:26:83:15:89:86:d2:a9:1d:f8:8e:6e:c0:c4:48:26:80: 1f:6e:51:a1:e5:b3:bb:35:9d:33:01:fb:3d:99:40:d1:f0:cc: 2b:12:12:d4:5e:5f:cf:d8:d9:f5:5e:23:f3:38:1d:4d:f8:af: 7e:e5:f2:91:fd:96:be:b6:26:63:b2:a0:e4:af:74:e1:c0:60: eb:7b:d2:8f:d2:c8:fd:e8:7a:48:4c:2e:e8:cb:7d:71:49:20: f9:a3:eb:3d:49:43:a3:ac:0e:e4:38:8c:1a:ba:c6:28:d3:d2: 93:d3:55:96:f3:01:fc:5e:d9:0c:7d:2d:99:f1:43:02:d5:45: c0:59:71:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P0DGq1VTj0JdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ODcwMDcwZjctZTExMC00YjAxLWJjZGUtOWZiYzhiOGE3NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxRK4LthQRAq4j7Ika5zjb5OMmRwqhFaRLz7 VzY5P2RftqWpjjxrw0F81g4FxNSsON6I5XtQovg9EdjYGOCbB/ZGsGyZTb28Ur3I N9qTo0uN51rYAFCu6i91EN9wFlx0K3GF/FYj+hd6TS+7X5iMMciPw8c1wWF2lxAG BwzJ2y3Vlxa7SgWNPhJQGygWDtZpP1rL6cGsYXCPQI0GWSl36AZ8Ru5nXESB15vD uRQr3rydawF3D2o8hKWcObmTtZi7gChPRvajd9Y5D/ZhLPXx41QjPmhnftRhZyid wW3n/NnMcBl2l7Ly83dq7yhh0myBAemVc+8xyrYt2m3AED3IBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDFpXsI7Hxa0SPSaICBB62t+nf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg4N2MyODYtMzY2OS0z YmEwLWI0NGEtYTJiM2Q2MWRmNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG79tVIZIusToB/0UjDsYOFCyhGgAbzrimbXjsGwt8qh0YTpSLh+nONc FwVobefe4UP25S3s9kQm4z6HlU0xOZr4PahyAsf4Ij5Ye1RmMvU9XP00OYhMkX21 ufsmlAtVwNwLXAQn1Rqnpqpv8EWkshKNjZ9+fLA8CyNMcbH0MFj/JoMViYbSqR34 jm7AxEgmgB9uUaHls7s1nTMB+z2ZQNHwzCsSEtReX8/Y2fVeI/M4HU34r37l8pH9 lr62JmOyoOSvdOHAYOt70o/SyP3oekhMLujLfXFJIPmj6z1JQ6OsDuQ4jBq6xijT 0pPTVZbzAfxe2Qx9LZnxQwLVRcBZcQg= -----END CERTIFICATE-----Generated at Sat Sep 26 04:48:05 2026 by rpki-client