$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86a7a1b2-51d7-3231-ac15-1ff3f107c249.roa File: 86a7a1b2-51d7-3231-ac15-1ff3f107c249.roa (raw, json) Hash identifier: 40lChwfC+TYnvVkNdmUvbkIh0IV3V8XzGp8t+6m0tkI= Subject key identifier: D3:D3:5C:B7:07:AA:0F:4F:F1:75:3C:2A:9F:66:51:8A:80:86:83:00 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCE898B716CA8C5D4C2FC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86a7a1b2-51d7-3231-ac15-1ff3f107c249.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 396564 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e8:98:b7:16:ca:8c:5d:4c:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=246c5ab3-9dff-4c48-bff4-5c5c674282cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:5d:d4:07:29:ec:ce:0a:a0:21:54:32:ab: cb:fb:b2:c1:78:7f:4e:88:fe:8b:f5:ea:5f:ba:0d: 26:6a:0f:27:e8:ac:3e:cf:9a:e9:92:55:80:f1:80: 19:89:2f:b7:63:de:a0:5c:c4:b5:de:40:a4:fa:6b: 7c:7a:b2:b0:73:14:aa:49:62:3d:c5:59:73:c5:6d: cf:ba:05:7b:b0:43:9b:aa:c2:fd:34:0c:99:a6:77: ab:3b:27:f5:1e:e3:e6:25:45:22:64:6f:27:55:d6: 5f:29:8c:dc:b5:f0:e7:32:34:4d:0f:81:6c:a2:bf: c5:8c:31:44:d8:4d:91:b9:ed:4b:52:64:08:4d:49: 56:4c:fa:3e:b9:9b:6b:6f:ab:49:00:87:ba:9e:81: 17:a2:47:ae:78:01:f7:12:8e:82:90:e1:07:c0:13: 3c:cc:f9:4b:9c:cf:72:f3:78:65:98:47:fb:88:d4: 69:6e:ae:0f:f4:e7:f5:97:77:76:34:20:99:2c:79: 22:b7:c8:2d:d3:cb:c4:c9:66:47:f5:7b:4a:9d:49: 18:96:0a:34:bc:f5:d5:1b:08:70:b8:26:a6:81:27: 35:de:ca:f8:c1:82:de:e9:de:6a:18:c3:94:f5:20: 6b:28:3c:aa:1b:4e:2d:9e:34:db:53:2e:86:8e:88: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:5C:B7:07:AA:0F:4F:F1:75:3C:2A:9F:66:51:8A:80:86:83:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86a7a1b2-51d7-3231-ac15-1ff3f107c249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ee:fe:e2:59:41:1d:ce:2f:d4:64:3a:9a:87:f2:48:07:3d: 07:3d:b1:6d:6d:22:44:4d:83:82:e8:63:5e:73:e6:28:d2:ec: 84:92:00:67:25:88:09:94:a1:49:52:b5:9f:b2:80:3b:c6:48: 2f:48:6c:cd:f6:2b:28:6d:a3:ae:df:ed:42:06:65:fa:4d:4d: f6:03:b9:86:68:02:56:d8:f8:42:ef:17:de:63:6b:1d:6b:57: c4:27:aa:e8:21:30:48:a3:28:86:03:94:4b:32:0c:b5:8f:55: 60:32:31:42:e9:0f:d2:a7:77:68:41:95:66:d4:56:94:8d:33: f6:ad:62:02:7b:03:b9:d8:63:b6:43:aa:01:75:d9:59:42:2b: e8:f7:8c:df:b4:ba:9f:c6:06:ef:f8:ab:06:de:39:9d:27:4a: 81:45:d7:19:83:71:18:fd:05:4e:e7:5b:75:ff:d5:23:ef:98: 0a:99:a8:b0:d6:3a:f1:d1:ea:ed:47:05:a7:58:f3:0e:33:fe: e2:09:1b:9f:a4:05:5f:c9:c9:3c:88:a6:9f:3f:24:b1:94:5b: 3d:8c:ed:04:f9:fc:6b:17:fd:74:bf:87:36:79:44:bc:58:2c: 9d:f4:09:ce:59:e3:09:1a:22:4c:52:c7:3f:64:6c:cf:b1:c1: 82:08:b0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/OiYtxbKjF1ML8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MjQ2YzVhYjMtOWRmZi00YzQ4LWJmZjQtNWM1YzY3NDI4MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQpd1Acp7M4KoCFUMqvL+7LBeH9OiP6L9epf ug0mag8n6Kw+z5rpklWA8YAZiS+3Y96gXMS13kCk+mt8erKwcxSqSWI9xVlzxW3P ugV7sEObqsL9NAyZpnerOyf1HuPmJUUiZG8nVdZfKYzctfDnMjRND4Fsor/FjDFE 2E2Rue1LUmQITUlWTPo+uZtrb6tJAIe6noEXokeueAH3Eo6CkOEHwBM8zPlLnM9y 83hlmEf7iNRpbq4P9Of1l3d2NCCZLHkit8gt08vEyWZH9XtKnUkYlgo0vPXVGwhw uCamgSc13sr4wYLe6d5qGMOU9SBrKDyqG04tnjTbUy6GjoiEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPTXLcHqg9P8XU8Kp9mUYqAhoMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZhN2ExYjItNTFkNy0z MjMxLWFjMTUtMWZmM2YxMDdjMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXu/uJZQR3OL9RkOpqH8kgHPQc9sW1tIkRNg4LoY15z5ijS7ISSAGcl iAmUoUlStZ+ygDvGSC9IbM32Kyhto67f7UIGZfpNTfYDuYZoAlbY+ELvF95jax1r V8QnqughMEijKIYDlEsyDLWPVWAyMULpD9Knd2hBlWbUVpSNM/atYgJ7A7nYY7ZD qgF12VlCK+j3jN+0up/GBu/4qwbeOZ0nSoFF1xmDcRj9BU7nW3X/1SPvmAqZqLDW OvHR6u1HBadY8w4z/uIJG5+kBV/JyTyIpp8/JLGUWz2M7QT5/GsX/XS/hzZ5RLxY LJ30Cc5Z4wkaIkxSxz9kbM+xwYIIsIw= -----END CERTIFICATE-----Generated at Sun Sep 27 08:53:39 2026 by rpki-client