$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aeadc38-14e0-3c39-b42e-f5590c88324b.roa File: 8aeadc38-14e0-3c39-b42e-f5590c88324b.roa (raw, json) Hash identifier: tnvtCJ0t0XzB8yHHjmQPNnUN2CR12ygtwwdv91O/cac= Subject key identifier: 1A:60:61:60:AF:93:84:09:57:CB:D4:CE:6C:4A:27:B8:6D:74:E4:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCFFB395E334CB8A7D5BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aeadc38-14e0-3c39-b42e-f5590c88324b.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 396606 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:ff:b3:95:e3:34:cb:8a:7d:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=a3a0a3fd-15f5-4fff-a9df-bae3ba45c376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:76:d6:d0:a0:3c:17:c5:d0:2c:7e:70:a7: aa:e8:aa:e9:be:86:60:bd:91:1d:c1:fa:fc:26:03: 6b:c3:be:4c:e2:b3:97:aa:61:1a:6e:65:ac:78:c3: 98:7c:5a:83:bb:d9:ad:01:64:1e:a6:dc:ce:d2:7e: 5a:46:31:69:c8:46:b8:28:5a:13:48:94:c8:8c:c0: 18:b8:14:dc:02:23:49:74:96:c6:60:d0:76:0e:08: 1a:d8:8c:7a:1d:b7:b1:c8:be:42:b0:bc:e9:58:29: 51:c0:43:2f:a0:11:8e:59:5b:c5:71:bb:00:d2:f2: 43:dd:77:20:c8:df:59:ec:f0:bf:67:ea:1f:39:a4: 47:6d:63:e0:17:a3:7f:3d:9e:47:aa:f0:4c:86:3f: 2f:ab:52:9c:4e:e4:9e:42:c4:fc:86:75:45:28:78: 6d:f7:e4:6f:da:a6:59:bc:50:5b:d2:62:b3:0a:f0: b8:4d:ef:02:3e:50:30:1b:22:37:d3:99:9d:46:e8: 96:53:f1:96:9a:f4:23:06:b9:78:4f:46:80:74:b7: 50:44:6e:61:a2:1e:62:64:11:20:a9:46:86:c2:41: 02:41:89:a2:96:fa:28:54:4d:5a:dc:5b:ca:91:7f: f0:17:9d:b2:ec:bd:13:06:47:fb:82:b2:1a:39:6b: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:61:60:AF:93:84:09:57:CB:D4:CE:6C:4A:27:B8:6D:74:E4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aeadc38-14e0-3c39-b42e-f5590c88324b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b5:bf:63:a8:af:27:a1:9e:c8:da:3f:5f:3e:2b:29:1e:0d: 24:13:fc:15:be:5c:56:f1:d2:53:2c:75:7b:e1:73:17:d7:7e: 43:e3:ca:83:a0:e2:ab:96:c1:1f:40:08:cd:4d:4a:b1:54:29: 20:05:f9:59:72:06:e3:66:4c:06:6a:b7:95:eb:f8:1b:28:26: 8c:1c:ec:46:48:a4:cf:d4:20:5e:49:20:b8:07:d2:e1:70:b7: 72:a3:ec:2d:88:bd:c0:6d:43:99:6e:8a:18:f7:1c:7e:da:7d: d0:be:c1:88:0f:f9:3e:4c:7d:87:5e:d9:b4:b0:48:7b:1f:3c: 70:b0:3f:00:d5:00:1f:2e:7d:f3:63:09:d0:eb:dc:ac:80:f0: b6:48:02:b5:f2:d2:00:53:02:66:e1:c4:6e:01:8d:48:56:fa: a7:b5:66:c8:10:23:a4:6a:18:47:57:f6:17:e8:bb:95:4c:7f: c1:0e:30:2b:d6:c0:e4:bd:3f:56:c1:ff:40:db:7f:eb:d3:52: 1e:d7:4a:19:e4:1a:17:66:5a:c3:b9:ad:bf:33:c9:67:59:0d: cc:b0:d1:71:7c:24:b3:d9:e6:08:cb:c6:ac:1e:1c:8b:7d:7c: 5f:10:80:70:c0:6c:7a:2a:de:f5:f8:98:0a:8d:61:f3:cb:3a: 60:e9:00:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P+zleM0y4p9W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YTNhMGEzZmQtMTVmNS00ZmZmLWE5ZGYtYmFlM2JhNDVjMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqh21tCgPBfF0Cx+cKeq6KrpvoZgvZEdwfr8 JgNrw75M4rOXqmEabmWseMOYfFqDu9mtAWQeptzO0n5aRjFpyEa4KFoTSJTIjMAY uBTcAiNJdJbGYNB2Dgga2Ix6HbexyL5CsLzpWClRwEMvoBGOWVvFcbsA0vJD3Xcg yN9Z7PC/Z+ofOaRHbWPgF6N/PZ5HqvBMhj8vq1KcTuSeQsT8hnVFKHht9+Rv2qZZ vFBb0mKzCvC4Te8CPlAwGyI305mdRuiWU/GWmvQjBrl4T0aAdLdQRG5hoh5iZBEg qUaGwkECQYmilvooVE1a3FvKkX/wF52y7L0TBkf7grIaOWspfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpgYWCvk4QJV8vUzmxKJ7htdOSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFlYWRjMzgtMTRlMC0z YzM5LWI0MmUtZjU1OTBjODgzMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm1v2OoryehnsjaP18+KykeDSQT/BW+XFbx0lMsdXvhcxfXfkPjyoOg 4quWwR9ACM1NSrFUKSAF+VlyBuNmTAZqt5Xr+BsoJowc7EZIpM/UIF5JILgH0uFw t3Kj7C2IvcBtQ5luihj3HH7afdC+wYgP+T5MfYde2bSwSHsfPHCwPwDVAB8uffNj CdDr3KyA8LZIArXy0gBTAmbhxG4BjUhW+qe1ZsgQI6RqGEdX9hfou5VMf8EOMCvW wOS9P1bB/0Dbf+vTUh7XShnkGhdmWsO5rb8zyWdZDcyw0XF8JLPZ5gjLxqweHIt9 fF8QgHDAbHoq3vX4mAqNYfPLOmDpAAM= -----END CERTIFICATE-----Generated at Sat Sep 26 16:04:47 2026 by rpki-client