$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a517008e-3f7a-3851-ad7d-68349e72c355.roa File: a517008e-3f7a-3851-ad7d-68349e72c355.roa (raw, json) Hash identifier: XjZVcI3Q8NClABAVbwIPuX7YJx8m+o9S1aRCdcN+On8= Subject key identifier: DA:D9:5C:66:09:A2:16:26:96:B3:C4:46:7E:B7:54:CC:75:72:04:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E779A2A620322C0E3096D0600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a517008e-3f7a-3851-ad7d-68349e72c355.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 396542 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:2a:62:03:22:c0:e3:09:6d:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=686d1400-516d-41f9-a419-b7c0c177b1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:85:a7:bc:44:74:12:b8:24:cd:a5:8c:03: c7:8e:77:6f:9b:9d:e7:2e:95:97:9e:e5:98:88:fb: 4b:af:fa:92:cd:17:e4:44:c3:74:6d:8b:78:fc:28: 8d:97:e4:0f:4c:b0:31:d7:2f:a1:2c:f5:69:e2:3c: 42:1c:fa:8f:d2:d9:9a:46:da:09:5a:33:96:e5:94: 14:c8:06:e5:c7:87:54:39:53:28:26:af:bb:34:55: 2c:67:00:e2:91:80:10:60:08:ed:92:c4:52:9c:fd: bd:ec:33:dc:7c:25:cb:c7:cb:3c:51:d8:ae:8f:35: c7:02:76:98:6b:b3:03:78:26:df:1b:4f:b4:a8:5a: ae:05:17:e9:91:c5:ff:86:2e:13:a6:ce:08:19:6e: 27:bc:fd:61:ee:24:b7:a5:60:b3:d6:90:1e:a3:41: 8d:5b:bd:74:a8:1b:22:84:91:86:6e:d4:b4:5c:7f: 91:1c:db:6c:07:23:f2:b7:25:28:17:dd:ec:d1:e9: cd:07:ce:d6:7d:85:c6:90:34:53:60:0d:df:dd:30: ed:57:12:ee:04:47:c1:4b:c3:d4:8f:fc:f1:9f:92: 57:5f:d5:90:14:7d:5f:1d:0c:c8:4d:eb:89:68:ef: 3f:06:42:1f:9c:bd:cf:31:09:ad:3c:cc:1c:d3:7a: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:5C:66:09:A2:16:26:96:B3:C4:46:7E:B7:54:CC:75:72:04:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a517008e-3f7a-3851-ad7d-68349e72c355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ea:a7:2b:20:35:4f:e5:5d:57:0f:91:fd:12:52:cc:36:f0: b4:17:60:c8:28:a8:ef:71:9f:15:12:38:27:90:31:cb:a5:86: 81:b2:e3:fd:fc:bd:88:b9:04:82:a5:8a:14:58:6d:bf:34:70: 83:db:49:04:f7:e0:f9:65:ac:a9:4c:7b:36:f3:ff:e5:f9:77: b6:61:5a:56:06:93:3f:08:79:70:0f:4f:36:e2:47:d5:f2:0c: 71:79:37:01:7d:41:51:32:87:25:74:ae:e5:54:3c:71:26:76: 8c:1a:4a:a3:90:7a:d6:5d:f7:8c:d1:2d:7f:38:e9:a1:34:a7: 71:63:4f:95:27:e4:79:77:26:c7:a8:18:86:af:d8:4e:d9:ba: 74:6e:a7:6b:ea:4b:52:3e:55:0d:b0:e8:dc:e8:8c:11:92:1a: 7e:5e:59:6c:58:39:80:a6:da:e4:38:ab:b3:4d:3c:40:11:a2: c6:ae:d3:72:84:01:39:21:c7:85:c6:53:3b:af:7c:49:cb:11: 07:a4:5c:e7:82:ec:b6:d7:0e:2e:c0:6a:01:5a:4f:94:44:5e: 51:40:5d:0f:06:f8:7e:07:c8:8c:1f:58:34:a5:8b:77:58:68: 31:ae:f2:86:e8:af:d9:c3:3f:58:1e:ce:41:80:76:9f:f7:18: 70:ef:fe:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mipiAyLA4wltBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk Njg2ZDE0MDAtNTE2ZC00MWY5LWE0MTktYjdjMGMxNzdiMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfWFp7xEdBK4JM2ljAPHjndvm53nLpWXnuWY iPtLr/qSzRfkRMN0bYt4/CiNl+QPTLAx1y+hLPVp4jxCHPqP0tmaRtoJWjOW5ZQU yAblx4dUOVMoJq+7NFUsZwDikYAQYAjtksRSnP297DPcfCXLx8s8UdiujzXHAnaY a7MDeCbfG0+0qFquBRfpkcX/hi4Tps4IGW4nvP1h7iS3pWCz1pAeo0GNW710qBsi hJGGbtS0XH+RHNtsByPytyUoF93s0enNB87WfYXGkDRTYA3f3TDtVxLuBEfBS8PU j/zxn5JXX9WQFH1fHQzITeuJaO8/BkIfnL3PMQmtPMwc03p1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrZXGYJohYmlrPERn63VMx1cgTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTUxNzAwOGUtM2Y3YS0z ODUxLWFkN2QtNjgzNDllNzJjMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzqpysgNU/lXVcPkf0SUsw28LQXYMgoqO9xnxUSOCeQMculhoGy4/38 vYi5BIKlihRYbb80cIPbSQT34PllrKlMezbz/+X5d7ZhWlYGkz8IeXAPTzbiR9Xy DHF5NwF9QVEyhyV0ruVUPHEmdowaSqOQetZd94zRLX846aE0p3FjT5Un5Hl3Jseo GIav2E7ZunRup2vqS1I+VQ2w6NzojBGSGn5eWWxYOYCm2uQ4q7NNPEARosau03KE ATkhx4XGUzuvfEnLEQekXOeC7LbXDi7AagFaT5REXlFAXQ8G+H4HyIwfWDSli3dY aDGu8obor9nDP1gezkGAdp/3GHDv/sE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:40:58 2026 by rpki-client