$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafb308c-b1f2-37af-b765-52acccca9ac7.roa File: cafb308c-b1f2-37af-b765-52acccca9ac7.roa (raw, json) Hash identifier: /lb90zmqzlhl4q7JIGiqdHLKQJyYm7ZLTVgUvLVMWLo= Subject key identifier: 79:41:0C:89:76:75:CD:CA:96:65:13:B3:B3:72:67:56:78:E6:FA:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D97556AB95341C5FAF36C0E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafb308c-b1f2-37af-b765-52acccca9ac7.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 396594 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:6a:b9:53:41:c5:fa:f3:6c:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=2888db96-3159-482b-a0db-72e2ce5e5c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:e1:2d:ca:21:ad:ae:cd:aa:e8:86:12:29: f3:18:23:fc:42:07:f5:94:ef:96:75:98:01:35:07: 81:1c:45:a0:9e:f5:d2:00:ab:d2:f9:c5:45:b4:98: 2f:a0:23:02:22:2e:fb:04:02:f6:8e:ca:b8:ee:17: 79:1a:e1:84:35:e2:4b:a6:b1:13:05:27:37:c4:99: 0c:13:8f:1d:83:b4:08:49:c5:bd:c0:9b:d7:53:12: 1d:41:aa:0b:b6:8e:49:68:d8:ac:06:4a:82:ab:95: b5:13:f1:46:b9:b8:7b:b0:1e:5e:7d:dc:d1:c7:43: 7b:8e:9c:01:56:3f:54:d0:c1:54:7f:59:20:86:c9: c2:b8:73:58:d0:b5:bb:f2:74:16:4c:32:a0:20:f1: d1:e2:99:24:49:d7:26:c4:aa:22:5e:10:df:ca:40: f8:b2:2f:87:47:54:09:f2:64:c2:42:26:c4:84:4c: 3d:bd:7c:19:b3:a6:d2:ca:00:8b:23:7d:38:3e:a1: f0:d2:13:0c:93:ea:7d:3b:17:2f:2b:cb:9f:0d:86: cb:21:2f:71:c2:cd:c6:66:4b:88:72:c8:b3:26:27: 04:89:1a:fe:5a:dc:7c:63:22:3a:96:76:45:42:e8: f4:2f:a0:f4:b7:40:f8:c9:31:2f:2b:7e:64:e8:1e: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:41:0C:89:76:75:CD:CA:96:65:13:B3:B3:72:67:56:78:E6:FA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafb308c-b1f2-37af-b765-52acccca9ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5e:43:d3:8e:54:26:b2:26:8a:cc:25:c0:1f:8c:6c:19:5a: 7c:50:3d:08:85:ea:41:8b:bf:45:c7:64:c8:b2:bf:dc:08:2c: 37:dd:18:c3:2b:45:e5:ee:68:be:ca:03:f1:cb:06:87:0a:a4: 4c:b0:23:52:5d:8c:39:b3:32:61:44:55:6f:82:c7:36:bb:f2: 50:c5:9e:65:11:ab:f4:6a:21:76:9a:b3:95:9e:39:6c:2e:5a: 7b:16:a9:d6:3b:10:e8:05:96:06:a5:02:e2:78:1f:96:1b:8c: f3:31:c5:4f:06:5f:f3:08:0f:2a:09:34:e4:77:5f:c5:4f:a9: 77:7d:23:e3:07:53:e2:ed:f9:22:96:52:1f:65:06:af:75:bd: fd:82:3a:8b:cf:fc:e6:52:f6:76:88:08:8c:0f:57:19:43:73: ae:bf:9b:05:b4:8b:25:a6:19:f9:ff:4e:9b:13:c2:8e:93:32: 2a:f0:a0:99:f0:37:36:28:a1:4c:cf:b7:c5:4f:33:af:8c:74: fe:ca:10:bf:99:e8:a3:3a:d7:fb:3e:55:13:93:a7:b2:51:09: 57:1b:d6:11:d1:66:27:7b:43:85:e7:db:95:aa:ca:24:8e:88: d7:83:9f:ab:64:02:18:60:03:4d:d3:88:03:cb:46:73:e4:29: cd:46:ee:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWq5U0HF+vNsDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk Mjg4OGRiOTYtMzE1OS00ODJiLWEwZGItNzJlMmNlNWU1YzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOrhLcohra7NquiGEinzGCP8Qgf1lO+WdZgB NQeBHEWgnvXSAKvS+cVFtJgvoCMCIi77BAL2jsq47hd5GuGENeJLprETBSc3xJkM E48dg7QIScW9wJvXUxIdQaoLto5JaNisBkqCq5W1E/FGubh7sB5efdzRx0N7jpwB Vj9U0MFUf1kghsnCuHNY0LW78nQWTDKgIPHR4pkkSdcmxKoiXhDfykD4si+HR1QJ 8mTCQibEhEw9vXwZs6bSygCLI304PqHw0hMMk+p9OxcvK8ufDYbLIS9xws3GZkuI csizJicEiRr+Wtx8YyI6lnZFQuj0L6D0t0D4yTEvK35k6B5VsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlBDIl2dc3KlmUTs7NyZ1Z45voBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FmYjMwOGMtYjFmMi0z N2FmLWI3NjUtNTJhY2NjY2E5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADteQ9OOVCayJorMJcAfjGwZWnxQPQiF6kGLv0XHZMiyv9wILDfdGMMr ReXuaL7KA/HLBocKpEywI1JdjDmzMmFEVW+Cxza78lDFnmURq/RqIXaas5WeOWwu WnsWqdY7EOgFlgalAuJ4H5YbjPMxxU8GX/MIDyoJNOR3X8VPqXd9I+MHU+Lt+SKW Uh9lBq91vf2COovP/OZS9naICIwPVxlDc66/mwW0iyWmGfn/TpsTwo6TMirwoJnw NzYooUzPt8VPM6+MdP7KEL+Z6KM61/s+VROTp7JRCVcb1hHRZid7Q4Xn25WqyiSO iNeDn6tkAhhgA03TiAPLRnPkKc1G7hE= -----END CERTIFICATE-----Generated at Wed May 13 07:51:35 2026 by rpki-client