$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa File: 3356d989-0123-3d9e-b389-cf1f83f3df2b.roa (raw, json) Hash identifier: RxluJSjWYGWqIqhLsBVR5VlHA/J+hgM7yWjoEPddi6E= Subject key identifier: 6E:20:D8:9A:AF:F5:EC:93:D6:7E:83:07:73:4E:73:01:4E:21:C8:F0 Certificate issuer: /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Certificate serial: 010D0C9F4328584F4112B308BD97D93AF1A94AE0 Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 396026 IP address blocks: 199.96.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b3:08:bd:97:d9:3a:f1:a9:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=88e862ce-f5c7-498d-bd7f-ccfbb84bc62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:36:ba:63:da:6f:d6:77:6a:b2:39:b5:93: 61:33:6d:bc:f3:fc:dc:72:57:65:15:fa:15:55:9e: 16:0f:94:f3:a4:9e:46:f2:0d:f7:f0:b1:db:44:98: 1a:40:dc:1f:df:17:7c:10:42:ce:14:a9:39:e2:b8: 06:ed:30:b1:96:bc:ef:7a:cf:a2:9d:64:1c:b7:79: 67:87:fa:9a:fc:e2:b6:97:5b:a9:ae:cd:d3:33:b7: ff:58:7a:9c:4a:3c:95:88:e0:00:a4:59:55:f7:ae: ca:5b:01:fa:54:74:b0:84:0c:65:60:a4:92:ad:01: 29:e3:17:b5:0f:73:88:7d:d8:3f:a1:4c:1c:35:86: b2:a3:51:09:f4:1d:2a:d0:87:ea:1c:0b:f8:2a:91: c1:ec:93:43:0d:bd:2d:4c:30:89:f3:a3:0f:c8:c8: 31:e0:3a:72:a7:fa:44:a8:f6:9e:4c:b8:e3:88:96: 22:cb:16:5f:0b:ca:d4:48:9d:db:96:be:7a:f3:7b: c4:a2:f7:f4:cd:68:b9:0a:63:96:de:ee:43:58:67: b0:81:1c:01:5a:bd:39:c4:fa:80:e4:bc:a2:05:45: c1:ef:d7:c0:2f:23:ce:a9:62:ee:57:0d:97:a9:90: 08:e2:fa:48:c9:ec:57:4a:a6:7e:d2:c9:b5:e4:df: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:20:D8:9A:AF:F5:EC:93:D6:7E:83:07:73:4E:73:01:4E:21:C8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/3356d989-0123-3d9e-b389-cf1f83f3df2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl X509v3 Authority Key Identifier: keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer sbgp-ipAddrBlock: critical IPv4: 199.96.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:60:ce:8f:a9:b7:9f:29:2e:68:4c:bf:3e:8f:6d:ca:90:33: 07:ea:eb:6d:02:46:7c:a0:b3:c7:f1:dd:a3:fa:a9:c6:8e:5e: 0b:44:79:cf:03:a8:96:b2:0b:28:9b:15:b8:23:da:ca:0d:9f: fb:32:2b:b0:2b:04:25:5e:c9:cb:0f:a9:9a:6a:a0:d1:d9:ae: 64:ad:85:32:bd:67:a6:32:2f:a3:7e:54:57:ef:a2:82:cf:1c: b5:00:13:d2:e5:7b:f1:69:f8:0b:23:b0:56:15:35:8d:2a:7b: f0:6a:d2:08:cb:b5:9d:0c:ec:63:1d:4c:08:65:b2:d8:04:7e: aa:de:21:e2:fa:88:a3:0f:e5:b4:05:af:b1:5d:51:c4:66:72: 1e:df:d5:f2:cd:cc:e6:3f:71:fa:92:7c:45:1f:a6:14:58:a4: 2c:d4:b3:30:0f:2f:90:1d:20:f5:5a:2c:4e:7d:8c:c1:16:3e: 60:8a:9e:c4:38:52:96:94:70:cc:ee:81:18:7f:84:e7:4e:35: 1c:c1:8b:c4:fe:84:0a:6e:41:60:16:03:f8:f8:98:be:22:26: 29:aa:0d:be:37:c3:1e:9c:1e:93:3b:f4:38:33:53:26:b2:38: a4:62:af:f2:1a:2e:b8:19:4f:a8:c3:fc:07:01:bd:e4:b5:90: 99:8a:3c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErMIvZfZOvGpSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2 NDdhMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODhlODYyY2UtZjVjNy00OThkLWJkN2YtY2NmYmI4NGJjNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9I2umPab9Z3arI5tZNhM2288/zccldlFfoV VZ4WD5TzpJ5G8g338LHbRJgaQNwf3xd8EELOFKk54rgG7TCxlrzves+inWQct3ln h/qa/OK2l1uprs3TM7f/WHqcSjyViOAApFlV967KWwH6VHSwhAxlYKSSrQEp4xe1 D3OIfdg/oUwcNYayo1EJ9B0q0IfqHAv4KpHB7JNDDb0tTDCJ86MPyMgx4Dpyp/pE qPaeTLjjiJYiyxZfC8rUSJ3blr5683vEovf0zWi5CmOW3u5DWGewgRwBWr05xPqA 5LyiBUXB79fALyPOqWLuVw2XqZAI4vpIyexXSqZ+0sm15N92cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4g2Jqv9eyT1n6DB3NOcwFOIcjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMzM1NmQ5ODktMDEyMy0z ZDllLWIzODktY2YxZjgzZjNkZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0 YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0 NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5 MWEzNDY0N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2CGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9gzo+pt58pLmhMvz6PbcqQMwfq620CRnygs8fx3aP6qcaOXgtEec8D qJayCyibFbgj2soNn/syK7ArBCVeycsPqZpqoNHZrmSthTK9Z6YyL6N+VFfvooLP HLUAE9Lle/Fp+AsjsFYVNY0qe/Bq0gjLtZ0M7GMdTAhlstgEfqreIeL6iKMP5bQF r7FdUcRmch7f1fLNzOY/cfqSfEUfphRYpCzUszAPL5AdIPVaLE59jMEWPmCKnsQ4 UpaUcMzugRh/hOdONRzBi8T+hApuQWAWA/j4mL4iJimqDb43wx6cHpM79DgzUyay OKRir/IaLrgZT6jD/AcBveS1kJmKPOo= -----END CERTIFICATE-----Generated at Thu Oct 1 15:05:04 2026 by rpki-client