$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/4e59797a-2dc4-372b-8cb4-50ae5345f947.roa File: 4e59797a-2dc4-372b-8cb4-50ae5345f947.roa (raw, json) Hash identifier: s6N207Umz899LgKqpwTJE3hbwUsKRXdjQiI4a6H02/8= Subject key identifier: 9C:5A:0B:59:13:56:FA:16:BB:3B:52:E0:B5:47:B4:84:03:C2:F2:FA Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584F498862F7A1B49B80A36EA100 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/4e59797a-2dc4-372b-8cb4-50ae5345f947.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9929 IP address blocks: 192.163.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:62:f7:a1:b4:9b:80:a3:6e:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=42859862-42a4-4374-a4e5-46bce2f0e3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0f:23:0c:a3:30:38:98:88:4b:57:a9:cc:6c: b4:dc:65:26:5b:7b:0f:ef:7b:29:f0:ab:2a:97:44: b6:5d:35:08:d0:1c:e0:b3:a3:7f:fc:80:35:34:aa: 32:fa:50:83:ed:7c:11:b4:91:fc:63:e2:f2:7f:f0: 3c:8a:df:68:a3:bc:42:66:4a:92:03:18:47:10:75: 9a:52:97:0c:a5:8d:8a:71:24:34:c1:f2:8b:90:d4: 37:db:b9:62:39:bd:ac:d5:24:63:22:72:37:f3:5a: 6e:74:a1:a9:9d:ce:50:18:79:00:a8:bd:f9:10:a8: 27:d2:38:66:8b:cc:c6:b2:85:62:db:63:75:9a:03: 30:c3:b1:01:f9:b7:62:3c:48:67:4d:ca:79:26:71: c7:68:97:f5:2d:fd:d7:27:e6:60:45:89:2d:ed:8b: 6f:5b:45:8a:35:53:09:9b:d4:76:c7:2c:27:ef:c8: 81:f9:fe:8d:85:d3:a7:1a:de:46:e2:bf:06:3c:da: 78:2c:19:f8:2f:68:28:2d:75:f7:90:52:1a:b7:f3: 39:d5:d2:44:21:68:68:cb:db:67:0f:9f:51:a3:b9: 76:45:89:6d:5d:d0:a3:4c:cc:85:c1:83:63:6d:6d: 57:c2:35:9d:56:d6:27:8e:ba:04:12:12:bf:a1:52: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5A:0B:59:13:56:FA:16:BB:3B:52:E0:B5:47:B4:84:03:C2:F2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/4e59797a-2dc4-372b-8cb4-50ae5345f947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9b:31:84:60:ea:0b:b1:73:70:9c:df:4a:6d:81:38:81:7f: 42:0a:f7:ed:9a:d4:71:89:b1:2c:42:39:63:2c:66:70:30:1b: 16:c7:8d:f0:fe:b1:a0:50:fd:4b:52:38:93:11:4e:6a:38:0a: ad:b1:7e:ee:e2:c9:43:02:0d:d5:d1:d0:03:0f:b1:bb:da:29: 48:fd:cd:bc:b1:4b:13:97:7d:38:b9:66:f2:1b:95:1e:20:1e: d8:6c:50:3e:82:8e:c3:e9:33:84:c7:ed:9b:e9:ed:47:94:ee: ee:92:a3:e7:9a:5c:30:fe:b5:d8:b4:fc:a1:62:07:dd:72:9d: aa:87:f2:35:d2:d8:22:59:f1:1a:81:91:c2:34:c8:68:5b:ee: 9e:b7:64:45:e5:f8:56:c5:6e:7e:a1:63:8d:36:18:6e:d3:b1: 90:f7:13:a5:bb:88:1a:84:3c:f4:04:c2:7d:ec:d5:09:47:6a: 18:35:01:40:c1:3e:0e:2c:2e:17:2b:97:c6:94:91:8f:c9:ec: c9:33:e0:8a:00:85:45:a3:bf:6f:d1:1d:e6:7f:06:b3:69:05: bc:64:83:f5:a6:58:9a:6c:ff:80:da:11:60:da:73:03:78:50: 84:ba:b2:8f:e4:ba:8b:7e:6b:43:f4:96:bf:63:78:27:f8:59: 85:cc:49:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiGL3obSbgKNuoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDI4NTk4NjItNDJhNC00Mzc0LWE0ZTUtNDZiY2UyZjBlM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ8jDKMwOJiIS1epzGy03GUmW3sP73sp8Ksq l0S2XTUI0Bzgs6N//IA1NKoy+lCD7XwRtJH8Y+Lyf/A8it9oo7xCZkqSAxhHEHWa UpcMpY2KcSQ0wfKLkNQ327liOb2s1SRjInI381pudKGpnc5QGHkAqL35EKgn0jhm i8zGsoVi22N1mgMww7EB+bdiPEhnTcp5JnHHaJf1Lf3XJ+ZgRYkt7YtvW0WKNVMJ m9R2xywn78iB+f6NhdOnGt5G4r8GPNp4LBn4L2goLXX3kFIat/M51dJEIWhoy9tn D59Ro7l2RYltXdCjTMyFwYNjbW1XwjWdVtYnjroEEhK/oVJ7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxaC1kTVvoWuztS4LVHtIQDwvL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNGU1OTc5N2EtMmRjNC0z NzJiLThjYjQtNTBhZTUzNDVmOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACbMYRg6guxc3Cc30ptgTiBf0IK9+2a1HGJsSxCOWMsZnAwGxbHjfD+ saBQ/UtSOJMRTmo4Cq2xfu7iyUMCDdXR0AMPsbvaKUj9zbyxSxOXfTi5ZvIblR4g HthsUD6CjsPpM4TH7Zvp7UeU7u6So+eaXDD+tdi0/KFiB91ynaqH8jXS2CJZ8RqB kcI0yGhb7p63ZEXl+FbFbn6hY402GG7TsZD3E6W7iBqEPPQEwn3s1QlHahg1AUDB Pg4sLhcrl8aUkY/J7Mkz4IoAhUWjv2/RHeZ/BrNpBbxkg/WmWJps/4DaEWDacwN4 UIS6so/kuot+a0P0lr9jeCf4WYXMSfQ= -----END CERTIFICATE-----Generated at Sat Sep 26 13:06:22 2026 by rpki-client