$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa File: fbed4876-7519-30f0-92ed-4f017527a1f1.roa (raw, json) Hash identifier: Jxh/SQd2mGLl7ZHxlAnV/o1iQJ2Tlww8fOSo9wNJa78= Subject key identifier: 74:05:46:FA:FC:BD:58:3A:D7:4E:44:44:75:B7:B0:F7:02:FB:F6:F5 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584F497500B5A5868CD037FF8500 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399480 IP address blocks: 192.228.64.0/23 maxlen: 23 192.228.64.0/24 maxlen: 24 192.228.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:00:b5:a5:86:8c:d0:37:ff:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03ce1a6e-a5ee-47fb-b4e5-c3de7403ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:7e:78:de:52:b5:07:d3:40:c3:3b:6d:17: eb:2b:19:08:dc:e0:bf:35:9a:50:4e:75:bb:41:95: f7:8b:2a:39:2b:cd:e3:27:e3:97:44:06:40:37:3a: af:78:ff:17:76:03:30:95:b8:b5:9d:a0:d2:e0:20: d9:fc:5c:ac:70:08:5a:41:07:f0:cb:71:d0:a2:5b: 52:a1:70:7a:aa:83:4f:7c:ef:66:bb:d7:3d:9a:a1: 8c:82:91:68:c0:4e:0c:39:7e:46:cc:81:91:cb:1e: 58:46:76:ff:73:73:72:c3:9f:97:e0:cb:38:ee:69: a4:4a:c5:47:88:ea:b4:1b:b1:97:7b:c4:fb:c2:7a: df:86:86:c2:d8:ed:11:65:74:33:97:b4:f5:41:86: c6:d0:3c:1b:2d:06:13:44:29:7b:83:00:5c:6f:8b: 43:fa:7b:74:d8:29:05:ea:f3:15:60:98:8b:a5:88: 5f:c7:2b:81:48:76:db:cc:f0:39:7c:17:14:4b:da: 99:4f:22:df:e7:3e:34:1e:c1:f5:43:a4:34:1e:45: 47:89:89:1d:f1:fc:4b:ea:00:ab:df:ae:d4:67:0c: d2:0e:e8:ef:6d:04:25:88:6d:1c:8e:ac:2f:a7:dc: a1:5b:e4:f1:af:a2:37:c5:48:bb:55:ef:7b:22:7b: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:05:46:FA:FC:BD:58:3A:D7:4E:44:44:75:B7:B0:F7:02:FB:F6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.228.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ba:57:a6:d5:1c:6b:99:68:ec:7c:cb:23:88:fa:fc:e3:35: 11:f3:25:ba:c6:1f:2f:26:e7:06:6c:4f:9b:98:e2:57:ca:95: 8e:8a:e2:ed:80:87:18:fb:b8:d5:bf:29:a1:86:58:02:31:76: 35:26:b5:43:7f:08:52:e1:1a:c4:a0:0b:bb:3f:7e:53:54:4d: f1:ff:f3:95:ec:a9:f2:33:c6:c5:a5:bc:d1:24:90:09:ff:38: 8f:3d:a4:0d:7e:02:17:e9:ac:ac:46:0f:bf:8e:c0:26:81:98: a2:83:56:b9:90:cb:d6:f5:3b:11:2a:0d:0c:57:7d:5d:5e:c1: bf:72:f6:e8:b5:c3:d9:42:1a:fb:52:00:e8:6b:30:7a:82:e3: 8b:13:50:07:74:d8:7f:ce:dc:62:b5:07:e0:59:cb:24:1c:42: f1:d2:bc:e4:dd:39:96:b6:08:b5:37:da:10:43:b4:f6:28:dd: ad:0e:73:0c:ef:fb:d6:99:a9:ef:f7:03:1a:0e:4d:eb:fe:57: d3:ad:41:13:97:7a:7e:c1:5d:45:79:0d:5c:b6:e6:9a:3d:ca: 89:57:2d:70:d3:de:24:07:25:f2:aa:52:4b:dd:79:70:9f:98: 99:22:8f:60:42:ed:b8:21:0e:9c:bb:54:0d:19:8e:21:17:75: 75:76:ee:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQC1pYaM0Df/hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDNjZTFhNmUtYTVlZS00N2ZiLWI0ZTUtYzNkZTc0MDNjZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjl+eN5StQfTQMM7bRfrKxkI3OC/NZpQTnW7 QZX3iyo5K83jJ+OXRAZANzqveP8XdgMwlbi1naDS4CDZ/FyscAhaQQfwy3HQoltS oXB6qoNPfO9mu9c9mqGMgpFowE4MOX5GzIGRyx5YRnb/c3Nyw5+X4Ms47mmkSsVH iOq0G7GXe8T7wnrfhobC2O0RZXQzl7T1QYbG0DwbLQYTRCl7gwBcb4tD+nt02CkF 6vMVYJiLpYhfxyuBSHbbzPA5fBcUS9qZTyLf5z40HsH1Q6Q0HkVHiYkd8fxL6gCr 367UZwzSDujvbQQliG0cjqwvp9yhW+Txr6I3xUi7Ve97IntNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQFRvr8vVg6105ERHW3sPcC+/b1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvZmJlZDQ4NzYtNzUxOS0z MGYwLTkyZWQtNGYwMTc1MjdhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwORAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO6V6bVHGuZaOx8yyOI+vzjNRHzJbrGHy8m5wZsT5uY4lfKlY6K4u2A hxj7uNW/KaGGWAIxdjUmtUN/CFLhGsSgC7s/flNUTfH/85XsqfIzxsWlvNEkkAn/ OI89pA1+AhfprKxGD7+OwCaBmKKDVrmQy9b1OxEqDQxXfV1ewb9y9ui1w9lCGvtS AOhrMHqC44sTUAd02H/O3GK1B+BZyyQcQvHSvOTdOZa2CLU32hBDtPYo3a0Ocwzv +9aZqe/3AxoOTev+V9OtQROXen7BXUV5DVy25po9yolXLXDT3iQHJfKqUkvdeXCf mJkij2BC7bghDpy7VA0ZjiEXdXV27oo= -----END CERTIFICATE-----Generated at Tue Sep 29 13:02:02 2026 by rpki-client