$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa File: d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa (raw, json) Hash identifier: 9GtIRHrD2L45BL/Vhc8FzzLQNAsMQ6tdjs+8CFEMROc= Subject key identifier: DB:35:3A:A8:67:2C:42:9E:17:9A:58:07:4E:78:49:A2:EB:D3:B8:02 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584E7E94EC3BEEE6E660CC5D7380 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.86.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ec:3b:ee:e6:e6:60:cc:5d:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=913af45f-8e51-4c5b-a26d-723ef249250b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:6c:27:d9:3d:1c:99:7e:ff:4c:c7:bb:c6: 99:6a:98:4a:6e:2b:e2:d5:f6:72:f0:9e:43:7d:41: 8b:39:73:b0:b7:97:eb:15:b8:6f:74:d5:3a:10:4b: 34:cd:ce:f1:d9:17:b2:18:c6:2d:b8:be:02:11:d5: 4b:a8:1b:7a:47:73:04:53:fe:81:38:e4:ed:7b:a8: 6b:15:a7:99:72:bd:84:60:5f:b3:be:76:c8:55:fc: 1d:6e:41:5e:fd:28:78:39:c9:34:b2:a8:12:e8:6a: 00:bf:c1:b8:a6:41:d7:08:e3:15:8b:8c:fb:d2:d4: bd:74:f1:73:30:62:ad:f9:b6:69:0d:fc:ee:e0:85: de:15:6d:95:b9:2a:b0:84:c5:cb:49:c9:1e:d5:86: f9:88:ac:b6:73:e8:ce:f4:d7:5b:da:07:c7:be:07: f1:c5:31:9e:d2:93:89:11:dd:76:9c:f7:04:cd:43: 19:df:07:da:25:65:c2:80:36:98:d5:2a:95:5d:b1: b8:17:fd:20:bf:98:d1:c7:66:d9:7a:47:fc:dc:1d: cd:3d:e3:3b:f9:98:e1:6d:36:9b:4c:02:6a:2d:ea: 6b:90:c9:0a:eb:c4:4a:ad:43:68:bd:43:ef:36:61: 44:af:af:2a:65:02:98:a1:7b:25:11:6c:c3:47:e5: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:3A:A8:67:2C:42:9E:17:9A:58:07:4E:78:49:A2:EB:D3:B8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d3834ffa-cce3-3357-aab0-1d60dc3a359c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 192.86.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:22:26:5e:d4:8a:c5:0a:eb:ed:d2:38:73:0f:ec:bc:98:ff: f5:89:46:14:67:e2:8e:1c:66:bb:ff:5d:ae:d7:38:f3:1a:66: 90:f4:86:22:fc:c4:f4:08:a1:2b:43:d1:22:43:23:a8:5b:d2: d3:3e:b2:27:ab:36:e3:d6:cc:62:5f:bc:4d:e3:c4:36:62:11: 56:da:f0:fa:e7:e6:ae:d2:aa:f4:b6:7c:65:20:07:ab:ed:39: 78:e5:b4:ed:eb:f5:a3:98:f2:e2:d5:af:ee:d2:a7:fb:ff:de: 03:02:51:4d:50:68:43:c8:56:e8:ea:3a:7f:14:52:4f:18:ca: 7c:9b:87:f8:df:23:9a:70:15:1f:b8:6a:0e:50:af:69:b0:4a: 26:ce:81:97:cb:cc:41:53:b5:04:e8:9f:f2:89:1b:4e:70:68: 6b:66:dc:84:01:1c:e3:52:64:2c:68:fb:1b:70:44:2d:32:03: f4:44:a9:b8:24:a5:da:df:2d:25:86:ce:af:c9:2e:97:98:6f: 72:f2:16:b0:6c:fd:73:68:05:94:89:14:44:f9:ba:9b:bc:61: 7f:ff:2a:ca:03:1a:e5:4d:9a:28:02:c6:3e:c3:3e:f1:58:36: 20:cc:37:83:c8:f1:7a:94:43:e1:2b:9c:b3:0d:e5:b0:e7:25: 80:18:6a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOw77ubmYMxdc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OTEzYWY0NWYtOGU1MS00YzViLWEyNmQtNzIzZWYyNDkyNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigFsJ9k9HJl+/0zHu8aZaphKbivi1fZy8J5D fUGLOXOwt5frFbhvdNU6EEs0zc7x2ReyGMYtuL4CEdVLqBt6R3MEU/6BOOTte6hr FaeZcr2EYF+zvnbIVfwdbkFe/Sh4Ock0sqgS6GoAv8G4pkHXCOMVi4z70tS9dPFz MGKt+bZpDfzu4IXeFW2VuSqwhMXLScke1Yb5iKy2c+jO9Ndb2gfHvgfxxTGe0pOJ Ed12nPcEzUMZ3wfaJWXCgDaY1SqVXbG4F/0gv5jRx2bZekf83B3NPeM7+ZjhbTab TAJqLeprkMkK68RKrUNovUPvNmFEr68qZQKYoXslEWzDR+WfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs1OqhnLEKeF5pYB054SaLr07gCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDM4MzRmZmEtY2NlMy0z MzU3LWFhYjAtMWQ2MGRjM2EzNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIiJl7UisUK6+3SOHMP7LyY//WJRhRn4o4cZrv/Xa7XOPMaZpD0hiL8 xPQIoStD0SJDI6hb0tM+sierNuPWzGJfvE3jxDZiEVba8Prn5q7SqvS2fGUgB6vt OXjltO3r9aOY8uLVr+7Sp/v/3gMCUU1QaEPIVujqOn8UUk8Yynybh/jfI5pwFR+4 ag5Qr2mwSibOgZfLzEFTtQTon/KJG05waGtm3IQBHONSZCxo+xtwRC0yA/REqbgk pdrfLSWGzq/JLpeYb3LyFrBs/XNoBZSJFET5upu8YX//KsoDGuVNmigCxj7DPvFY NiDMN4PI8XqUQ+ErnLMN5bDnJYAYapU= -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:19 2026 by rpki-client