$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3431c3e0-8aa7-33aa-9332-a6774b26a267.roa File: 3431c3e0-8aa7-33aa-9332-a6774b26a267.roa (raw, json) Hash identifier: u6ch9m9O+WZ+XANgMKsgsqxQrGkoA6qnyW3sa2iOHWc= Subject key identifier: 23:5D:7E:C7:92:58:D4:1F:6B:AB:F2:A6:95:58:30:2D:36:2A:98:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A0381896CC7FD4B01AE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3431c3e0-8aa7-33aa-9332-a6774b26a267.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 27544 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a0:38:18:96:cc:7f:d4:b0:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=df6b857d-4ab4-4368-80ae-6ee80c193f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:28:15:39:27:39:3f:89:67:8a:f4:c5:e3:65: 03:5c:bd:5f:a9:33:10:5a:18:1f:8f:fc:5c:09:a1: d1:94:2c:5a:85:27:f4:8e:20:42:1b:ab:64:0f:d0: 75:82:44:f4:b4:d3:ea:ac:a9:5c:f9:2f:fb:bc:6e: 09:d4:6a:99:0e:0b:92:de:df:91:09:9e:39:52:36: 07:54:e2:ac:5b:47:f2:0c:22:13:dc:66:59:e4:81: 19:d1:27:d1:fa:17:31:0c:ed:fd:2a:26:4d:28:d3: 6d:5a:1d:cb:84:ae:d9:ff:a9:19:70:45:a9:2b:0a: 8e:d4:e3:b0:f3:6a:1a:8d:9d:a2:10:e8:fc:85:82: 82:fd:ec:ba:af:b5:d8:7d:15:a2:ec:c6:aa:d2:81: 91:25:2b:84:43:04:f2:41:23:30:cb:91:7c:84:bc: 5d:53:b4:f0:46:bf:0f:eb:16:a9:99:7d:49:10:c5: 37:49:ce:4e:86:9b:b7:6d:84:c5:84:97:e5:7a:55: cb:a5:36:31:f9:eb:53:e3:eb:27:9a:e7:2f:77:bc: ee:4f:1c:65:2e:27:c1:ff:e9:2c:bc:52:8c:7b:57: fe:ed:62:9a:68:28:4e:2a:58:97:7d:d9:61:b8:d9: d5:dc:55:41:41:6c:d0:9c:67:a4:f7:5f:52:03:aa: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5D:7E:C7:92:58:D4:1F:6B:AB:F2:A6:95:58:30:2D:36:2A:98:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3431c3e0-8aa7-33aa-9332-a6774b26a267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e9:f9:77:ef:c6:89:de:89:ab:c6:fa:46:07:3b:9f:1a:a7: 8f:33:a2:c8:2c:71:3f:4e:90:9f:3b:3f:34:cc:9a:14:f2:79: 05:ec:95:0b:91:d0:34:eb:3a:7c:25:00:e8:e4:0f:73:bb:23: 18:d4:93:91:f0:c6:93:50:d3:7e:2b:0e:3d:71:ee:64:09:3a: d1:f1:e4:4c:03:b7:f7:d7:25:56:e7:44:40:f4:76:df:ee:f7: 1d:73:40:30:40:a5:fd:9a:9f:7f:91:a7:f2:1e:77:51:b0:d5: a4:03:8c:9f:be:fc:9b:68:16:df:13:2c:09:2d:4d:11:98:ed: b0:92:55:9e:30:07:29:85:f5:1b:9c:55:af:4a:d1:b5:88:5f: 4b:68:23:ea:f6:56:2c:e2:a7:e0:2e:33:84:05:3d:29:db:02: dc:10:34:f6:d1:e8:5a:91:92:26:9f:e5:d9:4d:d3:65:8c:70: f9:78:52:5d:17:30:88:6f:7c:25:92:df:7c:3e:50:e9:0c:18: 39:0a:78:f0:db:26:bc:1c:8e:3f:05:b2:43:2c:85:75:e4:52: bc:a4:63:df:7b:b8:08:92:84:4b:86:87:30:d9:48:f4:a9:0f: c4:75:22:ba:3e:91:dd:72:e3:12:16:67:df:14:5a:f8:d6:0d: 23:1a:60:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hqA4GJbMf9SwGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZGY2Yjg1N2QtNGFiNC00MzY4LTgwYWUtNmVlODBjMTkzZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSgVOSc5P4lnivTF42UDXL1fqTMQWhgfj/xc CaHRlCxahSf0jiBCG6tkD9B1gkT0tNPqrKlc+S/7vG4J1GqZDguS3t+RCZ45UjYH VOKsW0fyDCIT3GZZ5IEZ0SfR+hcxDO39KiZNKNNtWh3LhK7Z/6kZcEWpKwqO1OOw 82oajZ2iEOj8hYKC/ey6r7XYfRWi7Maq0oGRJSuEQwTyQSMwy5F8hLxdU7TwRr8P 6xapmX1JEMU3Sc5Ohpu3bYTFhJflelXLpTYx+etT4+snmucvd7zuTxxlLifB/+ks vFKMe1f+7WKaaChOKliXfdlhuNnV3FVBQWzQnGek919SA6p/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNdfseSWNQfa6vyppVYMC02KpiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQzMWMzZTAtOGFhNy0z M2FhLTkzMzItYTY3NzRiMjZhMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDp+XfvxoneiavG+kYHO58ap48zosgscT9OkJ87PzTMmhTyeQXslQuR 0DTrOnwlAOjkD3O7IxjUk5HwxpNQ034rDj1x7mQJOtHx5EwDt/fXJVbnRED0dt/u 9x1zQDBApf2an3+Rp/Ied1Gw1aQDjJ++/JtoFt8TLAktTRGY7bCSVZ4wBymF9Ruc Va9K0bWIX0toI+r2Vizip+AuM4QFPSnbAtwQNPbR6FqRkiaf5dlN02WMcPl4Ul0X MIhvfCWS33w+UOkMGDkKePDbJrwcjj8FskMshXXkUrykY997uAiShEuGhzDZSPSp D8R1Iro+kd1y4xIWZ98UWvjWDSMaYKs= -----END CERTIFICATE-----Generated at Wed Sep 10 20:47:30 2025 by rpki-client