$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa File: 88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa (raw, json) Hash identifier: RKkm8x2UgeXEoPIf/8VnEpV4o/B6etDk1Vbe8hUZhTI= Subject key identifier: 69:95:F6:23:74:3B:BC:76:06:A8:B9:3E:49:53:14:8E:35:EE:97:F9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A08B9ACD834B03401780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 397203 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a0:8b:9a:cd:83:4b:03:40:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=c34943ea-5736-4af7-92fa-4b0caf4af409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:4e:8d:f9:c7:bf:f6:38:75:5b:a1:a6:60: c5:15:40:95:9e:69:c5:5d:c9:5d:6b:4f:cb:ef:fe: 8f:27:d8:df:82:36:16:c7:84:3d:b7:a6:65:a8:07: 4d:91:e7:a5:3a:ac:21:e2:1e:80:14:d6:02:36:9b: 73:f9:7a:dd:48:f4:2b:f5:41:af:76:5a:bc:84:6e: 69:ef:ce:f3:70:f4:a2:c6:1f:72:56:ba:01:3b:7a: 21:7d:8b:23:77:85:08:62:7a:4f:2a:52:d5:ec:e0: 10:0e:04:27:07:04:57:8a:39:75:fa:05:9f:3d:19: 74:e6:a8:4d:7f:17:e7:28:84:ef:41:8b:cd:7d:22: 86:9f:ca:05:15:bc:5c:86:07:c2:d8:59:79:2a:69: 94:4d:45:08:ac:72:47:a6:19:c5:db:fb:99:96:70: ac:f4:18:9c:8e:08:85:88:3b:af:15:07:47:41:b0: e7:92:e3:97:03:db:8f:88:ac:0f:38:8a:09:fe:bf: 89:aa:8a:e4:61:39:94:90:8c:f6:66:66:1d:ac:ec: 51:2c:93:b5:c9:14:a1:ce:80:7e:cf:74:cd:e1:18: af:bb:82:51:a1:02:01:c3:e9:89:44:85:8a:97:39: c4:62:5b:b7:f8:b8:d6:f5:92:76:10:45:bc:8b:26: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:F6:23:74:3B:BC:76:06:A8:B9:3E:49:53:14:8E:35:EE:97:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a4:60:76:9f:ee:92:d7:8e:f4:5b:44:6f:c8:c4:86:60:89: 72:5b:eb:bf:77:bf:bd:27:32:cb:47:8f:ce:cf:4e:32:5f:66: 2d:73:3c:1c:50:a2:70:c5:cf:6f:24:d7:39:a7:4d:1c:3c:2d: 2e:15:7a:71:16:dc:90:27:8f:21:ff:3f:0a:d4:6b:c7:cb:4b: 3f:ff:0f:1f:13:3c:82:7c:7e:f3:bd:d2:d1:1d:f7:32:68:54: c3:36:aa:fe:7c:9c:bb:b9:9b:41:4b:43:44:9c:d0:21:67:c1: 0e:82:d1:b1:26:b1:dd:08:e8:e4:88:88:04:e8:f3:1b:67:54: 64:42:38:bd:09:87:ba:d1:9e:aa:6c:11:13:42:72:b5:7d:c9: 06:e0:09:b0:0b:a2:3c:bf:03:c6:a5:62:3d:93:82:1d:fd:4c: 6a:56:58:c8:4c:6c:be:08:19:38:74:63:95:98:f5:6e:ae:dc: 8c:ee:07:36:c1:74:5d:8f:08:46:44:ed:0e:85:96:c0:d6:a8: d0:81:10:14:3a:48:4d:79:05:87:65:4f:d0:e9:fe:52:d8:60: 6b:6c:92:bf:47:a8:ad:8e:1a:cc:6f:18:4c:99:83:66:60:00: ad:cc:9e:1e:79:91:02:72:05:3f:16:f5:33:31:42:14:84:1d: 5f:b6:96:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hqCLms2DSwNAF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YzM0OTQzZWEtNTczNi00YWY3LTkyZmEtNGIwY2FmNGFmNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZNOjfnHv/Y4dVuhpmDFFUCVnmnFXclda0/L 7/6PJ9jfgjYWx4Q9t6ZlqAdNkeelOqwh4h6AFNYCNptz+XrdSPQr9UGvdlq8hG5p 787zcPSixh9yVroBO3ohfYsjd4UIYnpPKlLV7OAQDgQnBwRXijl1+gWfPRl05qhN fxfnKITvQYvNfSKGn8oFFbxchgfC2Fl5KmmUTUUIrHJHphnF2/uZlnCs9BicjgiF iDuvFQdHQbDnkuOXA9uPiKwPOIoJ/r+JqorkYTmUkIz2ZmYdrOxRLJO1yRShzoB+ z3TN4Rivu4JRoQIBw+mJRIWKlznEYlu3+LjW9ZJ2EEW8iybQeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmV9iN0O7x2Bqi5PklTFI417pf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODhiMmI5N2QtNjJmMy0z MmE2LWI3MmEtNDhlNzJkYzI3YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+kYHaf7pLXjvRbRG/IxIZgiXJb6793v70nMstHj87PTjJfZi1zPBxQ onDFz28k1zmnTRw8LS4VenEW3JAnjyH/PwrUa8fLSz//Dx8TPIJ8fvO90tEd9zJo VMM2qv58nLu5m0FLQ0Sc0CFnwQ6C0bEmsd0I6OSIiATo8xtnVGRCOL0Jh7rRnqps ERNCcrV9yQbgCbALojy/A8alYj2Tgh39TGpWWMhMbL4IGTh0Y5WY9W6u3IzuBzbB dF2PCEZE7Q6FlsDWqNCBEBQ6SE15BYdlT9Dp/lLYYGtskr9HqK2OGsxvGEyZg2Zg AK3Mnh55kQJyBT8W9TMxQhSEHV+2lqY= -----END CERTIFICATE-----Generated at Wed Sep 10 20:44:00 2025 by rpki-client