$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/39a58aab-2459-3ca5-bdbf-f747098bbab4.roa File: 39a58aab-2459-3ca5-bdbf-f747098bbab4.roa (raw, json) Hash identifier: MDMxVXpjQOE/pqHxubaCrjjBhN/flikh5tS5ApezoPM= Subject key identifier: 9E:24:81:14:15:07:0F:82:34:A9:56:F3:92:9B:85:B5:0C:6E:AC:98 Certificate issuer: /CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Certificate serial: 010D0C9F4328584F6580DE05C35E83CB72710280 Authority key identifier: E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/39a58aab-2459-3ca5-bdbf-f747098bbab4.roa Signing time: Mon 05 Oct 2026 02:11:45 +0000 ROA not before: Mon 05 Oct 2026 02:11:45 +0000 ROA not after: Sun 03 Jan 2027 03:11:45 +0000 asID: 21757 IP address blocks: 192.234.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:80:de:05:c3:5e:83:cb:72:71:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Validity Not Before: Oct 5 02:11:45 2026 GMT Not After : Jan 3 03:11:45 2027 GMT Subject: CN=b702e413-39df-4b97-a981-0d037cce885f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:70:63:9e:a6:54:7f:f2:b2:06:38:93:9b: 72:73:f8:c5:6e:9e:19:5c:00:1b:10:8e:23:cc:b7: 7d:56:7f:08:6a:c7:b1:19:3e:b0:e1:10:f0:a4:37: 20:fe:79:05:dc:03:70:e0:db:b2:04:21:48:00:69: 7c:91:89:f5:06:0e:13:b6:a4:e8:68:58:cb:a5:ab: e8:53:85:e9:3d:50:8c:56:26:e3:81:d1:cb:c2:6c: 25:90:59:a8:37:53:0f:fe:9f:59:a7:7f:35:14:f5: 2a:32:a2:00:cd:83:9b:b3:f0:4f:7f:5c:7d:67:9b: 7f:2e:14:6f:8a:70:82:1b:f9:d2:43:60:48:3f:3d: 27:f0:08:02:67:85:20:66:c5:2d:0e:eb:c3:a3:4f: ac:a1:76:c0:e7:3b:18:20:6d:3e:92:88:6b:56:20: d9:3d:df:c8:f5:41:09:96:78:41:be:6e:38:49:a3: 45:71:17:0b:33:3a:cb:a9:07:b0:bc:a6:69:db:12: 47:30:75:2e:8d:18:28:8a:2a:1a:2a:de:4d:47:82: 98:10:57:df:53:b3:63:19:db:de:3f:5b:5c:d9:94: 20:35:11:f7:02:b8:4a:9b:87:7b:30:fe:c2:e0:32: da:b4:f1:8b:65:79:df:3d:ec:9d:c6:a5:d4:13:85: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:81:14:15:07:0F:82:34:A9:56:F3:92:9B:85:B5:0C:6E:AC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/39a58aab-2459-3ca5-bdbf-f747098bbab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.crl X509v3 Authority Key Identifier: keyid:E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer sbgp-ipAddrBlock: critical IPv4: 192.234.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:48:3b:87:d4:23:a9:fd:cb:70:b6:f2:30:8d:c6:ef:7f:3e: 94:94:88:23:95:a2:c6:c0:06:05:e3:08:76:38:c6:f5:11:2c: 1a:47:0d:22:d8:01:76:18:27:03:b3:f7:7c:72:ae:37:3d:8d: de:44:51:c3:12:5f:b8:5c:84:69:d8:59:74:22:48:91:a7:49: b6:01:3d:ed:7e:7d:9b:6d:35:6e:50:6d:96:6b:20:46:48:e8: 29:37:a9:be:ff:cb:de:34:86:ea:4c:8c:e0:f1:cf:65:6c:1f: fe:78:4f:98:06:23:d1:ab:a6:2b:4b:76:70:c2:6f:0f:e3:2e: 1f:19:ab:98:b8:6f:39:87:46:0d:33:65:28:ae:f2:fb:9c:b3: 90:ae:6a:ec:69:27:60:c3:5c:8c:75:4a:8c:6f:fc:2f:e2:b5: e9:22:19:0d:8b:68:e0:fa:fd:78:40:91:10:7f:58:3e:59:b9: bc:68:df:81:d1:77:db:6f:75:37:6f:f3:9b:08:a3:e0:2f:e1: b6:bb:23:d4:f3:07:aa:14:76:fd:a7:a1:d8:47:55:1d:6d:10: 0b:3b:b0:84:2b:81:ca:ed:5f:09:d9:10:4c:50:70:39:2d:cf: 0f:19:36:7d:5d:59:e7:49:15:e3:3a:13:b9:69:64:be:9e:aa: 23:d4:33:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lgN4Fw16Dy3JxAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI2MzZiYTUtNGZlMC00YWRmLWFhYTUtMzU3MmVkYTgw MTQ4MB4XDTI2MTAwNTAyMTE0NVoXDTI3MDEwMzAzMTE0NVowLzEtMCsGA1UEAxMk YjcwMmU0MTMtMzlkZi00Yjk3LWE5ODEtMGQwMzdjY2U4ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KpwY56mVH/ysgY4k5tyc/jFbp4ZXAAbEI4j zLd9Vn8IasexGT6w4RDwpDcg/nkF3ANw4NuyBCFIAGl8kYn1Bg4TtqToaFjLpavo U4XpPVCMVibjgdHLwmwlkFmoN1MP/p9Zp381FPUqMqIAzYObs/BPf1x9Z5t/LhRv inCCG/nSQ2BIPz0n8AgCZ4UgZsUtDuvDo0+soXbA5zsYIG0+kohrViDZPd/I9UEJ lnhBvm44SaNFcRcLMzrLqQewvKZp2xJHMHUujRgoiioaKt5NR4KYEFffU7NjGdve P1tc2ZQgNRH3ArhKm4d7MP7C4DLatPGLZXnfPeydxqXUE4WEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4kgRQVBw+CNKlW85KbhbUMbqyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jMjYz NmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcyZWRhODAxNDgvMzlhNThhYWItMjQ1OS0z Y2E1LWJkYmYtZjc0NzA5OGJiYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzI2MzZiYTUtNGZlMC00YWRmLWFh YTUtMzU3MmVkYTgwMTQ4L2MyNjM2YmE1LTRmZTAtNGFkZi1hYWE1LTM1NzJlZGE4 MDE0OC5jcmwwHwYDVR0jBBgwFoAU56ZajIemlQa2dtbRgdbQfBByx1YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jMjYzNmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcy ZWRhODAxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOoiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5IO4fUI6n9y3C28jCNxu9/PpSUiCOVosbABgXjCHY4xvURLBpHDSLY AXYYJwOz93xyrjc9jd5EUcMSX7hchGnYWXQiSJGnSbYBPe1+fZttNW5QbZZrIEZI 6Ck3qb7/y940hupMjODxz2VsH/54T5gGI9GrpitLdnDCbw/jLh8Zq5i4bzmHRg0z ZSiu8vucs5CuauxpJ2DDXIx1Soxv/C/itekiGQ2LaOD6/XhAkRB/WD5Zubxo34HR d9tvdTdv85sIo+Av4ba7I9TzB6oUdv2nodhHVR1tEAs7sIQrgcrtXwnZEExQcDkt zw8ZNn1dWedJFeM6E7lpZL6eqiPUM6o= -----END CERTIFICATE-----Generated at Sun Oct 25 09:13:30 2026 by rpki-client