$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa File: a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa (raw, json) Hash identifier: vBFEpL4/indnoS/7U4IfWF6SN/c2MFF6Ec2Bz4hP7wI= Subject key identifier: 2B:24:5E:A3:3F:39:52:98:47:A7:61:FC:05:19:9E:82:7E:94:FE:74 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584F2ABD22D5E115A66B4AA9B640 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 204.155.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:22:d5:e1:15:a6:6b:4a:a9:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=29b0540c-594f-47e1-94be-939940da9ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:f7:69:36:26:71:47:ef:3c:f7:5c:dd:96: 78:4b:a6:b0:25:ec:c6:e1:73:b8:c2:e3:42:fd:41: c7:c6:7f:7d:ea:68:03:fe:21:e7:31:62:c6:86:e5: 86:ec:1e:6b:bc:11:e0:ef:bc:5a:87:8f:56:57:97: 75:97:e3:b4:45:e6:b1:77:9d:72:bf:3b:7f:5c:50: 13:c2:d4:da:40:9d:0b:48:cf:65:80:d2:ed:19:b8: be:d6:fe:65:70:8a:29:e2:56:36:d2:db:b5:8b:92: fc:1c:57:b9:f5:31:3f:a5:2b:ab:77:6f:c2:5d:69: 8f:91:93:36:b7:36:b9:81:e8:19:df:dd:10:c6:ea: fd:b1:93:83:00:bc:71:cf:dc:23:2a:89:56:6b:25: 57:94:04:fc:10:f3:19:f9:ef:06:f0:e7:71:cd:2a: 93:58:26:8b:92:26:bf:00:fd:48:c8:f8:ad:96:d0: 1a:07:d5:f8:97:27:f4:0f:1a:06:78:11:73:71:db: 4e:14:29:87:4c:b5:d2:3e:8f:b7:5e:62:14:6d:8d: 62:d4:eb:42:8e:70:9f:75:ee:3e:e6:1b:9f:47:88: a9:49:d0:ba:25:30:ce:4b:65:9e:43:a4:9d:11:75: ac:57:db:15:c1:18:00:3c:b9:37:ec:be:10:91:9e: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:5E:A3:3F:39:52:98:47:A7:61:FC:05:19:9E:82:7E:94:FE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f5:e5:2d:e1:3c:28:ea:40:9c:3b:7d:4a:b3:74:73:47:41: 70:de:f7:b4:6c:18:9e:3f:9b:35:99:d0:6a:bd:59:d4:23:51: 92:e4:21:8e:4c:8f:1f:0f:c3:de:7c:08:7c:3c:c8:5f:92:6b: 92:6b:cb:38:e6:a9:fa:8b:fa:0e:4a:03:72:53:1c:7e:53:cf: 49:9a:ea:8e:c9:15:9d:11:6d:7f:90:57:e7:f4:78:61:35:f5: dd:ae:2e:f5:a1:f4:b2:ab:66:c0:db:2b:d7:16:1f:f3:c9:cf: 28:16:6a:e8:59:3b:9e:99:9f:b0:b8:30:61:94:62:c4:bd:21: 31:b4:ab:e5:eb:c9:9f:4d:20:bb:90:4b:1e:2b:0a:11:90:59: 41:a8:6c:1f:f0:34:c7:01:41:60:bd:06:5a:8b:58:29:80:1e: c6:72:56:a8:22:de:d7:1e:60:01:27:92:bc:a1:85:dc:e5:81: c2:b8:0b:5f:d8:4b:33:e4:1c:50:23:18:2c:d6:03:0e:77:e9: 18:ed:fb:eb:e7:6b:77:b5:84:58:bc:2a:de:85:91:7b:92:15: 59:dc:90:eb:7a:e7:58:c9:38:e6:84:db:0b:72:34:01:b1:11: 28:e7:81:59:7e:79:83:5a:94:fe:d6:53:0f:0f:bc:f0:7e:fe: 66:15:99:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSLV4RWma0qptkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MjliMDU0MGMtNTk0Zi00N2UxLTk0YmUtOTM5OTQwZGE5ZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHj3aTYmcUfvPPdc3ZZ4S6awJezG4XO4wuNC /UHHxn996mgD/iHnMWLGhuWG7B5rvBHg77xah49WV5d1l+O0Reaxd51yvzt/XFAT wtTaQJ0LSM9lgNLtGbi+1v5lcIop4lY20tu1i5L8HFe59TE/pSurd2/CXWmPkZM2 tza5gegZ390Qxur9sZODALxxz9wjKolWayVXlAT8EPMZ+e8G8OdxzSqTWCaLkia/ AP1IyPitltAaB9X4lyf0DxoGeBFzcdtOFCmHTLXSPo+3XmIUbY1i1OtCjnCfde4+ 5hufR4ipSdC6JTDOS2WeQ6SdEXWsV9sVwRgAPLk37L4QkZ5EwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCskXqM/OVKYR6dh/AUZnoJ+lP50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvYTNkYWIzYTktMWMzMy0z N2FjLTliMzctMWEyMTQzODllNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn15S3hPCjqQJw7fUqzdHNHQXDe97RsGJ4/mzWZ0Gq9WdQjUZLkIY5M jx8Pw958CHw8yF+Sa5JryzjmqfqL+g5KA3JTHH5Tz0ma6o7JFZ0RbX+QV+f0eGE1 9d2uLvWh9LKrZsDbK9cWH/PJzygWauhZO56Zn7C4MGGUYsS9ITG0q+XryZ9NILuQ Sx4rChGQWUGobB/wNMcBQWC9BlqLWCmAHsZyVqgi3tceYAEnkryhhdzlgcK4C1/Y SzPkHFAjGCzWAw536Rjt++vna3e1hFi8Kt6FkXuSFVnckOt651jJOOaE2wtyNAGx ESjngVl+eYNalP7WUw8PvPB+/mYVmeY= -----END CERTIFICATE-----Generated at Sun Oct 11 17:02:22 2026 by rpki-client