$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/d492e89a-8f64-3ae7-a353-597164e47b19.roa File: d492e89a-8f64-3ae7-a353-597164e47b19.roa (raw, json) Hash identifier: UAb7NsqY1aNFXRJfbm5E7S5uAenSSARMA9QRRqyJQrY= Subject key identifier: 5D:BF:77:F8:C2:84:97:D1:29:23:BE:FC:23:4B:34:B5:26:DA:1A:DC Certificate issuer: /CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Certificate serial: 010D0C9F4328584D0D427EC8F4C4EF82AD52F400 Authority key identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/d492e89a-8f64-3ae7-a353-597164e47b19.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 8075 IP address blocks: 192.34.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7e:c8:f4:c4:ef:82:ad:52:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=b4d5b726-12da-4794-a312-4947afa23c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:31:ab:21:23:6e:5e:6a:43:92:d1:53:86:96: 27:38:42:ee:20:73:cc:9b:8d:70:92:96:60:f0:09: 89:8b:be:d7:b0:47:84:ce:eb:2f:85:80:43:cf:df: 0c:1f:7b:30:27:b7:7b:a0:ba:84:12:0b:b6:f0:bd: 86:ac:20:87:06:31:81:6d:59:3f:93:ef:30:58:a6: 7c:30:e5:49:a5:54:e7:07:10:cb:9b:6a:bc:bc:5a: fe:5a:9d:07:75:74:a1:70:d7:42:ab:84:ee:0f:a7: d0:b7:55:4d:80:78:13:68:a0:59:ab:5f:b7:45:a7: 1a:92:a2:0e:d0:31:d6:18:14:77:6b:8e:b7:1b:9c: bb:f8:a3:52:36:c6:9a:c7:1e:0e:9c:0f:7a:b7:9c: 53:5c:2c:5e:47:25:5c:6a:8e:19:e4:a6:25:33:1b: a0:7f:79:e3:72:d7:ac:9d:72:9c:68:e1:99:a1:f1: a7:46:b1:ca:d2:6d:c2:fa:be:3e:b5:5f:2e:45:ef: 1c:8f:89:cd:57:ad:38:2f:db:02:cd:3c:32:e9:82: 23:36:87:12:95:2f:29:76:c7:cb:77:5c:14:c0:1d: 6d:54:92:6b:d7:94:41:6a:59:59:d3:80:51:dd:2e: 77:32:85:8e:9f:6d:81:94:52:d6:74:0a:1a:60:bf: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:77:F8:C2:84:97:D1:29:23:BE:FC:23:4B:34:B5:26:DA:1A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/d492e89a-8f64-3ae7-a353-597164e47b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl X509v3 Authority Key Identifier: keyid:DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer sbgp-ipAddrBlock: critical IPv4: 192.34.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:8b:05:05:a8:76:74:fe:50:16:8e:52:6e:aa:b4:69:d5:72: 3b:2b:51:6e:47:4d:9b:44:54:46:ee:da:dc:54:f3:c7:b9:f7: 53:4b:a9:51:22:4b:cf:27:f1:0d:2e:15:c4:9a:83:58:c9:56: c0:d5:ff:f2:ae:9d:1b:91:3a:f5:e0:7a:c7:f0:65:d1:6c:d5: 9d:14:38:c6:ce:26:fa:de:7f:00:05:4c:46:e6:16:f5:29:b6: 3e:f1:47:13:12:02:ae:7c:23:8d:92:e1:df:97:12:df:9d:6c: 08:24:85:c0:c8:84:a9:aa:04:f8:91:0b:81:94:62:f8:a3:ea: 5b:cf:bd:5a:ab:fb:d4:da:02:7d:8d:7d:9e:17:49:bd:c8:6a: 37:89:c6:af:ff:df:ae:6d:30:3a:f0:03:a2:50:28:6c:79:00: e9:b7:4d:16:e6:29:af:5b:5f:91:43:ed:a2:51:f5:fb:41:39: b4:1a:6f:84:08:a3:25:3c:45:ac:7e:47:6c:2f:1a:4a:ca:c4: 4a:d7:4d:e6:ee:1b:36:8f:60:9f:0f:f1:86:ff:4c:9c:b2:aa: 45:8d:48:53:34:67:4a:8b:19:70:d7:7c:30:ff:73:cc:bb:3f: 01:25:68:b6:56:02:df:d2:76:28:83:5c:0c:84:f7:f9:71:39: 36:a9:9b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn7I9MTvgq1S9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5YjdiNzgtMDQzMS00MDMwLWJlOTUtNjg4OWVkNDBk NmU2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YjRkNWI3MjYtMTJkYS00Nzk0LWEzMTItNDk0N2FmYTIzYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTGrISNuXmpDktFThpYnOELuIHPMm41wkpZg 8AmJi77XsEeEzusvhYBDz98MH3swJ7d7oLqEEgu28L2GrCCHBjGBbVk/k+8wWKZ8 MOVJpVTnBxDLm2q8vFr+Wp0HdXShcNdCq4TuD6fQt1VNgHgTaKBZq1+3RacakqIO 0DHWGBR3a463G5y7+KNSNsaaxx4OnA96t5xTXCxeRyVcao4Z5KYlMxugf3njctes nXKcaOGZofGnRrHK0m3C+r4+tV8uRe8cj4nNV604L9sCzTwy6YIjNocSlS8pdsfL d1wUwB1tVJJr15RBallZ04BR3S53MoWOn22BlFLWdAoaYL8sbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2/d/jChJfRKSO+/CNLNLUm2hrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzli N2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5ZWQ0MGQ2ZTYvZDQ5MmU4OWEtOGY2NC0z YWU3LWEzNTMtNTk3MTY0ZTQ3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGM5YjdiNzgtMDQzMS00MDMwLWJl OTUtNjg4OWVkNDBkNmU2LzBjOWI3Yjc4LTA0MzEtNDAzMC1iZTk1LTY4ODllZDQw ZDZlNi5jcmwwHwYDVR0jBBgwFoAU232oxTB78la/VAaQxbH0hGpBeEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzliN2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5 ZWQ0MGQ2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiLBQWodnT+UBaOUm6qtGnVcjsrUW5HTZtEVEbu2txU88e591NLqVEi S88n8Q0uFcSag1jJVsDV//KunRuROvXgesfwZdFs1Z0UOMbOJvrefwAFTEbmFvUp tj7xRxMSAq58I42S4d+XEt+dbAgkhcDIhKmqBPiRC4GUYvij6lvPvVqr+9TaAn2N fZ4XSb3IajeJxq//365tMDrwA6JQKGx5AOm3TRbmKa9bX5FD7aJR9ftBObQab4QI oyU8Rax+R2wvGkrKxErXTebuGzaPYJ8P8Yb/TJyyqkWNSFM0Z0qLGXDXfDD/c8y7 PwElaLZWAt/SdiiDXAyE9/lxOTapm8o= -----END CERTIFICATE-----Generated at Wed Mar 4 19:22:25 2026 by rpki-client