$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/d492e89a-8f64-3ae7-a353-597164e47b19.roa File: d492e89a-8f64-3ae7-a353-597164e47b19.roa (raw, json) Hash identifier: pDD81Rhp4XXIpV7OgZImXTmDaLIfamwxSvMH7JKEPis= Subject key identifier: C1:57:84:52:BC:71:5B:16:B0:92:69:0D:F8:2D:95:A3:12:43:55:C2 Certificate issuer: /CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Certificate serial: 010D0C9F4328584EA7945A6F94AA484864239B00 Authority key identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/d492e89a-8f64-3ae7-a353-597164e47b19.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 192.34.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:5a:6f:94:aa:48:48:64:23:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cf68aaf3-1c4c-4251-9916-f802b9fa0b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:00:bb:18:02:aa:ba:19:f9:fe:b5:b1:c9: ad:55:fb:d8:bc:48:47:91:42:77:16:e7:49:fe:f1: 2d:2f:60:d3:1f:67:03:16:b5:ee:d4:bd:bc:7f:fc: ee:6c:73:c3:c8:a4:ff:52:d8:86:de:ec:6b:b2:8d: 82:9b:78:40:a5:ac:3e:b9:93:3c:2b:cd:64:03:8d: 97:39:ab:ca:3f:7f:74:4d:df:33:36:be:3e:ca:48: e3:75:55:a9:a6:02:5e:a7:f4:55:4c:9c:c4:8d:d3: 9a:5a:ee:17:eb:d8:89:f9:9e:e4:3c:8e:7f:77:e1: 7d:76:da:c9:c6:11:a4:0d:41:ab:75:f6:db:85:83: 8b:a0:32:e8:26:1a:d6:a3:69:5d:aa:d6:63:5a:af: bb:5a:cf:c4:5a:76:28:be:96:05:40:ab:c2:4d:43: 23:1f:2c:df:08:89:46:55:ff:a8:d9:ac:3f:60:d1: 6d:e1:92:d2:03:af:43:ae:3a:1c:67:11:6d:8d:98: 55:08:94:94:c7:d0:ba:00:9f:9e:2c:d1:77:65:42: 36:ba:8e:69:6e:a7:6d:dd:24:74:c8:75:f2:d1:ed: 0c:f2:d5:1e:44:22:24:4f:d0:85:68:df:52:8a:15: 6c:2d:47:66:43:96:aa:c8:0c:ad:77:f5:cb:b2:93: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:57:84:52:BC:71:5B:16:B0:92:69:0D:F8:2D:95:A3:12:43:55:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/d492e89a-8f64-3ae7-a353-597164e47b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl X509v3 Authority Key Identifier: keyid:DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer sbgp-ipAddrBlock: critical IPv4: 192.34.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:a9:41:2d:80:2e:f1:c1:66:83:e9:0e:24:e3:2f:40:d3:98: 3b:f2:eb:c4:75:3e:a3:8b:fa:eb:76:90:78:b1:97:00:1f:f9: ea:4b:7a:a8:f1:4a:9d:4a:a3:91:e9:39:96:d3:14:24:98:24: d0:e0:f4:34:75:5e:73:c2:50:81:e1:5a:88:bb:e9:66:10:6f: 89:47:a5:79:1d:ed:56:1c:5a:aa:83:7e:55:e9:98:2a:8c:2c: 71:79:bc:6b:11:96:e7:c2:49:21:15:c0:19:8e:9f:eb:80:f1: 5b:2d:07:60:70:15:93:05:68:9f:2b:e0:bf:87:0e:57:20:dd: 0a:8e:20:b5:3f:78:4e:b2:29:12:10:13:57:94:4f:f0:da:89: 25:d6:01:bf:ce:1e:6b:e0:6f:1f:2d:8e:4c:87:df:d1:34:2c: dc:5d:89:13:90:e9:93:eb:4c:08:59:1e:8d:b0:7c:16:8e:88: 1b:05:37:3b:81:70:3e:c1:96:ff:a5:29:d4:b0:64:a2:d9:b2: 5f:fd:2b:dd:20:4f:74:bc:50:fc:3d:97:77:f8:33:54:bf:2a: 31:02:13:94:cb:6e:7a:7a:cf:43:86:93:49:2f:40:58:f7:5f: 32:87:33:7c:f3:df:5f:95:8e:b5:d8:ea:6b:34:a0:eb:48:10: f8:ff:8d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlFpvlKpISGQjmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5YjdiNzgtMDQzMS00MDMwLWJlOTUtNjg4OWVkNDBk NmU2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2Y2OGFhZjMtMWM0Yy00MjUxLTk5MTYtZjgwMmI5ZmEwYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjsAuxgCqroZ+f61scmtVfvYvEhHkUJ3FudJ /vEtL2DTH2cDFrXu1L28f/zubHPDyKT/UtiG3uxrso2Cm3hApaw+uZM8K81kA42X OavKP390Td8zNr4+ykjjdVWppgJep/RVTJzEjdOaWu4X69iJ+Z7kPI5/d+F9dtrJ xhGkDUGrdfbbhYOLoDLoJhrWo2ldqtZjWq+7Ws/EWnYovpYFQKvCTUMjHyzfCIlG Vf+o2aw/YNFt4ZLSA69DrjocZxFtjZhVCJSUx9C6AJ+eLNF3ZUI2uo5pbqdt3SR0 yHXy0e0M8tUeRCIkT9CFaN9SihVsLUdmQ5aqyAytd/XLspNYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFXhFK8cVsWsJJpDfgtlaMSQ1XCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzli N2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5ZWQ0MGQ2ZTYvZDQ5MmU4OWEtOGY2NC0z YWU3LWEzNTMtNTk3MTY0ZTQ3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGM5YjdiNzgtMDQzMS00MDMwLWJl OTUtNjg4OWVkNDBkNmU2LzBjOWI3Yjc4LTA0MzEtNDAzMC1iZTk1LTY4ODllZDQw ZDZlNi5jcmwwHwYDVR0jBBgwFoAU232oxTB78la/VAaQxbH0hGpBeEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzliN2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5 ZWQ0MGQ2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGpQS2ALvHBZoPpDiTjL0DTmDvy68R1PqOL+ut2kHixlwAf+epLeqjx Sp1Ko5HpOZbTFCSYJNDg9DR1XnPCUIHhWoi76WYQb4lHpXkd7VYcWqqDflXpmCqM LHF5vGsRlufCSSEVwBmOn+uA8VstB2BwFZMFaJ8r4L+HDlcg3QqOILU/eE6yKRIQ E1eUT/DaiSXWAb/OHmvgbx8tjkyH39E0LNxdiROQ6ZPrTAhZHo2wfBaOiBsFNzuB cD7Blv+lKdSwZKLZsl/9K90gT3S8UPw9l3f4M1S/KjECE5TLbnp6z0OGk0kvQFj3 XzKHM3zz31+VjrXY6ms0oOtIEPj/jZE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:36:58 2026 by rpki-client