$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa File: a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa (raw, json) Hash identifier: nwm2HOxztzZ0GwfDbu2RhLuzxtJDaaGNSjucTOt7qmI= Subject key identifier: 64:17:B5:A3:4A:54:EC:02:55:73:F6:C5:05:54:2F:4F:37:4B:32:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EAA51C4EEF5F491CC6ABB2C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 34.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:c4:ee:f5:f4:91:cc:6a:bb:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=5df11031-d73f-44a5-8e57-6b85aa0a7f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:0c:70:88:cc:dc:ba:fd:7a:94:fb:e6:47: 85:30:21:0d:37:43:25:d8:73:b3:66:fb:ba:48:48: 32:03:30:a6:cb:6e:ea:6a:fe:2b:96:ac:da:cc:78: 86:08:e0:1d:ea:b3:8c:e7:47:6d:0a:6e:9f:9b:b2: e2:3f:11:6e:2d:8a:33:08:4b:54:0c:33:fe:12:f6: fc:ac:e6:cb:88:1d:bb:dd:1c:60:5b:6d:57:17:d7: 38:c5:7b:75:44:c9:b9:a8:3b:78:32:ba:e4:8b:3d: 04:21:ad:58:02:ca:48:3b:04:8f:7e:ae:00:28:cd: 51:e9:fe:0a:ab:67:12:13:cf:7a:e2:65:b5:ff:91: 3f:9a:09:33:f0:4f:ca:5e:08:06:de:1f:b6:6d:86: ff:0f:60:9b:b3:bc:ff:42:a7:ef:e4:1a:0a:1e:41: 80:fc:b4:2d:39:c3:2d:cb:c3:d7:4b:7e:82:74:a8: 58:31:7a:c2:bc:d6:8f:2e:33:68:61:52:7d:ba:c6: 30:17:1a:11:4f:08:0d:0c:e9:11:30:b9:d9:bf:54: 77:5a:63:0c:13:29:b7:f3:c6:3f:b1:b4:cd:01:05: f8:26:ef:84:e4:61:e4:64:4d:ab:aa:41:50:18:61: 4e:30:6a:4f:50:25:d9:1b:ce:46:87:b6:bf:46:9a: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:B5:A3:4A:54:EC:02:55:73:F6:C5:05:54:2F:4F:37:4B:32:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.3.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:15:c9:61:2c:50:cd:c8:74:03:bc:8f:67:26:f1:73:5d:6d: c6:5e:26:6b:3a:6c:18:5e:a9:e7:92:7f:b5:75:00:9b:23:b8: fd:cb:d7:97:48:0c:93:55:01:78:f4:f1:21:10:ef:31:dc:6f: 45:39:57:04:69:cf:cc:4b:15:f7:0b:7a:4c:dc:5c:cf:e4:65: 59:87:de:d7:2e:01:2a:27:25:c1:60:f7:2a:8a:f6:75:15:32: 2d:58:eb:23:fc:91:a7:8d:e7:23:b5:3c:6d:f6:5f:e3:83:0b: 72:2d:7b:fe:dc:b9:65:12:fd:a2:7c:51:6c:7f:bf:46:67:9b: f1:5e:1a:5c:9e:6d:8d:d5:bd:42:ab:15:57:46:9d:c4:9f:ca: fa:27:96:c3:b9:ad:62:53:7e:88:5e:4e:b2:3c:f4:51:85:be: 3f:5b:2c:78:0b:8a:07:ff:18:2b:0c:45:87:53:90:6b:45:ba: ca:5b:3c:00:3a:ee:23:67:7b:2c:a3:f3:1f:1d:ef:ae:92:b6: 38:85:5a:a2:53:a2:8d:b9:8a:b6:2a:14:9d:3e:72:83:05:fb: 30:30:b5:a0:ae:6c:d4:68:de:19:3a:3c:1a:f2:5e:c2:18:24: 0e:3e:3d:6e:ef:53:64:d5:fc:e4:5a:98:40:e0:36:80:0d:d2: 30:0d:6c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUcTu9fSRzGq7LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk NWRmMTEwMzEtZDczZi00NGE1LThlNTctNmI4NWFhMGE3ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4EMcIjM3Lr9epT75keFMCENN0Ml2HOzZvu6 SEgyAzCmy27qav4rlqzazHiGCOAd6rOM50dtCm6fm7LiPxFuLYozCEtUDDP+Evb8 rObLiB273RxgW21XF9c4xXt1RMm5qDt4Mrrkiz0EIa1YAspIOwSPfq4AKM1R6f4K q2cSE8964mW1/5E/mgkz8E/KXggG3h+2bYb/D2Cbs7z/Qqfv5BoKHkGA/LQtOcMt y8PXS36CdKhYMXrCvNaPLjNoYVJ9usYwFxoRTwgNDOkRMLnZv1R3WmMMEym388Y/ sbTNAQX4Ju+E5GHkZE2rqkFQGGFOMGpPUCXZG85Gh7a/RprxVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQXtaNKVOwCVXP2xQVUL083SzL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5NmUzYmMtZThhNi0z MTk2LWFmYWYtYTIwYWNmNTM3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcVyWEsUM3IdAO8j2cm8XNdbcZeJms6bBheqeeSf7V1AJsjuP3L15dI DJNVAXj08SEQ7zHcb0U5VwRpz8xLFfcLekzcXM/kZVmH3tcuASonJcFg9yqK9nUV Mi1Y6yP8kaeN5yO1PG32X+ODC3Ite/7cuWUS/aJ8UWx/v0Znm/FeGlyebY3VvUKr FVdGncSfyvonlsO5rWJTfoheTrI89FGFvj9bLHgLigf/GCsMRYdTkGtFuspbPAA6 7iNneyyj8x8d766StjiFWqJToo25irYqFJ0+coMF+zAwtaCubNRo3hk6PBryXsIY JA4+PW7vU2TV/ORamEDgNoAN0jANbNg= -----END CERTIFICATE-----Generated at Fri Aug 7 21:43:53 2026 by rpki-client