$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa File: 5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa (raw, json) Hash identifier: 3E18T/M3wu0FDYfceZrZwuwYQeDfaoWFfe25Oj/h9dA= Subject key identifier: 16:2C:82:3D:07:F9:9D:F0:00:B6:88:FC:3E:2F:B0:96:AD:BA:06:0C Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584ED9C75367E839125398ADCF40 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 6360 IP address blocks: 192.48.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:53:67:e8:39:12:53:98:ad:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=23878ac9-303f-4a9e-8294-cd8252bb5bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:ab:68:02:a0:2f:8b:87:91:53:3e:97:29: c5:6c:c2:8e:71:de:bb:35:1a:a5:62:5a:0f:75:31: 2e:14:e3:af:d7:2c:82:4b:e2:c4:6d:16:09:a7:21: 21:84:38:63:f3:ef:3b:77:b2:83:9a:11:81:c2:d3: 90:99:f2:bc:d8:8e:07:36:eb:e2:28:1c:fd:f5:c7: de:ee:8b:b0:7a:ed:11:0f:25:8c:1f:c4:dc:b7:82: 61:e5:23:2a:4e:46:4f:89:2e:5f:06:53:69:71:48: 50:58:07:c9:e6:b1:90:a3:1d:6e:a3:86:de:39:d8: 09:88:d5:92:cc:c7:84:30:b3:da:db:a1:5c:75:56: 50:d4:1f:9d:cc:1f:c9:6a:55:fd:b5:18:1a:63:29: 3f:1c:09:d2:a4:d9:00:25:90:e8:38:a3:b6:d1:2b: f6:e7:d7:cc:96:2c:59:66:ae:a4:4a:04:7a:c5:40: 64:93:05:e8:31:ff:a6:00:a9:03:fd:f9:9a:3b:27: a7:06:82:df:2d:a0:d0:ff:51:b1:5b:9b:ae:06:b0: 39:2f:5c:54:d0:b8:b1:cf:95:98:af:02:5d:97:fc: 83:4d:3b:9b:e2:54:91:a3:36:c6:4f:8f:b9:35:c4: 39:08:31:94:2f:eb:2e:17:1e:13:2e:bb:79:56:53: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2C:82:3D:07:F9:9D:F0:00:B6:88:FC:3E:2F:B0:96:AD:BA:06:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/5ff91a50-78d7-3919-b9a8-14dedd6cf29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.48.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:5a:3a:6a:cb:00:2f:70:0c:7f:84:fc:f7:a0:51:b8:12: a9:5d:01:cc:63:77:22:da:47:9f:74:f3:d6:d6:6c:5d:ff:66: b8:66:83:46:af:e8:b1:f0:88:79:6d:79:a8:fe:5e:01:2e:80: 55:e9:0f:57:27:e7:03:e8:93:c4:87:a4:79:02:b6:27:ae:4f: 85:39:ee:57:9e:af:5a:47:d8:e5:6e:af:90:91:f3:04:7a:56: c8:6b:f0:fe:da:38:b4:5e:e3:c9:35:e0:ee:14:e8:7c:50:58: 94:c7:4b:62:da:3e:e7:5d:e2:87:51:f1:da:2e:71:df:92:ef: 92:09:70:fe:ea:8d:27:b1:13:f9:21:16:f5:1e:88:40:c1:93: 15:57:c7:9f:cf:c8:7f:ca:96:7a:27:2a:d6:18:bc:5c:1d:de: e0:00:1a:77:67:71:77:1d:45:f8:6a:a1:0e:e5:0e:bd:05:aa: e0:e2:b4:9f:18:33:a8:08:8f:de:84:e7:57:01:f7:fc:2f:54: 77:18:dc:34:32:a4:a7:11:03:3f:28:80:69:4b:b4:dd:a5:af: 30:b7:4e:2d:c7:b5:e7:bc:2b:20:0e:dc:c6:ed:f3:e1:f3:1b: f2:29:f7:aa:4e:61:2b:d8:d4:e0:b1:3d:13:e5:fe:34:8f:b5: 6d:26:66:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1Nn6DkSU5itz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MjM4NzhhYzktMzAzZi00YTllLTgyOTQtY2Q4MjUyYmI1YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGmraAKgL4uHkVM+lynFbMKOcd67NRqlYloP dTEuFOOv1yyCS+LEbRYJpyEhhDhj8+87d7KDmhGBwtOQmfK82I4HNuviKBz99cfe 7ouweu0RDyWMH8Tct4Jh5SMqTkZPiS5fBlNpcUhQWAfJ5rGQox1uo4beOdgJiNWS zMeEMLPa26FcdVZQ1B+dzB/JalX9tRgaYyk/HAnSpNkAJZDoOKO20Sv259fMlixZ Zq6kSgR6xUBkkwXoMf+mAKkD/fmaOyenBoLfLaDQ/1GxW5uuBrA5L1xU0Lixz5WY rwJdl/yDTTub4lSRozbGT4+5NcQ5CDGUL+suFx4TLrt5VlNGAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYsgj0H+Z3wALaI/D4vsJatugYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNWZmOTFhNTAtNzhkNy0z OTE5LWI5YTgtMTRkZWRkNmNmMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt3WjpqywAvcAx/hPz3oFG4EqldAcxjdyLaR59089bWbF3/Zrhmg0av 6LHwiHlteaj+XgEugFXpD1cn5wPok8SHpHkCtieuT4U57leer1pH2OVur5CR8wR6 Vshr8P7aOLRe48k14O4U6HxQWJTHS2LaPudd4odR8doucd+S75IJcP7qjSexE/kh FvUeiEDBkxVXx5/PyH/KlnonKtYYvFwd3uAAGndncXcdRfhqoQ7lDr0FquDitJ8Y M6gIj96E51cB9/wvVHcY3DQypKcRAz8ogGlLtN2lrzC3Ti3Htee8KyAO3Mbt8+Hz G/Ip96pOYSvY1OCxPRPl/jSPtW0mZoo= -----END CERTIFICATE-----Generated at Sat Sep 12 08:59:46 2026 by rpki-client