$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa File: 41387a42-8a00-3750-bed6-58a6e3fafc54.roa (raw, json) Hash identifier: yCwecUccaUk0OZsZ/GuaVe4VlLS2xqTFhwyj8k2qmTY= Subject key identifier: 1D:DD:5D:AF:03:58:56:C8:42:B4:37:23:F5:D9:FE:1B:73:2F:3F:C0 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584F1037A26EFF440E45A9182680 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 136806 IP address blocks: 192.163.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a2:6e:ff:44:0e:45:a9:18:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=151e6050-03bc-4abb-999b-d1e36564cb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:91:fb:80:4e:ca:60:db:7a:96:57:a5:43: 87:1d:3f:8a:1e:e7:6e:35:13:76:72:f7:de:b4:9e: b8:03:57:3a:b7:52:70:94:96:83:b1:a9:90:e2:07: 4a:63:fa:84:4e:1d:dd:12:6b:81:85:3d:3f:f5:ce: df:0c:3c:db:5e:fb:d1:c6:82:1a:6c:80:f4:d7:29: a8:2b:6d:8e:ce:ec:79:31:d1:6b:63:6c:53:71:27: 01:9d:3a:07:85:63:ba:53:2e:8e:d5:01:08:cf:3d: dd:d9:8a:98:f5:0a:9a:8d:0e:2f:de:20:8f:7e:8c: 30:3c:f1:24:13:a5:59:0e:ae:9c:98:ef:13:1c:eb: 28:f0:d3:94:0f:0a:d4:6e:1d:ec:ee:10:01:f2:99: 9f:5b:0b:cf:a4:b9:7b:a1:f2:81:15:95:d3:fc:d3: 37:39:7a:e1:65:16:71:84:c8:1b:a2:5f:ba:65:36: 77:2f:2f:1e:c8:5e:f7:16:d4:99:8b:a2:bd:4e:d0: c5:d2:6f:c2:a3:17:a2:46:36:79:be:6e:17:c9:4b: 01:20:81:44:64:2a:df:66:ce:48:d3:61:65:7f:ab: 5e:d3:73:02:9e:8c:1b:ff:f2:55:fb:1a:ae:d6:72: ca:df:ec:fe:57:d7:69:03:df:31:c0:61:51:cf:36: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DD:5D:AF:03:58:56:C8:42:B4:37:23:F5:D9:FE:1B:73:2F:3F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/41387a42-8a00-3750-bed6-58a6e3fafc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.163.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:47:78:ae:b3:dd:1a:b7:ae:37:7e:b4:51:04:2e:d0:59:3f: 45:6c:24:b9:b6:89:3c:6f:eb:ff:7d:20:50:d7:92:b7:87:ca: be:c2:e2:e2:e4:72:46:81:95:da:31:e5:24:09:53:80:c1:f3: 04:d5:4a:f4:46:e1:5c:a2:50:a7:08:9b:65:a7:4a:99:7e:3c: aa:4b:54:cd:e2:33:bc:4b:2c:19:c1:c2:10:5c:78:54:89:1d: 62:92:81:db:e4:09:46:a3:d2:ef:6f:94:86:ec:e1:35:02:26: 9a:c2:87:08:6b:9c:e0:32:b9:88:1c:4d:91:75:cb:6a:d0:f3: 2b:0d:c2:46:8a:bf:f0:fd:99:97:84:3f:88:88:29:cd:87:66: 3b:73:a0:40:3a:e5:5c:60:1e:12:9f:bc:7a:ad:11:a2:d6:3c: c7:a0:d9:01:ce:ab:39:3f:50:0d:d8:fb:e4:01:65:55:a5:62: 95:88:e1:2b:1f:17:7b:f5:9f:83:e4:33:5d:51:40:cf:28:20: 71:a7:fb:06:1a:54:c0:3c:23:47:8e:96:97:0b:7d:f1:35:02: 79:c4:4e:5d:d5:d9:a8:75:4a:e4:6a:e2:df:ed:d7:a6:8d:be: 37:09:ad:58:99:4a:f6:91:a9:79:8c:09:ef:64:4a:79:59:ed: 70:f1:63:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6Ju/0QORakYJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MTUxZTYwNTAtMDNiYy00YWJiLTk5OWItZDFlMzY1NjRjYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG2R+4BOymDbepZXpUOHHT+KHuduNRN2cvfe tJ64A1c6t1JwlJaDsamQ4gdKY/qETh3dEmuBhT0/9c7fDDzbXvvRxoIabID01ymo K22Ozux5MdFrY2xTcScBnToHhWO6Uy6O1QEIzz3d2YqY9QqajQ4v3iCPfowwPPEk E6VZDq6cmO8THOso8NOUDwrUbh3s7hAB8pmfWwvPpLl7ofKBFZXT/NM3OXrhZRZx hMgbol+6ZTZ3Ly8eyF73FtSZi6K9TtDF0m/CoxeiRjZ5vm4XyUsBIIFEZCrfZs5I 02Flf6te03MCnowb//JV+xqu1nLK3+z+V9dpA98xwGFRzzbd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3dXa8DWFbIQrQ3I/XZ/htzLz/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvNDEzODdhNDItOGEwMC0z NzUwLWJlZDYtNThhNmUzZmFmYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKMFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBHeK6z3Rq3rjd+tFEELtBZP0VsJLm2iTxv6/99IFDXkreHyr7C4uLk ckaBldox5SQJU4DB8wTVSvRG4VyiUKcIm2WnSpl+PKpLVM3iM7xLLBnBwhBceFSJ HWKSgdvkCUaj0u9vlIbs4TUCJprChwhrnOAyuYgcTZF1y2rQ8ysNwkaKv/D9mZeE P4iIKc2HZjtzoEA65VxgHhKfvHqtEaLWPMeg2QHOqzk/UA3Y++QBZVWlYpWI4Ssf F3v1n4PkM11RQM8oIHGn+wYaVMA8I0eOlpcLffE1AnnETl3V2ah1SuRq4t/t16aN vjcJrViZSvaRqXmMCe9kSnlZ7XDxY8A= -----END CERTIFICATE-----Generated at Fri Sep 4 23:05:23 2026 by rpki-client