$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa File: d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa (raw, json) Hash identifier: KhwMMDKRP8Nj/sfa2CzOHlc4FuBn1WxXttr3Jz3i/kk= Subject key identifier: 68:60:F7:15:16:17:07:D6:F1:99:13:EB:82:58:5F:33:0B:E0:36:E5 Certificate issuer: /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Certificate serial: 010D0C9F4328584F1037940BF415098AE1CB9120 Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 133462 IP address blocks: 192.91.108.0/24 maxlen: 24 192.91.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:94:0b:f4:15:09:8a:e1:cb:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=39925fad-f3ca-4bd8-9dca-bf848c41c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:d7:16:bb:b1:51:76:78:ed:64:8d:e1:dc: 07:4c:6e:5a:e2:32:ac:df:44:e4:08:72:96:d7:4a: b4:ff:ac:d3:85:32:f7:34:87:43:89:a4:1c:62:c5: 58:d6:4d:17:71:ae:4d:14:a0:ac:3e:78:6a:c5:c5: 64:77:ef:9e:95:68:b3:13:5e:9e:d1:a2:81:7d:d4: 42:13:20:02:40:eb:df:7a:bc:14:81:ac:21:e2:9a: 96:95:25:af:8c:f1:aa:77:65:6d:c6:15:35:98:88: 88:6c:7d:a9:e6:4f:2d:4b:25:f6:3e:e9:15:9d:3c: bd:59:b4:91:a7:0f:e8:2d:9b:ac:e8:54:58:2f:cb: 6b:63:5c:7c:64:6d:d1:05:5d:59:fa:44:7d:55:59: c0:fb:61:14:99:af:9f:09:2a:34:b7:60:f8:d6:1a: d8:a0:68:bb:91:c8:eb:f0:fc:ae:2e:df:db:75:30: ff:da:f3:c1:19:00:59:eb:d0:a5:1d:e8:a8:8d:62: df:26:5d:b6:78:ad:af:92:00:39:51:db:31:e3:e6: 2b:9f:95:fb:01:c8:49:9f:b4:82:a3:89:17:bd:bd: 50:4c:60:c4:36:0c:96:94:3f:b4:5a:8a:e1:eb:00: 3c:c6:f1:00:6c:83:12:f4:01:7e:08:fd:17:7c:19: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:60:F7:15:16:17:07:D6:F1:99:13:EB:82:58:5F:33:0B:E0:36:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/d3cc9cc7-d6cb-3672-bcce-1a437c34d50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl X509v3 Authority Key Identifier: keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer sbgp-ipAddrBlock: critical IPv4: 192.91.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ce:64:09:c1:f5:90:f8:a9:b1:27:e0:f7:3b:8b:60:d9:b0: 75:4a:fd:33:7a:c9:d8:10:7a:75:2b:d5:18:55:03:08:82:0a: 19:e9:ff:03:e9:53:dd:68:6d:18:c4:25:97:25:31:95:2e:a1: ec:d1:53:77:d1:55:50:c7:38:28:09:c9:35:aa:28:35:11:a9: 87:38:c5:75:c6:d5:15:74:e6:ae:84:cd:0e:a5:62:66:17:88: 50:bf:dd:55:7c:eb:bd:cb:51:5b:f4:35:16:ec:f0:89:e6:f6: 45:33:59:84:4d:12:0c:e2:0a:e8:7d:0f:78:55:66:28:e8:03: 03:6b:89:8b:44:2e:7c:b7:c2:b9:c6:3f:02:02:4b:5c:fe:bd: 1a:f3:e3:51:c3:11:08:95:e3:c6:1f:dc:98:d8:2d:ca:d0:70: 72:96:32:92:73:85:8a:f6:0a:7b:09:5d:76:6f:c1:b5:25:3e: c4:d6:0c:e4:a5:37:5c:b5:4a:5e:95:c2:90:0a:6f:f5:c8:15: 14:77:1f:8a:e1:24:9c:37:d0:98:43:0c:d9:30:bb:27:49:c1: 9d:6f:a5:a6:ee:36:20:cd:73:ea:e4:49:42:c8:0d:e9:a8:ca: 6f:2c:a0:0f:2d:4b:c7:55:be:b0:aa:d9:3e:1f:5d:9d:88:21: 4e:7e:c7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5QL9BUJiuHLkSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJk NzhlMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk Mzk5MjVmYWQtZjNjYS00YmQ4LTlkY2EtYmY4NDhjNDFjODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0LXFruxUXZ47WSN4dwHTG5a4jKs30TkCHKW 10q0/6zThTL3NIdDiaQcYsVY1k0Xca5NFKCsPnhqxcVkd++elWizE16e0aKBfdRC EyACQOvferwUgawh4pqWlSWvjPGqd2VtxhU1mIiIbH2p5k8tSyX2PukVnTy9WbSR pw/oLZus6FRYL8trY1x8ZG3RBV1Z+kR9VVnA+2EUma+fCSo0t2D41hrYoGi7kcjr 8PyuLt/bdTD/2vPBGQBZ69ClHeiojWLfJl22eK2vkgA5Udsx4+Yrn5X7AchJn7SC o4kXvb1QTGDENgyWlD+0Worh6wA8xvEAbIMS9AF+CP0XfBmepwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhg9xUWFwfW8ZkT64JYXzML4DblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIy MjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvZDNjYzljYzctZDZjYi0z NjcyLWJjY2UtMWE0MzdjMzRkNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRiMjIxMTctYzNiMS00Zjc0LWFk MmEtMGZjZDEwYTJkNzhlLzM0YjIyMTE3LWMzYjEtNGY3NC1hZDJhLTBmY2QxMGEy ZDc4ZS5jcmwwHwYDVR0jBBgwFoAUg10MEq+eKOvB66Bxguz0PklWr1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNk MTBhMmQ3OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHOZAnB9ZD4qbEn4Pc7i2DZsHVK/TN6ydgQenUr1RhVAwiCChnp/wPp U91obRjEJZclMZUuoezRU3fRVVDHOCgJyTWqKDURqYc4xXXG1RV05q6EzQ6lYmYX iFC/3VV8673LUVv0NRbs8Inm9kUzWYRNEgziCuh9D3hVZijoAwNriYtELny3wrnG PwICS1z+vRrz41HDEQiV48Yf3JjYLcrQcHKWMpJzhYr2CnsJXXZvwbUlPsTWDOSl N1y1Sl6VwpAKb/XIFRR3H4rhJJw30JhDDNkwuydJwZ1vpabuNiDNc+rkSULIDemo ym8soA8tS8dVvrCq2T4fXZ2IIU5+x6s= -----END CERTIFICATE-----Generated at Sat Sep 5 01:08:42 2026 by rpki-client