$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3af9cfd0-042d-3289-b4a9-a08a847f2052.roa File: 3af9cfd0-042d-3289-b4a9-a08a847f2052.roa (raw, json) Hash identifier: 7g1fwinX9f1nVVhtO2qtXpKZZ6mLErW35SxexpzMSCk= Subject key identifier: B2:66:FD:A0:D5:E5:6B:0A:30:94:B4:93:0F:D4:83:83:BB:F4:18:9F Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584F093CCCCCD24EEE5AD96E2780 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3af9cfd0-042d-3289-b4a9-a08a847f2052.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 134.231.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cc:cc:d2:4e:ee:5a:d9:6e:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=43641371-0fbc-4d49-8063-5a1ef130f9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:1d:a7:07:cf:f3:75:58:84:1d:47:e1:2d: ac:88:3b:bb:2d:fe:e4:2e:30:16:ca:c8:3b:7d:55: 88:fb:e4:ec:87:0d:9b:20:b4:08:63:33:18:7e:12: ac:c0:f6:2d:85:d5:ec:b5:22:88:4b:32:b5:e2:54: ff:54:98:22:a4:35:1d:70:78:5b:b2:52:d8:ff:5d: 0f:c5:7c:05:49:aa:d0:46:1a:03:38:c3:3e:86:50: 1c:d9:4b:55:e6:3d:17:b0:c5:33:03:a2:2a:45:3b: 2d:3a:b8:65:31:4e:fd:7e:0a:2a:5f:87:ef:82:25: 5c:c3:a4:46:40:31:25:74:07:35:59:5d:ad:65:92: d6:28:c1:7a:e4:5d:91:ff:13:4b:df:00:c8:78:e5: 04:d9:25:b2:1f:ff:7f:4b:02:4a:fd:fa:29:7e:12: 87:97:9d:0f:28:85:9f:6b:13:db:c8:ed:8c:73:4f: 33:14:98:5a:fa:3d:80:88:7d:2e:80:f2:c2:e8:0b: 17:39:b5:b6:59:1c:87:a9:46:35:13:87:8a:e3:41: d4:06:44:37:52:3a:bc:c5:b2:8c:7a:93:81:f8:e1: b7:9f:38:98:1f:44:b4:3c:91:52:bf:10:f4:6f:ab: e6:67:bc:0a:0a:4f:07:07:89:de:b2:36:93:6e:af: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:66:FD:A0:D5:E5:6B:0A:30:94:B4:93:0F:D4:83:83:BB:F4:18:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3af9cfd0-042d-3289-b4a9-a08a847f2052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 134.231.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:73:19:60:92:5d:53:9b:f4:52:36:9f:b6:6b:82:c0:80:4c: c1:30:6f:f3:fe:b1:0b:e0:92:10:bd:1f:34:94:dd:e3:a6:ae: d0:f2:fb:06:53:5a:fd:87:df:1f:db:0c:17:b1:e1:81:f9:fc: 19:3e:7e:72:47:23:14:dd:72:da:2f:43:d5:e1:00:b0:98:81: 1e:eb:01:76:54:f7:23:d2:a3:9c:ed:3b:96:0c:1b:95:d6:99: 5c:c6:83:58:a2:bd:cb:d1:6b:7b:0b:fc:db:dd:76:23:7d:45: b6:28:d3:ce:99:be:ad:a3:8b:94:41:09:0c:d8:1e:f0:db:a3: c5:78:c9:23:1f:16:28:be:e9:c1:14:e7:90:53:d2:27:ad:ff: 26:58:ff:2f:f6:12:78:3a:9c:e9:ed:30:81:de:df:b4:dd:74: 58:29:09:1f:8d:39:a7:ec:5d:0a:79:bd:9a:07:29:45:34:1e: 84:7d:0f:f1:e1:24:f0:23:c9:de:58:12:4b:bf:8c:55:40:a1: 06:87:ad:c6:7c:ba:54:97:16:4e:ea:d9:2f:23:94:f6:40:e1: a2:94:e8:6e:14:c9:dc:62:54:11:88:36:2f:bf:59:4f:ee:81: 14:86:17:57:81:a3:47:a1:05:a0:21:31:05:62:27:9f:f9:2c: 6a:a0:eb:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPMzM0k7uWtluJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NDM2NDEzNzEtMGZiYy00ZDQ5LTgwNjMtNWExZWYxMzBmOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmYdpwfP83VYhB1H4S2siDu7Lf7kLjAWysg7 fVWI++Tshw2bILQIYzMYfhKswPYthdXstSKISzK14lT/VJgipDUdcHhbslLY/10P xXwFSarQRhoDOMM+hlAc2UtV5j0XsMUzA6IqRTstOrhlMU79fgoqX4fvgiVcw6RG QDEldAc1WV2tZZLWKMF65F2R/xNL3wDIeOUE2SWyH/9/SwJK/fopfhKHl50PKIWf axPbyO2Mc08zFJha+j2AiH0ugPLC6AsXObW2WRyHqUY1E4eK40HUBkQ3Ujq8xbKM epOB+OG3nziYH0S0PJFSvxD0b6vmZ7wKCk8HB4nesjaTbq8JEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJm/aDV5WsKMJS0kw/Ug4O79BifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvM2FmOWNmZDAtMDQyZC0z Mjg5LWI0YTktYTA4YTg0N2YyMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhuf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVzGWCSXVOb9FI2n7ZrgsCATMEwb/P+sQvgkhC9HzSU3eOmrtDy+wZT Wv2H3x/bDBex4YH5/Bk+fnJHIxTdctovQ9XhALCYgR7rAXZU9yPSo5ztO5YMG5XW mVzGg1iivcvRa3sL/NvddiN9RbYo086Zvq2ji5RBCQzYHvDbo8V4ySMfFii+6cEU 55BT0iet/yZY/y/2Eng6nOntMIHe37TddFgpCR+NOafsXQp5vZoHKUU0HoR9D/Hh JPAjyd5YEku/jFVAoQaHrcZ8ulSXFk7q2S8jlPZA4aKU6G4UydxiVBGINi+/WU/u gRSGF1eBo0ehBaAhMQViJ5/5LGqg6/g= -----END CERTIFICATE-----Generated at Sat Sep 5 11:14:48 2026 by rpki-client