$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa File: 195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa (raw, json) Hash identifier: SA2TKPR4G9mzMYtQSzyP2VUB7p7NBwxMT7TUatrBYCw= Subject key identifier: EB:37:E2:DF:A0:4C:DD:E4:83:62:F0:A5:9B:E9:52:CA:81:93:B5:9B Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584E842A3B3395E7FAB5BEE90990 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 401398 IP address blocks: 134.195.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:3b:33:95:e7:fa:b5:be:e9:09:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=10ce3a7c-91ba-4c25-be7e-7fa872a79497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:d3:64:5c:50:11:3c:3e:2e:24:ee:47:75: a6:2b:de:12:04:a6:32:2b:90:e5:92:a9:5f:69:15: f7:54:c9:e3:aa:40:70:4d:ad:ef:7c:cc:1f:1c:06: 46:aa:6e:ca:0d:2f:54:6c:6f:59:ed:f0:31:39:9b: 22:4c:80:ae:d0:a6:9c:b8:34:9b:a8:b0:e3:21:cd: 79:48:30:e6:c9:2c:2c:8a:95:ed:42:4e:7b:d3:b0: 30:16:c8:be:9b:3f:2a:3b:fc:7e:f4:1a:16:32:f8: a0:f2:e1:b4:87:a1:a3:c3:61:17:0f:c3:59:06:c2: 71:42:e8:57:87:f4:b1:13:b5:e9:fd:7a:fc:c0:3a: e3:50:75:2e:66:05:cd:05:3c:47:96:2b:3a:c9:e2: 74:a2:34:84:1c:41:30:8c:f2:cb:6b:c0:1e:b2:fb: fd:78:be:c3:6d:5a:79:d1:97:1c:10:85:f4:73:b2: ca:45:98:4e:f1:08:c5:d1:73:42:22:6b:1f:c3:bd: af:9b:ca:a4:14:23:b7:9b:aa:d5:62:60:20:ee:c1: 70:95:5f:39:e1:68:ef:b4:0a:46:7f:7c:12:5e:b3: 2f:02:a0:68:36:29:29:2d:27:f4:7c:ce:f0:9a:cf: be:87:17:2a:f2:2d:ed:be:18:d5:a8:2d:c1:ff:8f: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:E2:DF:A0:4C:DD:E4:83:62:F0:A5:9B:E9:52:CA:81:93:B5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 134.195.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:57:9d:3b:ce:f0:d4:4a:d9:2d:0c:eb:ed:60:f6:14:1c:a7: 5c:5c:2d:5c:16:24:1d:cd:27:99:c7:92:c7:13:1c:b7:c6:67: be:38:00:72:fc:83:28:76:c9:b1:cc:03:bc:04:bf:dd:9d:62: 00:6d:f4:2d:21:84:61:32:a5:b4:c3:01:b6:0e:57:58:53:6f: 00:c6:f0:dd:a6:c6:93:7b:95:e0:ae:8c:f2:95:0e:b6:73:0d: bb:a6:e4:e7:93:da:60:d9:4f:1a:ff:93:dd:7c:9f:6c:3d:e0: 31:7d:87:4f:58:69:57:93:2b:44:2f:82:dc:0c:38:96:af:99: ed:61:b9:07:32:38:7c:f2:3a:e7:9b:af:3a:0e:46:ab:57:69: cd:e0:ec:77:65:b5:51:f5:e8:c5:0e:66:a0:2a:c5:e9:ac:5c: ac:1b:14:d5:ab:55:45:e9:db:1f:d5:34:7b:9e:30:0a:5c:de: 98:1c:e2:97:ff:4c:77:68:a3:3e:2e:62:14:8e:95:70:1d:d8: 57:36:98:0b:2d:0b:09:ac:14:9d:15:2f:cf:23:89:08:70:ae: 7c:2c:a6:2d:59:9c:f4:67:c6:32:75:1c:70:13:55:6a:c0:a4: 31:e5:5c:b9:62:13:4a:19:a4:d8:04:a7:9a:6d:15:55:5b:7e: 50:f0:68:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjszlef6tb7pCZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk MTBjZTNhN2MtOTFiYS00YzI1LWJlN2UtN2ZhODcyYTc5NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxADTZFxQETw+LiTuR3WmK94SBKYyK5Dlkqlf aRX3VMnjqkBwTa3vfMwfHAZGqm7KDS9UbG9Z7fAxOZsiTICu0KacuDSbqLDjIc15 SDDmySwsipXtQk5707AwFsi+mz8qO/x+9BoWMvig8uG0h6Gjw2EXD8NZBsJxQuhX h/SxE7Xp/Xr8wDrjUHUuZgXNBTxHlis6yeJ0ojSEHEEwjPLLa8Aesvv9eL7DbVp5 0ZccEIX0c7LKRZhO8QjF0XNCImsfw72vm8qkFCO3m6rVYmAg7sFwlV854WjvtApG f3wSXrMvAqBoNikpLSf0fM7wms++hxcq8i3tvhjVqC3B/4+RwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs34t+gTN3kg2LwpZvpUsqBk7WbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMTk1Yzg2MGQtOGJlMC0z NmNiLWIwOTMtZGMwZTBiYTBhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdXnTvO8NRK2S0M6+1g9hQcp1xcLVwWJB3NJ5nHkscTHLfGZ744AHL8 gyh2ybHMA7wEv92dYgBt9C0hhGEypbTDAbYOV1hTbwDG8N2mxpN7leCujPKVDrZz Dbum5OeT2mDZTxr/k918n2w94DF9h09YaVeTK0QvgtwMOJavme1huQcyOHzyOueb rzoORqtXac3g7HdltVH16MUOZqAqxemsXKwbFNWrVUXp2x/VNHueMApc3pgc4pf/ THdooz4uYhSOlXAd2Fc2mAstCwmsFJ0VL88jiQhwrnwspi1ZnPRnxjJ1HHATVWrA pDHlXLliE0oZpNgEp5ptFVVbflDwaCc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:44 2026 by rpki-client