$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/8429bc87-d68a-32d7-b23b-0f777f37e2ef.roa File: 8429bc87-d68a-32d7-b23b-0f777f37e2ef.roa (raw, json) Hash identifier: 8+39BleSozQtDr8H1rRUFZMAc+YtTixAscIIdEvMBIc= Subject key identifier: A6:71:91:75:C7:D7:D2:06:92:89:A3:66:AE:73:1B:05:AE:98:3C:B1 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F4328584A8C7C742C5DF6F57A005D52C0 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/8429bc87-d68a-32d7-b23b-0f777f37e2ef.roa Signing time: Thu 17 Jul 2025 13:24:41 +0000 ROA not before: Thu 17 Jul 2025 13:24:41 +0000 ROA not after: Wed 15 Oct 2025 13:24:41 +0000 asID: 834 IP address blocks: 134.202.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:7c:74:2c:5d:f6:f5:7a:00:5d:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Jul 17 13:24:41 2025 GMT Not After : Oct 15 13:24:41 2025 GMT Subject: CN=3beba380-767c-498d-8b25-5f2c3389feca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:36:97:02:f3:c4:a3:57:5e:de:0e:ed:f2: e9:45:55:c3:dc:3b:06:3e:00:40:3d:a8:c0:c9:4b: 7b:a0:70:ad:f1:0d:35:09:cd:ae:06:94:ec:a1:ee: 0b:63:b4:31:a6:f6:3f:3e:f6:13:f8:6b:3c:da:57: c4:e4:28:a4:00:ae:07:03:c5:dd:dc:fc:b2:e9:9f: 99:f6:02:b5:2b:7e:06:73:21:2a:79:af:2a:8c:a1: 93:cf:92:6a:73:4f:4c:e2:02:7d:63:be:dd:ae:fc: 1f:c2:46:66:ee:16:e4:23:59:28:7f:d6:29:d0:fb: 47:34:59:49:56:2a:5d:18:69:81:2a:9a:d7:82:31: bf:34:ba:54:e3:72:55:64:e1:81:a2:92:7b:2d:79: 75:ed:77:59:5d:52:2e:df:16:32:10:2c:3e:31:4b: 82:46:6d:10:f7:90:5e:1f:8b:24:a6:d9:f2:14:c0: 89:a8:87:20:0e:3c:76:b8:73:87:36:75:29:90:ae: fe:8d:9f:7b:94:41:51:c7:00:92:a3:b2:64:ec:ec: b8:fd:23:ce:8e:6b:65:50:01:f1:08:30:39:5c:01: 51:7d:2f:61:e6:b8:27:60:9e:98:b7:60:71:3d:f7: 24:95:a6:38:c5:8c:71:6c:9b:11:3d:e9:20:6c:a7: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:71:91:75:C7:D7:D2:06:92:89:A3:66:AE:73:1B:05:AE:98:3C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/8429bc87-d68a-32d7-b23b-0f777f37e2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ee:e8:db:6a:8b:f6:4a:56:b5:4b:c8:4c:2c:67:57:aa:a5: a3:cb:53:9a:11:64:b0:b4:17:6c:8a:95:2e:74:88:71:05:8b: 75:d2:97:c2:8a:54:73:00:d5:12:b4:30:2b:a0:7b:0f:13:f1: 24:c7:d9:d5:43:09:55:e5:4c:15:ce:94:e5:46:67:5b:66:fc: 2c:6c:2c:61:9a:cb:b5:48:ec:e4:3f:46:4a:7a:f8:fc:82:5a: 98:f0:42:e6:69:6d:40:ca:1b:f9:7c:cc:41:aa:7f:21:7b:36: 2f:75:d3:79:e3:74:ab:6f:e2:b8:af:bb:a5:d6:fc:cc:ca:4c: 44:8f:10:d1:f5:79:f6:0b:78:2e:cd:0b:a7:6a:27:9c:47:74: d2:52:71:e0:70:62:1a:2a:c6:d5:2e:d6:97:6f:86:64:3e:ed: e7:3b:2e:f1:4c:ce:ee:29:30:ca:ff:8f:eb:cb:16:78:9f:f2: d8:7f:1e:1e:01:05:50:26:1a:17:36:be:41:cf:71:a1:d5:36: b7:08:7c:ce:c0:78:0d:14:9c:5f:6f:b4:0b:67:c5:a4:42:a2: 53:b1:de:93:2b:00:47:1a:de:9f:2d:e2:45:39:c7:d9:06:b1: 5a:5d:45:5c:d7:cc:ef:b6:f9:20:0f:9c:26:f6:99:ed:5a:8e: 40:ee:69:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMfHQsXfb1egBdUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MDcxNzEzMjQ0MVoXDTI1MTAxNTEzMjQ0MVowLzEtMCsGA1UEAxMk M2JlYmEzODAtNzY3Yy00OThkLThiMjUtNWYyYzMzODlmZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0js2lwLzxKNXXt4O7fLpRVXD3DsGPgBAPajA yUt7oHCt8Q01Cc2uBpTsoe4LY7QxpvY/PvYT+Gs82lfE5CikAK4HA8Xd3Pyy6Z+Z 9gK1K34GcyEqea8qjKGTz5Jqc09M4gJ9Y77drvwfwkZm7hbkI1kof9Yp0PtHNFlJ VipdGGmBKprXgjG/NLpU43JVZOGBopJ7LXl17XdZXVIu3xYyECw+MUuCRm0Q95Be H4skptnyFMCJqIcgDjx2uHOHNnUpkK7+jZ97lEFRxwCSo7Jk7Oy4/SPOjmtlUAHx CDA5XAFRfS9h5rgnYJ6Yt2BxPfcklaY4xYxxbJsRPekgbKdnfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZxkXXH19IGkomjZq5zGwWumDyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvODQyOWJjODctZDY4YS0z MmQ3LWIyM2ItMGY3NzdmMzdlMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhsrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDu6Ntqi/ZKVrVLyEwsZ1eqpaPLU5oRZLC0F2yKlS50iHEFi3XSl8KK VHMA1RK0MCugew8T8STH2dVDCVXlTBXOlOVGZ1tm/CxsLGGay7VI7OQ/Rkp6+PyC WpjwQuZpbUDKG/l8zEGqfyF7Ni9103njdKtv4rivu6XW/MzKTESPENH1efYLeC7N C6dqJ5xHdNJSceBwYhoqxtUu1pdvhmQ+7ec7LvFMzu4pMMr/j+vLFnif8th/Hh4B BVAmGhc2vkHPcaHVNrcIfM7AeA0UnF9vtAtnxaRColOx3pMrAEca3p8t4kU5x9kG sVpdRVzXzO+2+SAPnCb2me1ajkDuaTM= -----END CERTIFICATE-----Generated at Sat Jul 26 09:56:56 2025 by rpki-client