$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa File: db240b6c-595b-339e-8c97-985b4f53d411.roa (raw, json) Hash identifier: EIlyFtwa7UaVFqipaGXcsXfaLnNS+u+k2izDNe4As2o= Subject key identifier: 02:EB:96:FC:28:8C:2D:23:2A:BC:7A:59:2D:E6:38:D2:A7:F9:EC:82 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F4328584A8575FF2667FFB912CEB8B396 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 1239 IP address blocks: 134.202.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ff:26:67:ff:b9:12:ce:b8:b3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=79396884-f57f-4a70-ac21-71fcb06e4abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:32:0a:cf:4f:31:cf:5f:fd:b5:e0:68:76: a4:56:1a:a8:97:26:a7:4c:bb:01:74:de:94:7c:b1: a3:44:6d:0a:52:4d:b7:33:fd:d4:ba:54:64:02:e7: 1f:01:f7:0d:e1:c9:0a:a4:0a:f9:68:ac:45:8f:35: 20:a4:09:d2:56:c3:90:9a:a4:cd:60:7e:98:01:b1: ee:91:19:00:21:5f:34:e8:90:1b:12:74:7d:82:1a: 1d:6c:ba:1c:b0:c7:7a:0d:e4:8e:d6:06:8a:e8:86: b7:94:5b:e1:17:0c:d1:90:1f:bb:7f:fd:c1:a1:14: 6a:be:56:f4:1b:e5:04:3b:ab:34:8e:0d:9c:e1:d4: 68:d4:49:77:f3:76:62:0b:99:f8:d6:fb:54:09:93: 54:47:ac:67:35:d3:4c:d6:96:c5:9a:0a:c2:69:1a: bc:7b:9b:d8:7d:4d:5e:47:db:33:7d:44:bc:6f:18: 0a:92:20:42:dc:9d:fe:f2:4d:b4:f0:6b:e4:bd:3b: 5f:ab:1e:1e:47:f4:be:19:f0:fc:7c:fb:e1:9d:04: e9:2b:05:14:20:81:df:73:38:09:2c:22:a0:aa:f3: 50:2b:52:4e:24:8a:b5:38:f1:47:d6:4a:e6:0b:8b: 60:10:68:ff:a7:84:e6:89:9e:50:2b:64:8b:01:c6: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EB:96:FC:28:8C:2D:23:2A:BC:7A:59:2D:E6:38:D2:A7:F9:EC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:04:be:97:c7:a6:d2:4f:75:39:ee:8a:86:ce:a6:b4:2e: 72:1b:f0:1d:5a:5f:6b:f1:f5:94:62:fb:98:8e:b9:72:b5:22: 98:29:15:e7:48:c6:4b:82:19:64:3f:26:ea:43:5d:ae:53:34: 53:54:d2:d1:bc:24:ff:c4:be:0c:e8:d5:18:b3:d2:d1:a2:d8: 1d:6f:f0:2f:8f:de:3e:68:76:bc:76:73:0b:24:c5:b3:a3:8c: c7:16:57:6d:5b:80:c7:43:d0:97:75:a6:05:75:c0:6d:d2:d3: 49:ea:9d:7a:51:aa:21:b6:ac:6b:e7:55:0a:95:85:67:90:97: fd:27:a3:b7:3a:fd:f2:dd:9d:0e:81:3a:99:28:bf:80:48:cc: 3c:f3:fd:f9:39:1c:29:50:15:cb:2d:be:bf:bf:c5:2c:94:80: b8:11:1c:ce:e0:cd:ff:c1:3e:56:ee:cf:d9:4e:cb:07:37:27: 37:b4:fd:6e:42:c3:bd:62:0c:79:77:a4:10:1c:e0:31:0d:71: a0:7d:61:da:d8:08:65:2f:48:b1:b4:1a:a4:5a:d8:d1:08:6b: ba:13:09:44:b7:f8:8f:b7:27:36:32:79:4c:6b:ba:ab:3a:d6: 1b:98:af:4c:a6:92:9d:ff:e5:b8:8f:87:83:71:1b:d2:18:fe: 8d:7f:d9:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdf8mZ/+5Es64s5YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk NzkzOTY4ODQtZjU3Zi00YTcwLWFjMjEtNzFmY2IwNmU0YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmAyCs9PMc9f/bXgaHakVhqolyanTLsBdN6U fLGjRG0KUk23M/3UulRkAucfAfcN4ckKpAr5aKxFjzUgpAnSVsOQmqTNYH6YAbHu kRkAIV806JAbEnR9ghodbLocsMd6DeSO1gaK6Ia3lFvhFwzRkB+7f/3BoRRqvlb0 G+UEO6s0jg2c4dRo1El383ZiC5n41vtUCZNUR6xnNdNM1pbFmgrCaRq8e5vYfU1e R9szfUS8bxgKkiBC3J3+8k208GvkvTtfqx4eR/S+GfD8fPvhnQTpKwUUIIHfczgJ LCKgqvNQK1JOJIq1OPFH1krmC4tgEGj/p4TmiZ5QK2SLAcY+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALrlvwojC0jKrx6WS3mONKn+eyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZGIyNDBiNmMtNTk1Yi0z MzllLThjOTctOTg1YjRmNTNkNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkCBL6Xx6bST3U57oqGzqa0LnIb8B1aX2vx9ZRi+5iOuXK1IpgpFedI xkuCGWQ/JupDXa5TNFNU0tG8JP/Evgzo1Riz0tGi2B1v8C+P3j5odrx2cwskxbOj jMcWV21bgMdD0Jd1pgV1wG3S00nqnXpRqiG2rGvnVQqVhWeQl/0no7c6/fLdnQ6B Opkov4BIzDzz/fk5HClQFcstvr+/xSyUgLgRHM7gzf/BPlbuz9lOywc3Jze0/W5C w71iDHl3pBAc4DENcaB9YdrYCGUvSLG0GqRa2NEIa7oTCUS3+I+3JzYyeUxruqs6 1huYr0ymkp3/5biPh4NxG9IY/o1/2So= -----END CERTIFICATE-----Generated at Sat Jul 26 09:52:30 2025 by rpki-client