$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/13fcfa5d-7264-39fa-8828-138066968077.roa File: 13fcfa5d-7264-39fa-8828-138066968077.roa (raw, json) Hash identifier: 5CNVcB4E8SkeaNGZ9KclfAnM2c/yP6Nu9KKQaYwQY9o= Subject key identifier: EA:70:EA:42:FE:C3:D7:78:90:92:DA:87:19:EC:76:0A:90:B4:40:74 Certificate issuer: /CN=3e48233d-2f75-4e7f-b6b9-87e412dfbd8b Certificate serial: 010D0C9F4328584D343A0B83596F37EE8A884D00 Authority key identifier: 86:7F:E5:14:63:46:76:DB:97:80:69:B2:6E:7B:87:1B:BE:51:86:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/13fcfa5d-7264-39fa-8828-138066968077.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 398345 IP address blocks: 134.195.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:0b:83:59:6f:37:ee:8a:88:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e48233d-2f75-4e7f-b6b9-87e412dfbd8b Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=87e7c726-191e-4947-8d79-af5bdd1ec159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:eb:19:06:4b:58:e1:c9:8a:c6:29:0e:54: 67:26:86:67:60:52:2e:52:13:47:e3:94:2a:10:ae: 15:10:b0:d7:c0:5e:fd:6f:34:ac:c5:22:71:19:90: ab:5f:ac:97:14:86:ec:ae:57:0e:c1:6e:c2:3d:ce: 9b:9b:58:17:1e:f6:45:08:5a:19:4c:a2:43:fe:48: 86:4f:72:fc:e5:1b:51:24:e6:cb:8a:43:87:f9:9c: 2f:ca:87:c1:89:df:7e:19:bb:b7:e0:a8:74:7d:2f: 4a:83:5d:a8:7a:18:47:11:40:70:89:d7:89:7c:21: fa:fa:41:de:b1:c1:5f:af:a1:14:a3:86:a3:92:16: 20:9e:2b:38:5b:f0:c1:6b:3d:ee:d3:b8:c7:37:82: 14:3e:b4:d3:6b:0c:c8:a3:06:ea:46:5c:33:77:c6: 12:98:7f:6c:ee:32:5b:42:e7:47:ac:80:bc:29:e1: de:96:6e:cb:75:4b:94:b7:7a:4f:e9:91:7a:f8:03: ba:f1:a6:13:89:95:8a:ff:87:a4:7b:64:ea:76:9d: 48:c6:fc:66:ba:1f:f4:a5:98:f3:1d:12:d1:d1:54: e1:52:c6:33:02:f8:76:22:9e:3e:1f:a9:7f:96:4b: d4:15:a4:0b:f4:27:c3:b7:ba:d9:c1:65:00:cf:f9: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:EA:42:FE:C3:D7:78:90:92:DA:87:19:EC:76:0A:90:B4:40:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/13fcfa5d-7264-39fa-8828-138066968077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.crl X509v3 Authority Key Identifier: keyid:86:7F:E5:14:63:46:76:DB:97:80:69:B2:6E:7B:87:1B:BE:51:86:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer sbgp-ipAddrBlock: critical IPv4: 134.195.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:7d:cd:38:30:68:24:19:52:3e:7e:ba:0f:43:d3:b7:00:fe: 83:fb:68:d0:a0:dd:71:e5:a2:17:cf:30:2e:a7:00:f3:ed:f5: 3d:07:74:9f:76:09:fa:a6:c6:42:cb:6e:f0:37:ca:6b:10:83: a3:10:98:a9:c6:e7:85:7a:b0:f0:92:db:9a:29:c5:46:05:be: ab:47:d6:f7:31:2c:cb:aa:5d:19:16:5a:d9:f6:5f:47:7d:60: 20:01:62:46:37:42:d8:f1:8f:3a:4a:92:1f:12:a7:35:8d:90: d8:e5:1d:f5:25:a0:9b:df:c8:86:8b:0a:37:61:b1:b8:01:20: 39:69:2d:27:19:2e:7f:d2:a6:e5:41:f3:31:da:b4:87:3d:d5: e0:bd:9a:0e:23:ac:0d:19:bf:01:27:88:d7:fc:f8:d3:0c:ab: 66:88:4f:09:d6:a5:37:00:90:d3:cd:52:27:79:1a:43:df:8c: 5f:bf:8b:48:8a:3a:d1:f0:d4:e8:24:1b:75:a6:e0:35:dc:f1: aa:c1:93:96:dd:30:5f:1c:24:ed:1c:62:45:7c:69:a9:c6:6e: a9:e1:8f:f8:63:4d:4e:c2:40:c8:72:c8:79:63:07:72:17:e2: ed:c7:e1:4c:9d:60:50:e4:8e:6d:6a:4b:e0:01:c4:51:36:aa: ba:d7:5d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OguDWW837oqITQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U0ODIzM2QtMmY3NS00ZTdmLWI2YjktODdlNDEyZGZi ZDhiMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ODdlN2M3MjYtMTkxZS00OTQ3LThkNzktYWY1YmRkMWVjMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx/rGQZLWOHJisYpDlRnJoZnYFIuUhNH45Qq EK4VELDXwF79bzSsxSJxGZCrX6yXFIbsrlcOwW7CPc6bm1gXHvZFCFoZTKJD/kiG T3L85RtRJObLikOH+ZwvyofBid9+Gbu34Kh0fS9Kg12oehhHEUBwideJfCH6+kHe scFfr6EUo4ajkhYgnis4W/DBaz3u07jHN4IUPrTTawzIowbqRlwzd8YSmH9s7jJb QudHrIC8KeHelm7LdUuUt3pP6ZF6+AO68aYTiZWK/4eke2Tqdp1Ixvxmuh/0pZjz HRLR0VThUsYzAvh2Ip4+H6l/lkvUFaQL9CfDt7rZwWUAz/nxWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpw6kL+w9d4kJLahxnsdgqQtEB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zZTQ4 MjMzZC0yZjc1LTRlN2YtYjZiOS04N2U0MTJkZmJkOGIvMTNmY2ZhNWQtNzI2NC0z OWZhLTg4MjgtMTM4MDY2OTY4MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2U0ODIzM2QtMmY3NS00ZTdmLWI2 YjktODdlNDEyZGZiZDhiLzNlNDgyMzNkLTJmNzUtNGU3Zi1iNmI5LTg3ZTQxMmRm YmQ4Yi5jcmwwHwYDVR0jBBgwFoAUhn/lFGNGdtuXgGmybnuHG75RhuMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zZTQ4MjMzZC0yZjc1LTRlN2YtYjZiOS04N2U0 MTJkZmJkOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZ9zTgwaCQZUj5+ug9D07cA/oP7aNCg3XHlohfPMC6nAPPt9T0HdJ92 CfqmxkLLbvA3ymsQg6MQmKnG54V6sPCS25opxUYFvqtH1vcxLMuqXRkWWtn2X0d9 YCABYkY3QtjxjzpKkh8SpzWNkNjlHfUloJvfyIaLCjdhsbgBIDlpLScZLn/SpuVB 8zHatIc91eC9mg4jrA0ZvwEniNf8+NMMq2aITwnWpTcAkNPNUid5GkPfjF+/i0iK OtHw1OgkG3Wm4DXc8arBk5bdMF8cJO0cYkV8aanGbqnhj/hjTU7CQMhyyHljB3IX 4u3H4UydYFDkjm1qS+ABxFE2qrrXXZM= -----END CERTIFICATE-----Generated at Tue Apr 7 15:05:43 2026 by rpki-client