$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa File: f894fd05-f37a-38af-a864-4381a924fc4f.roa (raw, json) Hash identifier: gWboj7i+npvti6Wszs7xqGI8ou1j6TXh1d8c3tKLLgQ= Subject key identifier: 8D:F8:BA:7A:40:1F:D2:A5:15:D6:5D:44:BB:45:F7:05:C8:C0:1E:AF Certificate issuer: /CN=407cb240-661e-489d-9198-56d20c6d1076 Certificate serial: 010D0C9F4328584D571F9957D480585929249500 Authority key identifier: 2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 53520 IP address blocks: 134.195.92.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:99:57:d4:80:58:59:29:24:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407cb240-661e-489d-9198-56d20c6d1076 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=aade5586-3f19-4569-8e0d-4f61c471dc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:ce:49:89:b2:45:f1:c1:4d:36:de:6f:33: 44:05:52:06:21:f0:61:2a:bd:3a:72:49:67:57:e1: f5:96:f0:72:f5:71:33:5b:6f:56:53:f3:dc:9b:b1: 2f:41:9d:5e:9b:15:39:09:49:a2:30:e9:bc:67:46: 2a:b5:2e:84:6f:f4:03:8b:91:25:c9:72:80:e9:87: 51:04:14:5a:b8:c7:6a:40:24:37:d8:f5:4a:88:47: 38:66:21:a0:b7:02:8b:8f:23:ec:18:06:6e:02:01: 58:8e:37:a2:e3:08:62:2c:69:28:1d:f8:af:44:69: e6:48:b9:df:58:20:29:76:c1:12:14:fe:7a:bd:be: 23:c3:5c:c8:a3:d7:2a:ba:5c:29:31:f6:73:7b:38: ab:db:51:77:93:a1:ff:66:f0:8b:77:65:fd:01:d4: 12:8b:fb:14:11:e3:ba:f8:58:53:30:bb:a6:a5:86: 83:a3:bd:39:1c:d1:a2:d8:74:c2:ad:c6:fa:81:a7: cb:66:83:8b:26:a9:9f:4f:1d:15:a6:da:8e:97:02: 82:09:62:22:a1:9d:42:b1:24:9c:bf:eb:f8:88:fc: 0f:3e:0f:bc:f1:16:9c:7f:f0:9e:d4:3a:0d:6a:1b: 60:42:2e:bd:f5:5c:4d:cc:36:fa:cf:37:65:d9:de: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F8:BA:7A:40:1F:D2:A5:15:D6:5D:44:BB:45:F7:05:C8:C0:1E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl X509v3 Authority Key Identifier: keyid:2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer sbgp-ipAddrBlock: critical IPv4: 134.195.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:03:08:68:a1:fd:9b:c6:02:f4:cd:05:1c:e5:bb:dd:73:10: 87:36:c1:b7:62:11:7b:60:40:11:e6:21:32:01:ac:a7:d6:87: 04:36:fb:0b:94:71:e3:a7:06:5c:51:74:99:48:7e:14:12:3d: 59:82:ba:e8:a2:44:26:52:5b:b5:2b:50:6a:3f:45:a2:c7:e0: e5:83:b0:66:6f:b4:f8:c5:58:42:c3:75:6d:ed:89:0d:b0:a9: 1c:2b:2b:70:36:49:59:fa:6d:b8:85:cf:e0:ce:68:ae:b4:28: 1f:79:01:95:89:42:5e:c9:2f:cf:52:97:9d:26:ab:e5:0b:58: 1a:0f:52:8c:2d:34:48:b4:fe:fc:38:78:b6:a8:11:a2:a7:da: 28:43:95:77:83:74:ca:82:e4:2f:b1:fc:85:18:57:2a:fb:c9: 69:e8:6b:87:61:71:6e:59:cd:a6:11:4e:42:28:72:ee:c5:f9: b7:9e:e0:ce:17:9e:2e:4d:31:14:8e:cb:fd:a9:e8:43:67:98: d1:33:be:c8:4a:93:83:16:99:6a:36:de:c2:2a:fa:9f:0d:96: 79:e1:38:0c:dc:e1:a9:a4:ab:e6:de:e7:b7:74:3e:0f:a6:1a: 16:a4:61:b5:d0:74:c5:e3:a6:30:b3:39:91:38:1c:4e:0f:37: 1c:83:5d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5lX1IBYWSkklQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA3Y2IyNDAtNjYxZS00ODlkLTkxOTgtNTZkMjBjNmQx MDc2MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YWFkZTU1ODYtM2YxOS00NTY5LThlMGQtNGY2MWM0NzFkYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XPOSYmyRfHBTTbebzNEBVIGIfBhKr06ckln V+H1lvBy9XEzW29WU/Pcm7EvQZ1emxU5CUmiMOm8Z0YqtS6Eb/QDi5ElyXKA6YdR BBRauMdqQCQ32PVKiEc4ZiGgtwKLjyPsGAZuAgFYjjei4whiLGkoHfivRGnmSLnf WCApdsESFP56vb4jw1zIo9cqulwpMfZzezir21F3k6H/ZvCLd2X9AdQSi/sUEeO6 +FhTMLumpYaDo705HNGi2HTCrcb6gafLZoOLJqmfTx0VptqOlwKCCWIioZ1CsSSc v+v4iPwPPg+88Racf/Ce1DoNahtgQi699VxNzDb6zzdl2d426wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI34unpAH9KlFdZdRLtF9wXIwB6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDdj YjI0MC02NjFlLTQ4OWQtOTE5OC01NmQyMGM2ZDEwNzYvZjg5NGZkMDUtZjM3YS0z OGFmLWE4NjQtNDM4MWE5MjRmYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDA3Y2IyNDAtNjYxZS00ODlkLTkx OTgtNTZkMjBjNmQxMDc2LzQwN2NiMjQwLTY2MWUtNDg5ZC05MTk4LTU2ZDIwYzZk MTA3Ni5jcmwwHwYDVR0jBBgwFoAUK9cIJI4OXV7iM9cYSC+0eXIbX9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDdjYjI0MC02NjFlLTQ4OWQtOTE5OC01NmQy MGM2ZDEwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4DCGih/ZvGAvTNBRzlu91zEIc2wbdiEXtgQBHmITIBrKfWhwQ2+wuU ceOnBlxRdJlIfhQSPVmCuuiiRCZSW7UrUGo/RaLH4OWDsGZvtPjFWELDdW3tiQ2w qRwrK3A2SVn6bbiFz+DOaK60KB95AZWJQl7JL89Sl50mq+ULWBoPUowtNEi0/vw4 eLaoEaKn2ihDlXeDdMqC5C+x/IUYVyr7yWnoa4dhcW5ZzaYRTkIocu7F+bee4M4X ni5NMRSOy/2p6ENnmNEzvshKk4MWmWo23sIq+p8NlnnhOAzc4amkq+be57d0Pg+m GhakYbXQdMXjpjCzOZE4HE4PNxyDXVM= -----END CERTIFICATE-----Generated at Tue Apr 7 16:54:11 2026 by rpki-client