$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa File: 4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa (raw, json) Hash identifier: uj9JoUqtCDk2wzZbfjzDmgRIUuA1WWAwi8viSZmpjaw= Subject key identifier: BF:CC:E9:B0:67:B5:1A:F9:3C:7B:55:EB:A4:69:71:B5:51:E4:91:60 Certificate issuer: /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Certificate serial: 010D0C9F4328584ECBD1DD32E8D06601D9370080 Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 397472 IP address blocks: 134.195.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:dd:32:e8:d0:66:01:d9:37:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=e2d942ce-e439-443b-a2d3-821d387be25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:7f:9b:32:c3:aa:8c:6f:6b:86:7e:e4:dc: c7:de:84:49:b7:a9:2b:c9:a0:1e:5d:32:ec:db:32: f1:52:a5:9f:66:d5:a3:27:2f:c5:af:5e:49:a1:26: 03:76:5e:e8:8a:82:c1:42:e3:da:9c:1b:8b:33:ac: 31:c9:a1:c8:05:35:68:14:e5:40:df:ff:7e:98:9d: 5d:57:e1:32:9b:9d:22:6e:8d:32:de:2b:07:de:ea: fd:c2:b7:a0:4c:e0:7e:cf:e2:e8:0e:38:1b:0f:37: 62:07:ff:2b:54:f3:80:6b:f6:6d:ab:ab:db:30:1e: dc:a5:1d:a3:48:7c:86:45:6f:cd:fb:3d:3a:fe:ca: 3c:c5:22:f6:d4:12:49:ee:5d:30:a2:db:bd:4a:3d: 10:82:0f:c7:5c:bc:3f:63:65:5a:b4:e7:7b:19:21: c4:e7:76:2a:3b:cc:8f:a3:0d:fd:e0:5d:19:ab:db: e4:53:58:e5:2b:e0:0a:22:c6:80:a8:62:26:c2:ff: fa:3b:22:60:84:a7:47:2f:fe:80:08:2c:3c:96:18: 15:82:02:1d:5d:b6:0d:e9:48:ee:e9:0c:bd:4e:a9: 85:ef:eb:3b:9c:12:e6:35:f3:0c:6d:90:f8:7b:f6: 2a:28:b9:1d:4b:36:1f:a8:d2:b1:6f:e5:32:e4:2b: 4f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CC:E9:B0:67:B5:1A:F9:3C:7B:55:EB:A4:69:71:B5:51:E4:91:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl X509v3 Authority Key Identifier: keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8a:89:dd:14:c8:81:24:70:59:0d:fb:be:3f:1e:23:64:0b: 2f:5b:c8:de:a3:6f:5b:58:c0:1f:22:d1:35:e3:01:60:98:e0: f4:00:7e:64:70:78:b9:4d:c4:60:94:b1:08:8c:c5:d8:22:26: e8:91:b1:1f:df:dc:3c:66:c3:ed:be:26:83:84:41:26:55:cc: ac:f9:b3:c8:0e:e9:37:9a:50:01:21:48:bc:78:80:b0:20:0f: f4:fb:7f:e7:dd:b7:ef:f0:38:22:89:66:b5:48:dd:fe:25:bc: 80:01:27:5b:7b:00:57:70:1d:2b:53:61:0c:3f:5c:72:df:ef: 57:9b:e8:43:43:0d:54:94:ab:3e:7c:5e:b6:17:2e:82:04:e8: 6b:35:cd:0f:01:b3:68:0d:28:87:ae:87:3c:ab:15:db:09:2e: a8:01:90:cc:75:72:a5:2d:c6:6a:68:18:cd:75:91:49:78:e5: fe:28:8e:62:ea:b1:35:c1:0d:50:da:df:ed:64:f0:34:08:97: e6:af:61:a9:44:3f:29:a4:5c:f9:eb:ff:25:14:90:0b:e3:e8: 27:a1:a3:9f:10:a4:76:25:64:8b:76:e5:cf:55:ad:22:66:93: b4:fe:a9:a5:91:73:e7:44:30:4a:b2:48:c6:14:26:e0:df:84: 1f:bd:89:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0d0y6NBmAdk3AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1 ZWE5MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZTJkOTQyY2UtZTQzOS00NDNiLWEyZDMtODIxZDM4N2JlMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUZ/mzLDqoxva4Z+5NzH3oRJt6kryaAeXTLs 2zLxUqWfZtWjJy/Fr15JoSYDdl7oioLBQuPanBuLM6wxyaHIBTVoFOVA3/9+mJ1d V+Eym50ibo0y3isH3ur9wregTOB+z+LoDjgbDzdiB/8rVPOAa/Ztq6vbMB7cpR2j SHyGRW/N+z06/so8xSL21BJJ7l0wotu9Sj0Qgg/HXLw/Y2VatOd7GSHE53YqO8yP ow394F0Zq9vkU1jlK+AKIsaAqGImwv/6OyJghKdHL/6ACCw8lhgVggIdXbYN6Uju 6Qy9TqmF7+s7nBLmNfMMbZD4e/YqKLkdSzYfqNKxb+Uy5CtPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/M6bBntRr5PHtV66RpcbVR5JFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MGJj YmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvNGYzZTMwMjYtNjEwOC0z MGQxLThjYzktNTg5MGM4NGEzOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzBiY2JkNjgtNDFkNi00YTVhLThk MjgtMWI5YTlhNGM1ZWE5LzcwYmNiZDY4LTQxZDYtNGE1YS04ZDI4LTFiOWE5YTRj NWVhOS5jcmwwHwYDVR0jBBgwFoAUqd9vVk8Se+zs7Vac35zUQ4hV9OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlh OWE0YzVlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+Kid0UyIEkcFkN+74/HiNkCy9byN6jb1tYwB8i0TXjAWCY4PQAfmRw eLlNxGCUsQiMxdgiJuiRsR/f3Dxmw+2+JoOEQSZVzKz5s8gO6TeaUAEhSLx4gLAg D/T7f+fdt+/wOCKJZrVI3f4lvIABJ1t7AFdwHStTYQw/XHLf71eb6ENDDVSUqz58 XrYXLoIE6Gs1zQ8Bs2gNKIeuhzyrFdsJLqgBkMx1cqUtxmpoGM11kUl45f4ojmLq sTXBDVDa3+1k8DQIl+avYalEPymkXPnr/yUUkAvj6Ceho58QpHYlZIt25c9VrSJm k7T+qaWRc+dEMEqySMYUJuDfhB+9iR0= -----END CERTIFICATE-----Generated at Mon Aug 24 09:08:18 2026 by rpki-client