$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/fb2dcc3b-c021-38eb-9788-4a190705a2c5.roa File: fb2dcc3b-c021-38eb-9788-4a190705a2c5.roa (raw, json) Hash identifier: O7JhWz6OVtNaoZSZJ0fAxmf+DlNgMfIx2cQnSQMiIDE= Subject key identifier: 38:D3:38:98:CE:FE:32:9D:78:85:1A:E3:09:B2:AB:0B:31:57:79:43 Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8 Certificate serial: 010D0C9F4328584B051EC2201E8F40D26C18F140 Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/fb2dcc3b-c021-38eb-9788-4a190705a2c5.roa Signing time: Fri 29 Aug 2025 18:28:43 +0000 ROA not before: Fri 29 Aug 2025 18:28:43 +0000 ROA not after: Thu 27 Nov 2025 19:28:43 +0000 asID: 213990 IP address blocks: 134.195.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:1e:c2:20:1e:8f:40:d2:6c:18:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8 Validity Not Before: Aug 29 18:28:43 2025 GMT Not After : Nov 27 19:28:43 2025 GMT Subject: CN=39c81eec-5e29-4d36-a6bd-1a9c45cfff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:4f:49:32:6f:2e:08:7a:df:02:b1:25:bb: 37:75:53:a5:b7:ed:2a:56:4e:83:89:ea:ec:d3:e4: 83:33:51:61:c4:ff:68:2b:1b:7d:b2:6e:cb:57:ea: bf:74:27:6f:f0:f0:ee:6c:39:ac:c3:c4:e3:e0:26: 06:95:57:73:ea:f4:1d:c8:ec:55:11:e5:09:d8:70: ad:e5:f1:7f:96:71:73:d5:aa:d2:e5:6d:e6:43:7c: 68:11:e3:09:81:64:63:d1:b3:91:5b:c1:3e:7c:76: 38:e7:8a:de:e6:35:30:3c:15:5f:63:4e:52:09:2d: 1c:dc:bb:52:58:fc:36:41:fa:2f:99:08:dd:7b:57: df:bf:d4:19:d8:f3:27:fd:06:7a:1f:f5:2e:96:11: 93:d9:b9:57:de:36:0b:8d:fa:af:ed:59:69:20:59: 1e:4e:3d:16:20:49:24:d0:ec:63:4a:00:28:28:e7: e0:0a:b4:0e:bf:8a:96:38:59:e3:85:59:8c:d4:4d: 1d:a7:14:6d:b8:58:6e:d2:f6:26:84:9c:cc:fe:8f: e5:39:5b:4e:36:c4:b9:65:72:29:06:4f:03:86:a8: 1e:9a:37:37:1b:fc:6e:3f:56:54:84:18:f7:bd:52: 94:e3:76:7d:b4:da:9d:26:63:71:df:57:85:00:aa: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:38:98:CE:FE:32:9D:78:85:1A:E3:09:B2:AB:0B:31:57:79:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/fb2dcc3b-c021-38eb-9788-4a190705a2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl X509v3 Authority Key Identifier: keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer sbgp-ipAddrBlock: critical IPv4: 134.195.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8a:76:a5:df:47:1a:b5:77:d1:7e:6b:1e:73:cc:16:ec:62: c0:84:63:09:ec:58:fe:e8:8b:ed:2d:f9:5c:e8:2f:96:c7:81: 26:4c:be:bb:b0:71:f0:a1:f2:b7:a5:87:0c:74:4c:67:f5:47: c3:17:c0:a1:c3:05:c6:a3:4d:d9:f1:bf:a9:49:2d:a8:34:f9: bb:cb:37:2a:5e:10:a5:5d:be:d1:6c:37:5f:f8:d0:8f:a1:8e: 40:0b:55:92:42:33:a0:f6:c6:70:c5:7e:b5:29:1a:f7:66:1e: ea:a5:93:19:69:22:c8:3e:53:ee:51:5a:80:c7:21:62:b3:e7: e1:65:03:dc:aa:63:e9:f2:6b:81:9a:c8:cb:a0:9a:25:19:ef: ef:47:dc:7a:54:ef:99:b3:12:86:c2:4d:35:4d:a1:3f:77:89: aa:62:6e:e5:d1:84:7a:70:3b:cc:3d:e6:e3:86:94:17:94:e4: 12:0f:dd:2e:76:97:c9:ee:c2:ef:a9:6f:a6:04:87:13:51:43: 1a:0f:2d:23:f7:81:50:c6:c4:88:9d:6a:79:84:2c:ea:c1:c6: 4d:d5:eb:e6:3f:4a:37:34:28:e8:ee:23:bd:35:96:9a:44:87: 55:3f:37:98:9e:46:46:a4:40:0f:f4:f9:2e:a2:fe:eb:0a:11: 81:be:5d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsFHsIgHo9A0mwY8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlNDI3ZWEtYTZiMC00YzA5LTgzMzAtNmNiZDVmNTgx NmE4MB4XDTI1MDgyOTE4Mjg0M1oXDTI1MTEyNzE5Mjg0M1owLzEtMCsGA1UEAxMk MzljODFlZWMtNWUyOS00ZDM2LWE2YmQtMWE5YzQ1Y2ZmZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAludPSTJvLgh63wKxJbs3dVOlt+0qVk6Diers 0+SDM1FhxP9oKxt9sm7LV+q/dCdv8PDubDmsw8Tj4CYGlVdz6vQdyOxVEeUJ2HCt 5fF/lnFz1arS5W3mQ3xoEeMJgWRj0bORW8E+fHY454re5jUwPBVfY05SCS0c3LtS WPw2QfovmQjde1ffv9QZ2PMn/QZ6H/UulhGT2blX3jYLjfqv7VlpIFkeTj0WIEkk 0OxjSgAoKOfgCrQOv4qWOFnjhVmM1E0dpxRtuFhu0vYmhJzM/o/lOVtONsS5ZXIp Bk8Dhqgemjc3G/xuP1ZUhBj3vVKU43Z9tNqdJmNx31eFAKotzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjTOJjO/jKdeIUa4wmyqwsxV3lDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU0 MjdlYS1hNmIwLTRjMDktODMzMC02Y2JkNWY1ODE2YTgvZmIyZGNjM2ItYzAyMS0z OGViLTk3ODgtNGExOTA3MDVhMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJlNDI3ZWEtYTZiMC00YzA5LTgz MzAtNmNiZDVmNTgxNmE4LzAyZTQyN2VhLWE2YjAtNGMwOS04MzMwLTZjYmQ1ZjU4 MTZhOC5jcmwwHwYDVR0jBBgwFoAUdkVKr1RdGBmiR0Mcxjwo6YHXe3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU0MjdlYS1hNmIwLTRjMDktODMzMC02Y2Jk NWY1ODE2YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiKdqXfRxq1d9F+ax5zzBbsYsCEYwnsWP7oi+0t+VzoL5bHgSZMvruw cfCh8relhwx0TGf1R8MXwKHDBcajTdnxv6lJLag0+bvLNypeEKVdvtFsN1/40I+h jkALVZJCM6D2xnDFfrUpGvdmHuqlkxlpIsg+U+5RWoDHIWKz5+FlA9yqY+nya4Ga yMugmiUZ7+9H3HpU75mzEobCTTVNoT93iapibuXRhHpwO8w95uOGlBeU5BIP3S52 l8nuwu+pb6YEhxNRQxoPLSP3gVDGxIidanmELOrBxk3V6+Y/Sjc0KOjuI701lppE h1U/N5ieRkakQA/0+S6i/usKEYG+XUU= -----END CERTIFICATE-----Generated at Sat Sep 6 12:49:07 2025 by rpki-client