$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa File: bb2c05d6-4109-3127-b081-aba78a6a6412.roa (raw, json) Hash identifier: U8N2qEsrEbc0xs6YsTDr7YF1l37lVv7jtOBuo6/sML0= Subject key identifier: 37:AF:AA:86:6E:65:DE:67:96:B8:92:BD:4F:01:DE:C6:84:56:6F:B3 Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F4328584F15CCE5F64B3ACBF895534D00 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 398395 IP address blocks: 134.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e5:f6:4b:3a:cb:f8:95:53:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=3d568982-ce0d-4053-8262-350ab0dedade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:2b:0b:cb:4c:da:17:14:d5:77:7e:b6:81: f1:5a:b6:24:57:cd:96:57:24:84:27:0a:11:f6:1c: 35:13:5e:8c:32:da:14:f9:b7:df:cf:93:39:7e:e7: cf:4b:d0:a4:86:9c:88:65:41:5e:74:c3:66:03:93: b0:f6:4f:26:bb:15:f6:8f:ad:7d:2f:a3:14:34:59: e0:8f:26:7b:4d:57:ad:2d:08:83:31:1d:21:70:58: a9:21:9d:f0:fe:0a:c8:12:4c:ad:11:5c:33:77:56: 47:be:d2:3c:e2:a6:fb:35:8d:d9:a0:d9:31:c5:28: 0d:e7:3c:7e:d1:ed:a9:5b:35:a9:75:ad:82:bb:89: b7:b6:72:8c:7c:1b:cf:bd:ad:0e:ec:e7:6d:f4:30: a2:3d:31:7d:65:fa:1d:ed:0a:82:63:0b:de:e5:23: 16:46:27:2e:d6:f0:70:2f:3c:a7:a5:c1:22:f4:d3: 5e:91:81:23:04:d8:1b:2b:d4:c0:08:c1:3c:09:eb: 71:d8:17:a0:94:a0:03:32:74:1d:90:34:72:09:99: 78:af:26:b9:97:de:d4:d4:8e:e8:08:d0:af:71:65: 3e:ca:e8:7c:84:9e:34:01:de:89:9d:15:eb:dd:f7: 9b:39:e1:ef:1a:8a:0f:b4:b1:64:f4:cf:95:db:8f: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AF:AA:86:6E:65:DE:67:96:B8:92:BD:4F:01:DE:C6:84:56:6F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4f:f6:06:ee:16:1c:4e:45:ee:c3:5b:cf:d8:3a:8d:92:c0: 22:2c:a3:1d:23:f9:41:be:7c:78:2b:69:b2:ca:e3:f7:79:ab: f9:89:79:84:e8:60:56:6c:a5:16:77:0a:b3:73:ee:d9:2b:29: ae:11:2f:d2:17:45:ac:01:d9:3c:fe:10:2a:79:29:06:3c:ec: af:08:50:15:42:13:40:f8:ae:3d:04:fc:7f:98:7a:8d:0d:2d: a8:43:36:43:9c:c9:04:f8:0e:c9:f6:2f:5e:f2:1c:8f:5e:95: 07:ec:c7:3b:79:ea:25:0f:cb:5c:bc:06:8e:56:18:7a:af:6c: 99:5d:52:02:29:7e:73:67:3a:ed:05:38:29:54:18:c2:d1:59: ce:a8:0a:07:08:18:29:37:6f:38:30:0d:66:66:96:d4:94:65: e5:9e:1b:a7:f4:aa:d9:cd:f2:f1:0d:a9:f9:d4:ff:f5:d0:8e: 05:ae:69:5a:65:92:c9:09:ad:d0:45:d9:f9:b1:15:63:78:3c: 54:99:73:43:22:45:f3:80:95:c7:87:3d:b6:1e:71:00:05:6a: 6e:7e:65:73:40:27:9c:5a:16:c1:37:fa:9c:49:1a:39:28:da: 93:cc:fa:a3:2a:e8:c1:ec:8a:54:15:a8:4f:ac:db:43:fb:44: e9:17:ab:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOX2SzrL+JVTTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk M2Q1Njg5ODItY2UwZC00MDUzLTgyNjItMzUwYWIwZGVkYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D8rC8tM2hcU1Xd+toHxWrYkV82WVySEJwoR 9hw1E16MMtoU+bffz5M5fufPS9CkhpyIZUFedMNmA5Ow9k8muxX2j619L6MUNFng jyZ7TVetLQiDMR0hcFipIZ3w/grIEkytEVwzd1ZHvtI84qb7NY3ZoNkxxSgN5zx+ 0e2pWzWpda2Cu4m3tnKMfBvPva0O7Odt9DCiPTF9Zfod7QqCYwve5SMWRicu1vBw LzynpcEi9NNekYEjBNgbK9TACME8Cetx2BeglKADMnQdkDRyCZl4rya5l97U1I7o CNCvcWU+yuh8hJ40Ad6JnRXr3febOeHvGooPtLFk9M+V249spQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDevqoZuZd5nlriSvU8B3saEVm+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvYmIyYzA1ZDYtNDEwOS0z MTI3LWIwODEtYWJhNzhhNmE2NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlP9gbuFhxORe7DW8/YOo2SwCIsox0j+UG+fHgrabLK4/d5q/mJeYTo YFZspRZ3CrNz7tkrKa4RL9IXRawB2Tz+ECp5KQY87K8IUBVCE0D4rj0E/H+Yeo0N LahDNkOcyQT4Dsn2L17yHI9elQfsxzt56iUPy1y8Bo5WGHqvbJldUgIpfnNnOu0F OClUGMLRWc6oCgcIGCk3bzgwDWZmltSUZeWeG6f0qtnN8vENqfnU//XQjgWuaVpl kskJrdBF2fmxFWN4PFSZc0MiRfOAlceHPbYecQAFam5+ZXNAJ5xaFsE3+pxJGjko 2pPM+qMq6MHsilQVqE+s20P7ROkXq6k= -----END CERTIFICATE-----Generated at Sat Sep 19 07:39:35 2026 by rpki-client