$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3c3b2973-d95f-31d5-8cc1-a1f3ea09a927.roa File: 3c3b2973-d95f-31d5-8cc1-a1f3ea09a927.roa (raw, json) Hash identifier: 4IMuhVc352dMhCg9dgW4tlEG4zSZm4IVKmr+v4o8nwk= Subject key identifier: 31:DB:1B:1E:12:C6:B9:EE:C1:38:EE:FC:3A:AB:F8:09:13:D8:21:B6 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F4328584EEECD536F6DA843E312C15680 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3c3b2973-d95f-31d5-8cc1-a1f3ea09a927.roa Signing time: Sun 23 Aug 2026 13:44:36 +0000 ROA not before: Sun 23 Aug 2026 13:44:36 +0000 ROA not after: Sat 21 Nov 2026 14:44:36 +0000 asID: 152179 IP address blocks: 134.202.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:cd:53:6f:6d:a8:43:e3:12:c1:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Aug 23 13:44:36 2026 GMT Not After : Nov 21 14:44:36 2026 GMT Subject: CN=7f104ee4-478e-49a0-bac4-80b2484ea63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c1:4d:40:b3:2c:13:f7:c3:de:35:cb:2e:eb: 40:ab:fc:01:50:87:84:13:c6:64:c6:00:5c:ef:0d: f6:85:25:12:0f:dd:46:aa:e6:80:d9:a9:7e:6a:55: 0c:1b:7e:85:18:31:82:3c:99:ec:cf:c8:29:23:cd: fd:39:ad:3b:8d:93:d6:21:38:81:87:fc:d9:a4:a0: a1:81:08:a0:13:f8:72:47:b5:8f:ac:6a:5e:de:f1: 30:3e:7f:b0:09:02:97:db:60:bc:8d:ff:1e:88:14: 8d:5c:cc:0b:53:f8:40:7b:6c:ba:6d:82:04:5c:73: ed:a8:98:96:6e:52:fe:62:77:81:da:6e:6d:b8:74: 24:08:c4:4a:94:57:d0:88:6c:95:64:a8:0c:33:b1: ba:b0:cd:85:ce:9a:aa:18:1e:2b:fb:6c:2e:48:ec: 30:a3:00:d6:4c:66:0d:21:02:bf:d1:fe:c3:9c:24: af:54:48:d0:47:af:17:e9:c9:bf:36:f2:b7:6a:6d: 1f:be:00:13:1c:a5:2f:41:5e:aa:d3:f9:a5:db:c0: dc:96:62:86:c1:24:f2:05:e2:3e:5b:4d:c8:33:f2: 03:40:e7:88:d2:bc:b9:90:1b:2c:ca:9b:72:eb:36: 7e:73:b8:35:42:91:66:d9:0e:bb:28:56:65:7c:29: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DB:1B:1E:12:C6:B9:EE:C1:38:EE:FC:3A:AB:F8:09:13:D8:21:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3c3b2973-d95f-31d5-8cc1-a1f3ea09a927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:97:df:52:dd:7c:0a:4a:37:7e:64:61:45:eb:5b:6a:4b:7b: 7f:70:95:88:b6:bc:4e:c3:9b:0a:89:ad:9f:b6:85:57:b7:51: e5:64:f9:ab:39:d2:73:45:b3:6b:c4:44:84:11:02:2e:dc:fb: 3a:a8:9a:f0:d4:1a:d1:1b:21:cf:f8:c7:88:dd:50:83:b5:ac: 52:47:cb:3b:37:dd:76:a5:f4:81:d0:f1:8a:be:43:64:cb:e1: 9d:aa:39:13:ab:37:fe:69:a8:65:e0:1f:5e:8f:95:97:bd:7a: 15:e3:8d:3d:3e:c1:61:1d:57:af:3b:b7:20:d8:1f:2b:7a:f4: f8:6f:dc:ba:49:1d:bc:5d:6b:7a:65:98:af:42:0d:ee:a5:f4: d1:2d:fe:6c:c0:01:e4:42:5f:3e:35:74:f3:0a:30:b4:b1:33: cd:24:84:25:60:fd:c4:ae:e0:3a:ab:be:c1:6c:d6:c4:af:45: e5:07:5b:41:d0:c6:23:5f:58:03:58:d3:07:2d:ca:09:98:c4: 87:a7:20:d9:9d:de:36:80:62:16:f6:5c:ef:45:58:ca:eb:3f: 5c:11:87:ff:b3:18:d6:4f:a1:18:d0:d1:5b:57:c4:0f:24:1d: 45:e9:3e:61:53:95:e8:14:c0:0b:59:27:db:48:25:cc:8b:51: f9:29:bf:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7uzVNvbahD4xLBVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI2MDgyMzEzNDQzNloXDTI2MTEyMTE0NDQzNlowLzEtMCsGA1UEAxMk N2YxMDRlZTQtNDc4ZS00OWEwLWJhYzQtODBiMjQ4NGVhNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcFNQLMsE/fD3jXLLutAq/wBUIeEE8ZkxgBc 7w32hSUSD91GquaA2al+alUMG36FGDGCPJnsz8gpI839Oa07jZPWITiBh/zZpKCh gQigE/hyR7WPrGpe3vEwPn+wCQKX22C8jf8eiBSNXMwLU/hAe2y6bYIEXHPtqJiW blL+YneB2m5tuHQkCMRKlFfQiGyVZKgMM7G6sM2FzpqqGB4r+2wuSOwwowDWTGYN IQK/0f7DnCSvVEjQR68X6cm/NvK3am0fvgATHKUvQV6q0/ml28DclmKGwSTyBeI+ W03IM/IDQOeI0ry5kBssypty6zZ+c7g1QpFm2Q67KFZlfCmomwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHbGx4SxrnuwTju/Dqr+AkT2CG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvM2MzYjI5NzMtZDk1Zi0z MWQ1LThjYzEtYTFmM2VhMDlhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCX31LdfApKN35kYUXrW2pLe39wlYi2vE7DmwqJrZ+2hVe3UeVk+as5 0nNFs2vERIQRAi7c+zqomvDUGtEbIc/4x4jdUIO1rFJHyzs33Xal9IHQ8Yq+Q2TL 4Z2qOROrN/5pqGXgH16PlZe9ehXjjT0+wWEdV687tyDYHyt69Phv3LpJHbxda3pl mK9CDe6l9NEt/mzAAeRCXz41dPMKMLSxM80khCVg/cSu4DqrvsFs1sSvReUHW0HQ xiNfWANY0wctygmYxIenINmd3jaAYhb2XO9FWMrrP1wRh/+zGNZPoRjQ0VtXxA8k HUXpPmFTlegUwAtZJ9tIJcyLUfkpv2w= -----END CERTIFICATE-----Generated at Thu Sep 3 22:30:01 2026 by rpki-client