$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa File: db240b6c-595b-339e-8c97-985b4f53d411.roa (raw, json) Hash identifier: HmEzptxb+xyl8Z3w+B74N8fd6BuLV9fBs+KpDFjzdpU= Subject key identifier: 19:33:CB:7F:A3:86:00:FA:B8:06:B1:8F:DD:DA:30:F8:A6:27:19:2C Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F4328584D2644C467BB936E70E50AB7D0 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 1239 IP address blocks: 134.202.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c4:67:bb:93:6e:70:e5:0a:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=7a0c02f1-06a3-46df-96a4-32872de8e716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:08:ea:96:97:49:0f:1b:85:8a:bd:f7:04: 1d:68:dd:38:68:9a:ca:e4:bd:30:82:e2:ee:9d:6b: c9:ac:ef:31:ba:d7:29:27:cf:41:ba:5c:c4:d2:e6: 5d:48:25:28:3b:a8:61:2b:4d:09:5d:8a:9d:6d:21: 07:83:de:4a:28:05:86:3c:d6:1e:d4:07:13:13:ce: d0:eb:79:6d:0e:e0:cb:97:2f:32:95:6f:06:b6:31: 78:14:c3:26:73:f4:82:2e:0e:43:66:3b:07:6b:72: ed:d4:c9:39:ed:c3:1e:e1:95:1a:c1:3f:d0:91:fd: 74:87:ff:fa:10:51:c3:c8:c7:d8:0d:8b:9b:3e:6e: 5a:f4:a9:67:1c:fd:ae:46:23:6d:cc:aa:61:dc:4e: f0:b3:68:29:ea:59:b8:ba:f6:03:47:51:80:6b:28: e9:68:b8:5b:b3:81:2f:0e:26:19:b6:23:14:11:49: 1a:19:69:1a:09:88:a6:23:99:be:af:6c:c7:52:39: 7d:0a:e8:5d:42:88:6f:49:d8:3f:37:21:b1:15:dc: 78:19:94:73:13:49:b4:7f:aa:81:12:b7:d0:30:66: 80:1b:82:ae:98:a2:ea:b7:89:05:f4:14:b4:6b:47: b7:1b:49:4f:3c:41:b7:46:29:53:92:7b:73:b0:94: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:33:CB:7F:A3:86:00:FA:B8:06:B1:8F:DD:DA:30:F8:A6:27:19:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f1:92:da:af:ab:ed:dc:c1:79:07:b4:94:37:48:d6:90:19: a7:3e:8c:dd:37:1e:b7:a2:33:9a:00:01:6a:0c:dc:3a:ee:89: c1:e7:d5:ba:1d:df:b1:76:90:74:1c:a6:68:fc:98:1f:9a:af: 45:e7:d3:8e:ae:e1:a2:a8:ae:f8:b3:2d:b0:6f:69:80:46:e4: 85:5f:ec:89:3d:89:bc:0a:ae:c6:00:29:60:7e:1a:c5:21:c7: 53:0d:2c:9a:7d:42:34:ee:5d:2e:82:f4:e7:87:cc:8b:27:3c: c8:aa:f9:6d:c9:f9:66:9e:64:bd:b9:24:b3:08:8a:c5:81:ee: 81:3f:78:79:53:b7:dd:86:2e:c1:05:ae:15:1e:3d:33:35:9a: db:99:3c:4c:89:89:43:76:48:27:e3:cc:3c:c0:e2:a1:c3:5e: 80:2a:56:8e:dd:3d:14:b2:fe:8a:6d:31:8d:b4:c4:76:90:6f: 0e:49:7c:f8:52:96:7a:19:eb:d3:82:2d:ef:26:24:79:16:26: f2:95:6f:cc:f5:59:bc:95:f8:77:41:1f:c3:a7:c4:d9:c4:27: 1f:8f:59:00:77:38:0e:a0:39:1a:77:ad:dd:40:69:f5:17:98: a4:d7:39:d7:45:53:70:ab:a2:a1:99:90:b6:a0:b8:a7:21:0f: 57:50:e5:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMRnu5NucOUKt9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk N2EwYzAyZjEtMDZhMy00NmRmLTk2YTQtMzI4NzJkZThlNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V0I6paXSQ8bhYq99wQdaN04aJrK5L0wguLu nWvJrO8xutcpJ89BulzE0uZdSCUoO6hhK00JXYqdbSEHg95KKAWGPNYe1AcTE87Q 63ltDuDLly8ylW8GtjF4FMMmc/SCLg5DZjsHa3Lt1Mk57cMe4ZUawT/Qkf10h//6 EFHDyMfYDYubPm5a9KlnHP2uRiNtzKph3E7ws2gp6lm4uvYDR1GAayjpaLhbs4Ev DiYZtiMUEUkaGWkaCYimI5m+r2zHUjl9CuhdQohvSdg/NyGxFdx4GZRzE0m0f6qB ErfQMGaAG4KumKLqt4kF9BS0a0e3G0lPPEG3RilTkntzsJTIQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkzy3+jhgD6uAaxj93aMPimJxksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZGIyNDBiNmMtNTk1Yi0z MzllLThjOTctOTg1YjRmNTNkNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHxktqvq+3cwXkHtJQ3SNaQGac+jN03HreiM5oAAWoM3DruicHn1bod 37F2kHQcpmj8mB+ar0Xn046u4aKorvizLbBvaYBG5IVf7Ik9ibwKrsYAKWB+GsUh x1MNLJp9QjTuXS6C9OeHzIsnPMiq+W3J+WaeZL25JLMIisWB7oE/eHlTt92GLsEF rhUePTM1mtuZPEyJiUN2SCfjzDzA4qHDXoAqVo7dPRSy/optMY20xHaQbw5JfPhS lnoZ69OCLe8mJHkWJvKVb8z1WbyV+HdBH8OnxNnEJx+PWQB3OA6gORp3rd1AafUX mKTXOddFU3CroqGZkLaguKchD1dQ5Yg= -----END CERTIFICATE-----Generated at Tue Mar 24 14:30:36 2026 by rpki-client