$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa File: 43897ce9-872d-33ba-8c28-6a0f98cde28c.roa (raw, json) Hash identifier: kUVCWXopVCO62sOVh5CrhaGQ9YfrN2kiNC6uzLPRGEw= Subject key identifier: 6C:94:C5:83:97:DC:94:63:BA:E1:42:D7:CB:5D:EE:14:B6:31:1E:54 Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F4328584AF7EBDA104066D5BB0C60B570 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 51965 IP address blocks: 134.195.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:da:10:40:66:d5:bb:0c:60:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=14431efd-c144-4ad8-bcf8-ca7f8736c6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:d5:c3:78:6d:8d:74:db:e6:8e:3c:78:8f: 32:0c:22:ca:dd:77:d8:cd:51:96:d5:a9:66:79:1f: 44:2f:f5:1d:92:8b:02:31:1e:41:43:f8:24:10:25: 6c:a2:6d:c1:39:b5:c8:b2:69:ef:5e:93:81:07:76: 55:61:e6:9c:97:94:85:b2:d6:cf:d9:4e:f4:dd:8b: 66:40:77:81:2b:d3:34:b4:65:de:fb:71:c0:1a:18: d1:82:64:51:05:de:eb:f9:87:fd:ff:ab:2a:1f:14: 38:b4:72:8c:c0:2c:98:90:4f:93:2a:5d:42:8d:ef: b1:3a:d9:f0:ec:c6:96:79:12:e2:50:0d:b9:7c:b2: 1b:37:e7:79:1c:80:08:07:89:0a:e3:7b:32:c2:84: c6:d3:08:6c:8b:71:ee:99:20:f0:2a:91:1e:2d:be: 95:b1:0f:ff:9a:ae:27:1b:97:ca:8f:28:f7:06:37: 4a:8e:72:23:bc:af:ed:69:bd:b8:18:30:b9:de:eb: 15:1d:49:51:ae:ad:5d:13:a2:2c:6f:a8:5d:7b:cf: c7:f0:0f:c1:f8:26:6e:85:b2:50:50:c0:53:b1:1d: f8:b9:bb:ab:3b:81:e2:c5:6c:a7:14:18:80:cc:38: e4:15:3b:44:bf:38:46:03:74:04:9c:d3:cc:17:6e: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:94:C5:83:97:DC:94:63:BA:E1:42:D7:CB:5D:EE:14:B6:31:1E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv4: 134.195.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3c:6f:74:f3:a0:5f:4b:6d:da:e3:32:f4:38:2f:1e:c8:79: 69:d0:c4:99:dc:8a:2b:bd:5a:af:4e:b4:45:42:1f:ab:c5:f7: 3c:7c:d4:5f:67:bd:88:db:f1:ae:67:c8:ae:ae:26:7a:6e:f6: c1:4b:97:a4:1a:f3:ed:4e:40:e4:5a:fa:4a:4b:2e:eb:6b:0d: f8:5d:cf:d1:c0:34:b7:ba:9d:11:a8:b2:5c:fa:ef:6a:dd:e3: 96:60:c2:f3:1f:f2:99:be:89:04:6d:57:28:0d:e2:6f:6f:0c: b6:71:6a:a7:79:b2:0f:5b:4e:c5:87:ef:c3:e0:23:60:e0:31: 66:4e:e3:d1:67:05:7c:c7:7f:39:57:ee:d9:05:f3:f5:bf:99: 52:5e:c3:c7:6d:ab:c0:05:b5:2f:ae:c1:78:5e:bf:2b:29:98: 8e:2b:4c:8f:84:04:cd:45:b3:68:39:03:e1:91:3a:c0:4a:16: d4:df:aa:d4:85:57:fc:d9:06:cd:a7:5e:57:ef:2c:2a:ec:81: 15:25:23:e3:f8:cf:c3:51:d9:e6:af:73:57:49:67:ec:ab:ba: 79:fd:35:1a:6f:73:98:ba:0d:78:3e:01:8f:a2:be:4b:66:31: 69:dc:a6:fb:b1:0d:ef:e6:d6:a1:99:41:69:01:74:d9:02:1c: 08:41:72:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369oQQGbVuwxgtXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MTQ0MzFlZmQtYzE0NC00YWQ4LWJjZjgtY2E3Zjg3MzZjNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+vVw3htjXTb5o48eI8yDCLK3XfYzVGW1alm eR9EL/UdkosCMR5BQ/gkECVsom3BObXIsmnvXpOBB3ZVYeacl5SFstbP2U703Ytm QHeBK9M0tGXe+3HAGhjRgmRRBd7r+Yf9/6sqHxQ4tHKMwCyYkE+TKl1Cje+xOtnw 7MaWeRLiUA25fLIbN+d5HIAIB4kK43sywoTG0whsi3HumSDwKpEeLb6VsQ//mq4n G5fKjyj3BjdKjnIjvK/tab24GDC53usVHUlRrq1dE6Isb6hde8/H8A/B+CZuhbJQ UMBTsR34uburO4HixWynFBiAzDjkFTtEvzhGA3QEnNPMF25o+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyUxYOX3JRjuuFC18td7hS2MR5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDM4OTdjZTktODcyZC0z M2JhLThjMjgtNmEwZjk4Y2RlMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc8b3TzoF9LbdrjMvQ4Lx7IeWnQxJnciiu9Wq9OtEVCH6vF9zx81F9n vYjb8a5nyK6uJnpu9sFLl6Qa8+1OQORa+kpLLutrDfhdz9HANLe6nRGoslz672rd 45ZgwvMf8pm+iQRtVygN4m9vDLZxaqd5sg9bTsWH78PgI2DgMWZO49FnBXzHfzlX 7tkF8/W/mVJew8dtq8AFtS+uwXhevyspmI4rTI+EBM1Fs2g5A+GROsBKFtTfqtSF V/zZBs2nXlfvLCrsgRUlI+P4z8NR2eavc1dJZ+yrunn9NRpvc5i6DXg+AY+ivktm MWncpvuxDe/m1qGZQWkBdNkCHAhBcnk= -----END CERTIFICATE-----Generated at Tue Aug 26 18:26:19 2025 by rpki-client