$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa File: 43897ce9-872d-33ba-8c28-6a0f98cde28c.roa (raw, json) Hash identifier: oDUa2a9BGVUInDMXwUzQbmYtiA/Gg4kHAxdCQCdEDHc= Subject key identifier: 05:1E:89:4D:EF:6E:62:B2:C2:32:14:37:D6:C6:A3:17:6A:64:D3:5E Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F4328584CB81C8A69657FD150AB277200 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 51965 IP address blocks: 134.195.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:8a:69:65:7f:d1:50:ab:27:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=08849682-44b3-45ac-992c-d90f68e04e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:4e:aa:eb:65:df:f6:e9:ed:38:45:12:cb: 5a:0c:60:79:c5:1d:04:2d:e5:de:2e:aa:0e:34:70: 8e:e9:9c:21:00:04:af:c1:e5:68:c1:c9:fb:38:0a: e4:0e:25:47:0c:45:1c:07:da:2a:ed:63:15:dd:70: bf:22:68:9b:6a:a3:aa:f9:a1:12:d9:45:b8:02:6c: c9:01:57:35:1b:ae:b8:78:75:8f:b8:d6:bb:00:98: 9d:ac:d1:8a:a0:52:f1:24:1d:f3:17:5d:2d:fe:5a: 25:6e:5e:e8:56:bb:27:1b:3c:ca:3c:04:12:38:27: 06:db:d7:73:12:f5:a1:fe:22:51:69:b6:72:b9:e4: b5:71:97:78:7c:93:70:8e:8c:1e:dd:45:1c:57:ec: 7a:f2:46:58:f6:ac:5c:98:b0:67:32:65:6e:c9:b8: c3:ff:7a:67:a2:c5:a1:36:b1:44:dc:34:91:fb:ba: 7a:14:2a:4c:59:65:e6:ca:5d:33:56:89:33:e9:d1: 9b:8b:f6:8c:8e:81:be:18:fd:f9:9e:b0:d5:db:cc: 15:09:d4:7b:d4:d6:9e:f1:a9:ce:7c:a6:ae:3e:92: 12:28:73:b4:37:b8:7e:38:a5:47:f5:a2:96:f0:f7: df:15:82:ef:b6:4a:c0:97:ec:05:af:37:56:98:e3: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:89:4D:EF:6E:62:B2:C2:32:14:37:D6:C6:A3:17:6A:64:D3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv4: 134.195.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:18:0c:cc:7a:cc:ae:cc:ed:42:9e:a2:96:bc:71:4a:7d:6f: 87:fe:d5:84:bb:b1:5c:dc:a9:4b:4f:90:76:57:26:d5:5d:63: a0:41:dc:5b:e9:3b:c6:71:0b:e5:26:8f:64:1b:36:b1:8d:a3: a9:95:47:ac:c0:7e:1a:f3:64:56:26:71:5a:20:bf:87:b9:b9: de:a3:29:dd:34:f9:db:0a:bf:e4:c1:99:89:2c:3a:e2:d5:cd: ca:5e:c4:c9:61:93:01:3b:1b:93:76:85:0a:62:8b:8a:3a:1b: c1:3b:01:e9:c9:23:a6:2a:1f:cf:a6:13:59:a9:6b:71:89:0b: 9e:4c:2d:9e:c5:e4:13:77:a0:32:de:d7:28:61:1c:97:8c:c7: 64:43:c5:d2:d1:ba:9f:76:26:2b:bf:53:92:35:21:02:5c:e5: ec:74:3d:53:28:b2:32:f4:b0:a3:28:05:cf:f3:33:2b:f7:2f: be:71:f2:92:76:40:e1:9b:4c:14:5f:cc:12:e5:8c:0d:b7:2a: 69:05:14:ec:b7:ec:04:87:fc:17:56:3d:fc:6a:1e:34:70:88: 91:ba:7e:81:d6:da:4c:94:53:88:4c:90:c3:2f:f4:7d:c6:40: dd:bc:c8:5d:f4:0e:14:dc:d9:c4:c1:63:15:e1:0d:79:5e:12: 7e:bd:28:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIppZX/RUKsncgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MDg4NDk2ODItNDRiMy00NWFjLTk5MmMtZDkwZjY4ZTA0ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUNOqutl3/bp7ThFEstaDGB5xR0ELeXeLqoO NHCO6ZwhAASvweVowcn7OArkDiVHDEUcB9oq7WMV3XC/ImibaqOq+aES2UW4AmzJ AVc1G664eHWPuNa7AJidrNGKoFLxJB3zF10t/lolbl7oVrsnGzzKPAQSOCcG29dz EvWh/iJRabZyueS1cZd4fJNwjowe3UUcV+x68kZY9qxcmLBnMmVuybjD/3pnosWh NrFE3DSR+7p6FCpMWWXmyl0zVokz6dGbi/aMjoG+GP35nrDV28wVCdR71Nae8anO fKauPpISKHO0N7h+OKVH9aKW8PffFYLvtkrAl+wFrzdWmOOqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUeiU3vbmKywjIUN9bGoxdqZNNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDM4OTdjZTktODcyZC0z M2JhLThjMjgtNmEwZjk4Y2RlMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsYDMx6zK7M7UKeopa8cUp9b4f+1YS7sVzcqUtPkHZXJtVdY6BB3Fvp O8ZxC+Umj2QbNrGNo6mVR6zAfhrzZFYmcVogv4e5ud6jKd00+dsKv+TBmYksOuLV zcpexMlhkwE7G5N2hQpii4o6G8E7AenJI6YqH8+mE1mpa3GJC55MLZ7F5BN3oDLe 1yhhHJeMx2RDxdLRup92Jiu/U5I1IQJc5ex0PVMosjL0sKMoBc/zMyv3L75x8pJ2 QOGbTBRfzBLljA23KmkFFOy37ASH/BdWPfxqHjRwiJG6foHW2kyUU4hMkMMv9H3G QN28yF30DhTc2cTBYxXhDXleEn69KKg= -----END CERTIFICATE-----Generated at Thu Feb 26 12:35:26 2026 by rpki-client