$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa File: aa9337db-fe12-3582-ada2-1a967639968e.roa (raw, json) Hash identifier: Mqtn43mSc3wTqsWVt5VKfeREx0grj7n57G70TlzHWXw= Subject key identifier: 9D:DB:33:66:AE:9E:DE:5D:00:65:61:51:20:AB:99:E7:F6:EB:6A:13 Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699 Certificate serial: 010D0C9F4328584D4D5A64EF11126DFCF4AFF540 Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 134.195.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:64:ef:11:12:6d:fc:f4:af:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ae74b5a3-6ec3-4ac5-bd4f-9b8bd9475ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:33:c5:4d:04:0e:65:87:04:8a:db:f4:e6:29: 69:0d:6f:d6:10:e9:e1:32:96:79:e5:ea:b5:f1:51: 34:ae:bf:6c:1d:e5:1f:60:62:a3:42:53:fd:1e:22: e5:f3:21:12:00:d7:7a:b0:cf:45:77:6e:a4:8f:54: d4:1b:0a:e3:7b:03:47:b8:34:92:38:e2:d8:4b:06: 88:d2:80:5c:46:17:d8:60:c6:0d:72:e7:55:38:39: b2:1a:a8:00:d3:8d:e1:51:cf:b5:bc:7b:83:7c:2a: b2:3d:28:8f:e6:4e:45:a8:c1:c6:33:5c:73:fc:25: 6a:43:20:c9:cd:8e:51:2b:14:bf:e7:2d:f6:18:43: 83:9e:a6:ce:e8:47:92:ba:8d:54:8e:be:53:1e:69: ed:36:5f:dc:aa:0d:fa:36:d7:b8:a0:cc:8d:0c:39: 89:c1:80:73:7d:b9:f0:73:b9:59:5b:d0:be:d9:5c: 2e:01:eb:fa:f3:c6:5a:66:c0:4c:fc:fb:c1:1b:ac: 3d:83:56:34:8c:d5:11:0a:91:ae:5e:50:ab:f6:ab: d7:0e:de:20:0f:6b:e2:5c:28:72:1d:f5:bd:96:13: 37:2b:80:d8:2d:16:68:94:c0:2f:79:a8:f5:01:30: e7:9e:68:f9:9c:14:72:6d:22:02:7c:8d:d4:05:59: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:33:66:AE:9E:DE:5D:00:65:61:51:20:AB:99:E7:F6:EB:6A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl X509v3 Authority Key Identifier: keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer sbgp-ipAddrBlock: critical IPv4: 134.195.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1b:2a:a5:43:f8:12:46:34:10:ba:7c:77:65:8d:16:dc:6a: d6:5d:9d:8b:73:69:fe:22:7d:92:9f:44:d4:76:f7:99:21:7e: ba:a8:a2:8f:47:b5:a2:0d:b7:19:75:e7:90:e5:5c:b3:87:f1: 4e:c6:33:35:1b:44:e4:5c:8b:60:54:91:84:a4:f8:1b:71:93: 77:81:b7:69:84:90:81:22:72:64:ac:48:0c:69:e3:e4:fb:8b: 88:55:f6:45:c5:0b:70:d4:92:d6:02:b1:2d:81:3c:30:e4:9b: b2:4f:3e:6e:74:82:b8:56:55:f9:d9:42:2d:7f:80:b7:c5:f5: 0d:fb:b7:d5:14:df:78:b1:c1:35:6d:d0:32:ea:23:e7:6e:c7: 4d:e9:ca:61:a1:6e:d5:dd:f9:c0:61:b1:b9:c4:d5:f1:ea:b1: 42:c0:8b:4a:c0:00:6f:b9:61:cf:fc:01:2b:0c:84:d8:b8:8a: 29:59:ee:b3:92:a9:b9:c2:28:cc:bc:32:de:f7:b2:80:d1:0e: a0:03:ae:f1:02:41:95:f6:38:16:55:5a:bb:25:14:eb:39:34: be:a5:7f:09:a3:b3:4f:3f:14:97:8d:09:29:c4:a2:62:97:a7: 4c:f2:63:cb:ae:34:46:49:cf:9f:1c:aa:e0:b8:d7:b7:d9:31: fb:d0:c5:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmTvERJt/PSv9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmYTI4NzgtNzE1ZS00NzkzLWFmMmEtNDMyNTgzZWEw Njk5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWU3NGI1YTMtNmVjMy00YWM1LWJkNGYtOWI4YmQ5NDc1ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTPFTQQOZYcEitv05ilpDW/WEOnhMpZ55eq1 8VE0rr9sHeUfYGKjQlP9HiLl8yESANd6sM9Fd26kj1TUGwrjewNHuDSSOOLYSwaI 0oBcRhfYYMYNcudVODmyGqgA043hUc+1vHuDfCqyPSiP5k5FqMHGM1xz/CVqQyDJ zY5RKxS/5y32GEODnqbO6EeSuo1Ujr5THmntNl/cqg36Nte4oMyNDDmJwYBzfbnw c7lZW9C+2VwuAev688ZaZsBM/PvBG6w9g1Y0jNURCpGuXlCr9qvXDt4gD2viXChy HfW9lhM3K4DYLRZolMAveaj1ATDnnmj5nBRybSICfI3UBVmSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3bM2aunt5dAGVhUSCrmef262oTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZh Mjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1ODNlYTA2OTkvYWE5MzM3ZGItZmUxMi0z NTgyLWFkYTItMWE5Njc2Mzk5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmYTI4NzgtNzE1ZS00NzkzLWFm MmEtNDMyNTgzZWEwNjk5L2EyZmEyODc4LTcxNWUtNDc5My1hZjJhLTQzMjU4M2Vh MDY5OS5jcmwwHwYDVR0jBBgwFoAU6BplsqVg16P5Ea0VVOp5ypXtsF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZhMjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1 ODNlYTA2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcbKqVD+BJGNBC6fHdljRbcatZdnYtzaf4ifZKfRNR295khfrqooo9H taINtxl155DlXLOH8U7GMzUbRORci2BUkYSk+Btxk3eBt2mEkIEicmSsSAxp4+T7 i4hV9kXFC3DUktYCsS2BPDDkm7JPPm50grhWVfnZQi1/gLfF9Q37t9UU33ixwTVt 0DLqI+dux03pymGhbtXd+cBhsbnE1fHqsULAi0rAAG+5Yc/8ASsMhNi4iilZ7rOS qbnCKMy8Mt73soDRDqADrvECQZX2OBZVWrslFOs5NL6lfwmjs08/FJeNCSnEomKX p0zyY8uuNEZJz58cquC417fZMfvQxQo= -----END CERTIFICATE-----Generated at Fri Mar 27 11:31:19 2026 by rpki-client