$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa File: f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa (raw, json) Hash identifier: 6dIOMhLqCiSI57zqeOXTV1DFbd4pcr1sR/9epC5XpuA= Subject key identifier: 13:08:6C:3F:2A:7A:5A:64:D2:4F:A5:BB:50:0F:87:43:B0:EC:39:11 Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699 Certificate serial: 010D0C9F4328584AADF1079E6161BCFFEA1AD280 Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 134.195.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:07:9e:61:61:bc:ff:ea:1a:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=b5008402-3e54-4971-b951-b6c6fe5e07da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:b3:76:6d:dc:ee:db:c4:e6:17:1e:10:75: 4a:fd:43:93:e1:3b:2a:4d:b5:6f:c3:9f:7e:e7:12: ec:97:3f:01:cd:97:17:f7:c0:ec:2c:ee:b2:1c:1d: 90:27:bf:ed:cb:d9:eb:07:ae:c5:fb:11:3d:16:05: b9:fe:7d:33:05:84:e5:ce:a8:d3:fc:bd:7b:44:7f: 92:03:06:4e:68:14:22:1e:80:1a:7c:d5:d7:12:b7: 41:99:da:c4:42:de:a3:8f:2c:75:51:31:48:b7:a5: 2b:71:9a:b5:f7:ec:e3:a1:da:1e:5b:b5:81:f0:c6: e7:6c:b9:b2:34:e7:56:24:9a:90:11:96:b9:ff:c4: c9:ed:94:af:ba:03:a8:19:6a:32:2d:bb:b9:79:5a: 09:ed:1b:35:f4:7d:71:d5:a2:75:88:58:a2:68:0a: b3:c4:d6:57:6a:e9:d7:44:e3:89:f7:99:d1:dc:72: e0:ec:e6:8e:43:f2:69:04:11:07:2e:b4:f6:7f:50: f1:29:60:91:b2:3d:b6:50:76:c0:60:db:ed:dd:d8: c9:01:ff:5e:ef:b6:66:2f:11:10:ac:64:ef:bf:19: c7:ca:49:64:d0:02:e1:91:89:32:62:9d:e4:d3:37: 4c:45:66:63:0b:89:e1:fb:d7:f4:f3:fc:81:e3:08: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:6C:3F:2A:7A:5A:64:D2:4F:A5:BB:50:0F:87:43:B0:EC:39:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl X509v3 Authority Key Identifier: keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer sbgp-ipAddrBlock: critical IPv4: 134.195.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f1:1a:f6:39:d2:05:02:63:f4:69:45:8f:8a:87:25:56:1c: 77:17:78:2d:f1:9e:b1:0a:ea:18:ba:87:e2:44:61:7d:85:5f: 8f:c6:2c:f1:bd:53:f4:fa:a5:fb:7b:e0:ac:b7:60:d2:54:4c: fd:35:62:4d:33:a8:58:3c:f2:8f:91:ba:f0:93:3a:76:44:94: 30:92:1c:07:fe:7a:34:6a:07:87:e0:bc:37:6b:07:fb:94:13: 37:f3:31:f3:61:cc:0b:a7:d5:02:82:0b:3a:73:9e:f9:93:06: 20:88:c5:4d:48:10:de:37:39:d9:55:a5:8f:80:85:a3:cb:99: 1a:66:ec:02:6a:4d:f6:b3:20:f6:5c:3c:52:a5:cc:f9:a6:12: 1c:88:a6:7a:15:27:59:1a:8e:25:a0:2e:9d:2f:46:e9:80:1c: 81:0a:5a:39:05:cb:44:e6:56:a9:31:17:47:b1:56:79:a5:ea: a2:48:1e:fe:cb:89:9c:43:9b:02:0f:65:53:a5:cf:38:4a:e5: ea:fa:43:52:57:5b:4b:79:9b:3d:b2:19:fb:e7:84:0b:52:f0: 7c:a4:f9:6b:02:5f:16:b5:2d:6e:c9:ae:64:08:a3:dc:34:24: c8:cf:a0:be:db:48:f9:cd:49:5f:4f:a0:fc:8d:4c:44:c4:3e: 0e:a4:a5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QeeYWG8/+oa0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmYTI4NzgtNzE1ZS00NzkzLWFmMmEtNDMyNTgzZWEw Njk5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YjUwMDg0MDItM2U1NC00OTcxLWI5NTEtYjZjNmZlNWUwN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzuzdm3c7tvE5hceEHVK/UOT4TsqTbVvw59+ 5xLslz8BzZcX98DsLO6yHB2QJ7/ty9nrB67F+xE9FgW5/n0zBYTlzqjT/L17RH+S AwZOaBQiHoAafNXXErdBmdrEQt6jjyx1UTFIt6UrcZq19+zjodoeW7WB8MbnbLmy NOdWJJqQEZa5/8TJ7ZSvugOoGWoyLbu5eVoJ7Rs19H1x1aJ1iFiiaAqzxNZXaunX ROOJ95nR3HLg7OaOQ/JpBBEHLrT2f1DxKWCRsj22UHbAYNvt3djJAf9e77ZmLxEQ rGTvvxnHyklk0ALhkYkyYp3k0zdMRWZjC4nh+9f08/yB4wh0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMIbD8qelpk0k+lu1APh0Ow7DkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZh Mjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1ODNlYTA2OTkvZjQ2MDhhNWItN2VmNi0z YTllLWFiYTQtMzYwYWIzNTEyNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmYTI4NzgtNzE1ZS00NzkzLWFm MmEtNDMyNTgzZWEwNjk5L2EyZmEyODc4LTcxNWUtNDc5My1hZjJhLTQzMjU4M2Vh MDY5OS5jcmwwHwYDVR0jBBgwFoAU6BplsqVg16P5Ea0VVOp5ypXtsF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZhMjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1 ODNlYTA2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/xGvY50gUCY/RpRY+KhyVWHHcXeC3xnrEK6hi6h+JEYX2FX4/GLPG9 U/T6pft74Ky3YNJUTP01Yk0zqFg88o+RuvCTOnZElDCSHAf+ejRqB4fgvDdrB/uU EzfzMfNhzAun1QKCCzpznvmTBiCIxU1IEN43OdlVpY+AhaPLmRpm7AJqTfazIPZc PFKlzPmmEhyIpnoVJ1kajiWgLp0vRumAHIEKWjkFy0TmVqkxF0exVnml6qJIHv7L iZxDmwIPZVOlzzhK5er6Q1JXW0t5mz2yGfvnhAtS8Hyk+WsCXxa1LW7JrmQIo9w0 JMjPoL7bSPnNSV9PoPyNTETEPg6kpZc= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:19 2025 by rpki-client