$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa File: f894fd05-f37a-38af-a864-4381a924fc4f.roa (raw, json) Hash identifier: OwFz8op5eqTe3VccyKXwMBYXn4Jh4JidX6K0f9VWWY8= Subject key identifier: 4B:1E:FC:96:F5:77:41:C7:23:BC:95:0E:4D:BC:16:98:FE:4B:42:66 Certificate issuer: /CN=407cb240-661e-489d-9198-56d20c6d1076 Certificate serial: 010D0C9F4328584ED9C73EB5EF829A71FBF14F20 Authority key identifier: 2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 53520 IP address blocks: 134.195.92.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3e:b5:ef:82:9a:71:fb:f1:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407cb240-661e-489d-9198-56d20c6d1076 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=c0756baf-0c2e-495b-9881-1dce3026a900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:5a:90:79:6c:ee:7a:ec:0b:74:ac:d4:9b: 4c:86:86:f1:65:58:24:f9:67:1c:2c:ae:0d:7d:96: bc:56:59:65:7c:3d:b3:be:89:2a:83:40:d7:78:ae: 45:b4:94:28:af:ea:d5:50:da:e7:ef:a8:ed:af:90: 86:fc:fa:78:72:22:dc:26:81:d3:4e:97:dc:c7:12: c6:ba:d5:9d:a7:c8:d2:7b:b1:37:f7:fc:29:af:3f: b0:97:3b:eb:fb:12:f2:8b:fb:b1:b1:e9:7a:c2:2a: 3e:24:25:5e:c0:09:36:65:3b:6b:42:59:72:9e:41: 20:4f:39:05:8e:fb:99:28:ff:5b:69:ba:1f:5f:af: 2b:17:d7:01:a1:0b:31:0c:bc:09:d6:5a:47:2e:64: 3e:d1:e7:df:06:d9:d6:77:6e:8c:28:00:26:2f:13: d7:25:86:52:e1:5f:d7:08:a1:58:5b:5c:ce:df:07: ac:8c:b4:af:83:16:c2:c7:b6:77:53:bc:88:15:f6: d1:6c:98:e2:d4:ea:08:ec:25:3c:06:08:08:71:82: 07:29:20:34:49:e0:54:55:29:87:50:f2:18:a1:73: 5c:30:65:da:92:c3:af:b2:e5:5b:d3:e6:fc:83:b7: 4d:70:23:02:00:8f:eb:28:3f:b9:a4:87:f5:15:14: 41:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1E:FC:96:F5:77:41:C7:23:BC:95:0E:4D:BC:16:98:FE:4B:42:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl X509v3 Authority Key Identifier: keyid:2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer sbgp-ipAddrBlock: critical IPv4: 134.195.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2e:fd:45:0e:d8:67:36:02:27:0b:75:7e:f1:fa:58:dd:8b: 46:f9:a4:9b:1a:43:a2:85:4a:6e:c7:4c:8b:42:39:41:d9:63: 29:41:e7:61:5e:82:a6:7a:ea:17:30:33:d5:a3:30:d0:13:9f: b5:d5:19:11:3c:70:c8:e0:16:e4:5a:0d:96:ed:9f:e1:1c:b4: 4e:01:fc:72:9b:c3:80:ed:99:99:0b:3b:0d:27:0a:66:23:a4: e4:e6:7f:07:ee:7d:59:b7:a9:dc:9e:7d:08:34:90:8a:16:c3: 11:c7:47:92:9a:42:d1:db:61:06:6f:8e:48:ad:8b:88:b1:aa: f4:da:71:01:c7:65:69:38:f5:fd:f6:dc:63:f6:63:20:d2:af: ac:8b:60:d1:51:0b:ae:38:f6:1e:8c:76:fd:13:cc:1a:44:a1: 65:d6:84:5a:a9:49:25:22:1a:ee:d8:4b:d1:d7:d4:98:c6:1e: bf:3d:c6:cd:99:9b:60:af:99:c5:d5:5a:a3:65:06:59:79:c1: 53:d6:e5:56:0e:f5:1c:f6:ca:c7:a2:bf:49:95:8f:12:30:99: 58:f6:9e:07:31:52:51:d5:cc:8d:33:8c:fc:07:e3:f5:68:68: 2b:c1:7e:28:9f:fa:28:d2:1d:53:67:13:18:74:43:4b:12:2b: d6:1f:9e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zxz6174KacfvxTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA3Y2IyNDAtNjYxZS00ODlkLTkxOTgtNTZkMjBjNmQx MDc2MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk YzA3NTZiYWYtMGMyZS00OTViLTk4ODEtMWRjZTMwMjZhOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdakHls7nrsC3Ss1JtMhobxZVgk+WccLK4N fZa8VlllfD2zvokqg0DXeK5FtJQor+rVUNrn76jtr5CG/Pp4ciLcJoHTTpfcxxLG utWdp8jSe7E39/wprz+wlzvr+xLyi/uxsel6wio+JCVewAk2ZTtrQllynkEgTzkF jvuZKP9babofX68rF9cBoQsxDLwJ1lpHLmQ+0effBtnWd26MKAAmLxPXJYZS4V/X CKFYW1zO3wesjLSvgxbCx7Z3U7yIFfbRbJji1OoI7CU8BggIcYIHKSA0SeBUVSmH UPIYoXNcMGXaksOvsuVb0+b8g7dNcCMCAI/rKD+5pIf1FRRBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEse/Jb1d0HHI7yVDk28Fpj+S0JmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDdj YjI0MC02NjFlLTQ4OWQtOTE5OC01NmQyMGM2ZDEwNzYvZjg5NGZkMDUtZjM3YS0z OGFmLWE4NjQtNDM4MWE5MjRmYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDA3Y2IyNDAtNjYxZS00ODlkLTkx OTgtNTZkMjBjNmQxMDc2LzQwN2NiMjQwLTY2MWUtNDg5ZC05MTk4LTU2ZDIwYzZk MTA3Ni5jcmwwHwYDVR0jBBgwFoAUK9cIJI4OXV7iM9cYSC+0eXIbX9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDdjYjI0MC02NjFlLTQ4OWQtOTE5OC01NmQy MGM2ZDEwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIu/UUO2Gc2AicLdX7x+ljdi0b5pJsaQ6KFSm7HTItCOUHZYylB52Fe gqZ66hcwM9WjMNATn7XVGRE8cMjgFuRaDZbtn+EctE4B/HKbw4DtmZkLOw0nCmYj pOTmfwfufVm3qdyefQg0kIoWwxHHR5KaQtHbYQZvjkiti4ixqvTacQHHZWk49f32 3GP2YyDSr6yLYNFRC6449h6Mdv0TzBpEoWXWhFqpSSUiGu7YS9HX1JjGHr89xs2Z m2CvmcXVWqNlBll5wVPW5VYO9Rz2yseiv0mVjxIwmVj2ngcxUlHVzI0zjPwH4/Vo aCvBfiif+ijSHVNnExh0Q0sSK9Yfnrc= -----END CERTIFICATE-----Generated at Fri Aug 21 02:51:41 2026 by rpki-client