$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa File: 195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa (raw, json) Hash identifier: YFDtSFxI8ra9MbYQsxjyg5TvZciFQnDt7oiHDmTKzgM= Subject key identifier: 90:77:D8:19:A4:7C:A2:11:A9:12:44:70:2E:50:9D:8E:CA:9E:9D:7C Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584F268D08BC6E4D263D72A7A600 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 401398 IP address blocks: 134.195.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:08:bc:6e:4d:26:3d:72:a7:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=67a2426c-81bf-4082-811e-e946754767e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6c:a6:b2:58:34:11:71:af:f5:9c:06:e7:d7: 16:b4:01:12:d5:14:ac:ea:25:9d:49:f2:0d:ea:d1: aa:b0:71:6a:a7:a6:f4:2f:ca:37:06:57:d7:dd:d5: e1:d4:d3:cc:9f:26:2f:9c:bb:01:67:14:dc:33:d8: cc:97:d3:07:cb:8b:21:2e:2a:d3:d3:f2:6b:12:4f: 00:d2:c2:91:b8:6d:23:43:89:ee:ff:49:20:8a:f6: a1:f7:57:45:01:15:b4:a7:4d:ac:00:ea:34:18:c9: 4c:33:95:80:28:ff:33:79:08:17:c0:32:3f:e0:d9: 52:ad:36:35:1d:f5:4c:56:45:83:7f:69:28:46:05: 74:8c:b5:0e:66:02:01:9e:73:59:b2:39:01:19:3a: 15:bc:c3:5d:70:84:2b:38:eb:d9:c0:ea:af:2d:16: 5b:d9:6a:a6:6d:70:26:cd:3b:eb:7c:93:14:95:91: 36:8d:95:9d:1d:b0:e2:73:35:79:f5:31:64:32:10: b7:f6:a6:cd:eb:5c:a3:57:3f:64:90:9f:5f:3e:9e: 21:dd:5f:f8:33:db:5b:44:c1:62:f9:da:46:9d:25: b2:01:be:f7:1f:fa:ad:6c:fa:48:6f:e8:26:80:1b: 31:46:73:3a:4c:b3:40:e9:a2:77:24:75:d9:5a:22: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:D8:19:A4:7C:A2:11:A9:12:44:70:2E:50:9D:8E:CA:9E:9D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 134.195.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:ff:a9:37:07:bc:ba:cb:f6:09:66:b7:cd:8e:4b:b4:2c: 90:26:38:fc:30:05:bf:86:17:4a:ec:d5:d0:69:4d:7b:22:ee: 33:fd:e5:5b:df:6d:df:54:fc:b0:66:65:40:22:ae:b4:73:df: 2c:ae:57:9e:b6:98:46:71:6e:6b:ec:1a:0c:c0:49:66:a5:c2: ac:16:52:d0:b1:01:72:94:c6:1f:e0:3c:a2:a3:fd:c6:39:ce: 17:03:6e:23:8f:f7:7b:f0:ba:57:23:61:5a:6c:3c:5e:e0:75: 67:b5:73:e3:0d:6e:1b:44:fe:2b:dd:44:86:ae:a5:30:21:f3: 4a:9d:be:ba:f9:6d:b8:42:b6:d1:c6:cd:39:ed:37:e4:74:77: 63:b9:29:1a:fd:4f:5c:17:d8:68:17:18:fe:fb:05:cc:2d:51: 0b:d8:88:f0:e4:df:d5:c2:71:6a:04:5e:5a:f7:f7:30:34:da: de:86:5c:56:d2:8b:74:05:f8:c4:79:44:ef:2b:9c:f8:04:a9: 4c:35:a6:5d:9e:4b:8a:36:b2:80:b1:a6:c3:cf:85:0f:ad:bc: 7b:07:76:b0:42:e4:be:64:d2:f6:63:35:96:50:71:4f:4e:5b: 3c:b3:7d:e2:6d:b2:46:31:73:2e:70:f6:9b:52:8d:cd:e0:70: bf:47:dc:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQi8bk0mPXKnpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk NjdhMjQyNmMtODFiZi00MDgyLTgxMWUtZTk0Njc1NDc2N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wymslg0EXGv9ZwG59cWtAES1RSs6iWdSfIN 6tGqsHFqp6b0L8o3BlfX3dXh1NPMnyYvnLsBZxTcM9jMl9MHy4shLirT0/JrEk8A 0sKRuG0jQ4nu/0kgivah91dFARW0p02sAOo0GMlMM5WAKP8zeQgXwDI/4NlSrTY1 HfVMVkWDf2koRgV0jLUOZgIBnnNZsjkBGToVvMNdcIQrOOvZwOqvLRZb2WqmbXAm zTvrfJMUlZE2jZWdHbDiczV59TFkMhC39qbN61yjVz9kkJ9fPp4h3V/4M9tbRMFi +dpGnSWyAb73H/qtbPpIb+gmgBsxRnM6TLNA6aJ3JHXZWiJi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB32BmkfKIRqRJEcC5QnY7Knp18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMTk1Yzg2MGQtOGJlMC0z NmNiLWIwOTMtZGMwZTBiYTBhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERy/6k3B7y6y/YJZrfNjku0LJAmOPwwBb+GF0rs1dBpTXsi7jP95Vvf bd9U/LBmZUAirrRz3yyuV562mEZxbmvsGgzASWalwqwWUtCxAXKUxh/gPKKj/cY5 zhcDbiOP93vwulcjYVpsPF7gdWe1c+MNbhtE/ivdRIaupTAh80qdvrr5bbhCttHG zTntN+R0d2O5KRr9T1wX2GgXGP77BcwtUQvYiPDk39XCcWoEXlr39zA02t6GXFbS i3QF+MR5RO8rnPgEqUw1pl2eS4o2soCxpsPPhQ+tvHsHdrBC5L5k0vZjNZZQcU9O WzyzfeJtskYxcy5w9ptSjc3gcL9H3GM= -----END CERTIFICATE-----Generated at Tue Sep 22 17:32:26 2026 by rpki-client