$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa File: bb2c05d6-4109-3127-b081-aba78a6a6412.roa (raw, json) Hash identifier: 75cXhB4u5P4gIEqSHYJKlVESJnQSltyVRetCmCLfIWs= Subject key identifier: 78:A2:35:D0:72:F2:96:A0:00:BD:69:D0:A5:CE:29:E1:C0:57:EE:45 Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F4328584AF25675BF235F1F42F8DF8580 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 398395 IP address blocks: 134.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:75:bf:23:5f:1f:42:f8:df:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=ca621839-b51f-4f81-89e4-6a3ac379e64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:e9:69:95:e4:25:06:b8:cd:7f:d4:7e:d8: ee:a7:cb:d9:75:a8:9c:b5:5a:5f:3e:56:b1:43:a5: 86:b6:e9:55:68:e7:17:cf:ba:1e:11:d6:1d:87:3a: fa:f2:29:ce:9c:ad:d4:f6:4f:74:8f:aa:d4:df:f0: 5b:16:fb:41:4b:8c:ed:ad:bc:dd:f9:c5:47:dc:cc: 42:f8:eb:d4:3b:74:97:c1:03:e9:8c:d3:21:e5:a6: 3a:ba:dc:64:78:c5:b5:6e:fd:96:a5:91:35:e1:85: 0a:50:6e:a6:35:09:00:14:32:11:99:c0:34:9e:06: 7a:5a:fd:95:65:06:7e:64:83:ce:b3:f0:92:a9:ed: a9:f7:1f:5c:f9:b9:54:05:23:35:b4:73:14:e5:89: 14:4d:5b:2c:06:9d:c4:bf:bf:8c:ad:1c:fb:cf:c1: 93:5a:ba:72:cf:f4:6b:28:c1:3b:49:a0:39:5a:9c: 30:37:9a:63:4f:86:4b:29:42:03:9c:ec:44:ea:00: 18:bc:2d:37:da:97:a5:4a:95:95:c4:83:a7:05:b3: 9b:a3:52:7f:c2:2c:69:04:b8:60:22:57:1c:1d:ff: b6:77:06:7f:80:fc:dd:44:27:31:ee:f1:b4:a6:c9: fc:5d:99:84:af:42:fe:86:37:2e:cd:86:39:8d:39: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A2:35:D0:72:F2:96:A0:00:BD:69:D0:A5:CE:29:E1:C0:57:EE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/bb2c05d6-4109-3127-b081-aba78a6a6412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f6:25:ad:e5:d2:d3:26:27:af:de:0c:c3:70:9d:d5:02:5e: 71:30:1e:6a:58:a1:56:f7:af:1c:64:88:56:ea:d6:69:06:ef: 73:65:35:43:de:f8:8d:8f:17:0e:74:83:b0:de:56:47:58:d6: 9b:ed:a2:d4:87:cc:5a:f8:ff:55:85:67:04:47:46:3d:70:24: c2:87:63:1a:c6:b2:bc:88:c7:d6:ef:d7:0e:ad:7c:55:6e:da: 93:82:c5:73:85:63:0a:23:e7:04:01:af:42:cf:68:f6:10:c8: 85:6a:db:6c:1b:d0:ec:03:21:25:38:46:9f:0a:36:34:09:04: 5b:bf:29:39:ce:f9:6d:21:67:0a:6c:d9:b4:96:dc:1e:af:0a: 09:93:47:05:49:3b:ba:32:50:de:08:80:3d:b7:02:6b:1a:2d: e0:47:76:69:ec:f0:0c:30:da:27:76:54:c2:2b:3d:8b:1e:90: c8:e8:a6:f6:d9:ed:ac:ed:d2:07:7a:6e:9e:91:8a:92:02:64: 92:18:14:8c:d9:04:e1:10:79:5e:26:b5:f9:8e:f8:e2:93:99: bc:5a:59:be:1e:81:51:fe:11:d2:aa:dd:40:0d:b8:03:bc:dc: 70:e1:75:36:45:ac:4c:f2:ae:be:52:65:bf:63:79:fa:07:24: 9f:e5:97:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnW/I18fQvjfhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk Y2E2MjE4MzktYjUxZi00ZjgxLTg5ZTQtNmEzYWMzNzllNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0XpaZXkJQa4zX/Uftjup8vZdaictVpfPlax Q6WGtulVaOcXz7oeEdYdhzr68inOnK3U9k90j6rU3/BbFvtBS4ztrbzd+cVH3MxC +OvUO3SXwQPpjNMh5aY6utxkeMW1bv2WpZE14YUKUG6mNQkAFDIRmcA0ngZ6Wv2V ZQZ+ZIPOs/CSqe2p9x9c+blUBSM1tHMU5YkUTVssBp3Ev7+MrRz7z8GTWrpyz/Rr KME7SaA5WpwwN5pjT4ZLKUIDnOxE6gAYvC032pelSpWVxIOnBbObo1J/wixpBLhg IlccHf+2dwZ/gPzdRCcx7vG0psn8XZmEr0L+hjcuzYY5jTl6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiiNdBy8pagAL1p0KXOKeHAV+5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvYmIyYzA1ZDYtNDEwOS0z MTI3LWIwODEtYWJhNzhhNmE2NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf2Ja3l0tMmJ6/eDMNwndUCXnEwHmpYoVb3rxxkiFbq1mkG73NlNUPe +I2PFw50g7DeVkdY1pvtotSHzFr4/1WFZwRHRj1wJMKHYxrGsryIx9bv1w6tfFVu 2pOCxXOFYwoj5wQBr0LPaPYQyIVq22wb0OwDISU4Rp8KNjQJBFu/KTnO+W0hZwps 2bSW3B6vCgmTRwVJO7oyUN4IgD23AmsaLeBHdmns8Aww2id2VMIrPYsekMjopvbZ 7azt0gd6bp6RipICZJIYFIzZBOEQeV4mtfmO+OKTmbxaWb4egVH+EdKq3UANuAO8 3HDhdTZFrEzyrr5SZb9jefoHJJ/ll3A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:50 2025 by rpki-client