$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa File: f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa (raw, json) Hash identifier: Qs+GgiFqKSke1VJ0rTvJ8F2yU7r0+aD8zmMuyLxcOEw= Subject key identifier: DE:10:54:14:91:83:F0:38:8C:FB:C9:96:8A:9F:1A:AD:3C:E9:7E:18 Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699 Certificate serial: 010D0C9F4328584B8EACCED41281222AE179CEC0 Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 134.195.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ce:d4:12:81:22:2a:e1:79:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9684eb95-6f4b-4dc4-b80d-b247c6f4c031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:64:29:6e:12:4a:be:52:d6:03:c7:38:35: dd:3d:5b:04:21:9c:45:68:b0:1a:d2:e8:7f:80:ab: ca:b9:20:8e:7c:8b:d9:44:bd:05:6b:f6:ba:15:76: 4d:05:fc:ca:68:29:d9:34:4c:22:37:8e:30:41:5e: 6d:8a:f8:db:72:e5:de:62:f4:63:fb:c2:be:da:bd: 06:8f:aa:72:1f:a0:68:6b:58:26:d6:99:39:33:78: 7f:bd:1b:e0:77:15:b7:7b:c0:0e:43:43:77:81:ef: 47:a1:95:6f:23:b2:db:ec:78:d8:24:2b:13:f0:36: 10:d9:d4:64:ea:c3:15:49:bd:12:54:2b:2e:ba:8d: 0a:e9:b9:cf:05:46:da:b0:3b:f1:57:3d:86:e4:7a: 2f:2e:0b:4b:c9:52:af:c7:49:30:d8:11:48:1d:dc: ec:30:90:ec:88:77:37:ae:9a:f1:9c:0f:3c:13:97: 3d:ae:43:de:2d:d9:c7:19:fd:f2:db:c9:49:0b:d7: 97:9d:e4:fd:59:ac:ff:0e:ed:78:c2:b6:c6:c6:bc: 94:7a:c9:0f:97:d0:35:ce:3c:4d:e1:ed:4c:07:e0: 7d:31:75:02:d7:9d:93:ea:c0:42:4b:9f:a6:b5:90: 43:ce:db:8d:25:4e:90:99:0e:a1:55:2b:af:a6:8d: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:10:54:14:91:83:F0:38:8C:FB:C9:96:8A:9F:1A:AD:3C:E9:7E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/f4608a5b-7ef6-3a9e-aba4-360ab351278e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl X509v3 Authority Key Identifier: keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer sbgp-ipAddrBlock: critical IPv4: 134.195.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:84:e3:c9:98:19:82:d2:09:d3:37:c5:4d:70:84:ce:3f:bc: 37:e8:84:c4:6f:46:22:25:89:d5:26:65:d7:3f:a6:41:94:bb: c4:42:39:b3:99:80:ca:ed:3d:7c:72:66:32:24:7d:c8:51:fc: 78:11:e0:9a:23:df:10:e5:c9:28:4b:cd:87:e8:3f:a7:c7:7c: df:a9:27:38:ce:5c:bd:04:ad:7b:05:bb:28:f3:82:81:ea:62: 72:2e:e6:17:f9:c4:25:e7:d0:08:92:08:8e:a1:61:ed:39:8c: 42:c2:74:89:58:e0:4d:44:69:15:62:00:19:71:16:6e:4b:1c: a3:61:a0:eb:aa:4c:53:69:bd:53:62:ee:91:9d:08:64:83:90: 4f:e9:39:5f:46:1e:19:57:d7:00:f3:d2:88:2d:0b:d8:a9:12: d7:93:74:5f:63:06:c3:b7:7f:88:8c:48:6b:ab:7d:25:13:8f: e2:6a:eb:74:18:41:ab:70:81:53:66:b7:f6:00:6e:09:50:ab: b6:56:25:83:b4:9d:3d:60:dd:4a:a4:ba:e1:fb:66:87:fa:07: 20:4b:40:6c:8e:32:55:53:f8:08:ba:0e:38:03:3e:81:cb:dd: cd:79:aa:ec:7e:6c:23:0d:e6:ba:bd:1d:22:26:2a:4b:e0:d7: 8a:af:2c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrM7UEoEiKuF5zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmYTI4NzgtNzE1ZS00NzkzLWFmMmEtNDMyNTgzZWEw Njk5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTY4NGViOTUtNmY0Yi00ZGM0LWI4MGQtYjI0N2M2ZjRjMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDlkKW4SSr5S1gPHODXdPVsEIZxFaLAa0uh/ gKvKuSCOfIvZRL0Fa/a6FXZNBfzKaCnZNEwiN44wQV5tivjbcuXeYvRj+8K+2r0G j6pyH6Boa1gm1pk5M3h/vRvgdxW3e8AOQ0N3ge9HoZVvI7Lb7HjYJCsT8DYQ2dRk 6sMVSb0SVCsuuo0K6bnPBUbasDvxVz2G5HovLgtLyVKvx0kw2BFIHdzsMJDsiHc3 rprxnA88E5c9rkPeLdnHGf3y28lJC9eXneT9Waz/Du14wrbGxryUeskPl9A1zjxN 4e1MB+B9MXUC152T6sBCS5+mtZBDztuNJU6QmQ6hVSuvpo0KxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4QVBSRg/A4jPvJloqfGq086X4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZh Mjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1ODNlYTA2OTkvZjQ2MDhhNWItN2VmNi0z YTllLWFiYTQtMzYwYWIzNTEyNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmYTI4NzgtNzE1ZS00NzkzLWFm MmEtNDMyNTgzZWEwNjk5L2EyZmEyODc4LTcxNWUtNDc5My1hZjJhLTQzMjU4M2Vh MDY5OS5jcmwwHwYDVR0jBBgwFoAU6BplsqVg16P5Ea0VVOp5ypXtsF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZhMjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1 ODNlYTA2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiE48mYGYLSCdM3xU1whM4/vDfohMRvRiIlidUmZdc/pkGUu8RCObOZ gMrtPXxyZjIkfchR/HgR4Joj3xDlyShLzYfoP6fHfN+pJzjOXL0ErXsFuyjzgoHq YnIu5hf5xCXn0AiSCI6hYe05jELCdIlY4E1EaRViABlxFm5LHKNhoOuqTFNpvVNi 7pGdCGSDkE/pOV9GHhlX1wDz0ogtC9ipEteTdF9jBsO3f4iMSGurfSUTj+Jq63QY QatwgVNmt/YAbglQq7ZWJYO0nT1g3UqkuuH7Zof6ByBLQGyOMlVT+Ai6DjgDPoHL 3c15qux+bCMN5rq9HSImKkvg14qvLJM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:53:07 2025 by rpki-client