$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af2700c1-46fe-36a5-9c15-322c3b593ffa.roa File: af2700c1-46fe-36a5-9c15-322c3b593ffa.roa (raw, json) Hash identifier: RUEoAvBINS9EOALQW6kdQgLlQtFv7wbzwqb/q7mpvSA= Subject key identifier: 97:3C:17:75:AA:43:9C:7B:17:DC:35:24:E6:DF:4F:7C:D5:09:C8:7A Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584BA0D24102989C0D171E7CEE80 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af2700c1-46fe-36a5-9c15-322c3b593ffa.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 11377 IP address blocks: 134.128.64.0/19 maxlen: 19 134.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:41:02:98:9c:0d:17:1e:7c:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=73ce2822-92bf-47db-8569-85544cbc5172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:f6:37:b7:56:fb:60:9c:84:85:3d:46:c2: 08:bf:83:5e:d2:b8:63:09:bd:31:f2:48:6d:78:0a: 2f:db:bb:80:85:c1:cf:76:3f:d5:16:15:a1:f2:a8: cf:61:dd:e0:9d:16:1f:43:33:4b:02:72:9d:14:16: 76:88:e2:12:db:6c:c8:34:50:08:28:41:fb:6e:2a: 53:2f:31:8a:73:f9:1f:d6:c9:40:2a:ed:43:68:21: 2b:3f:f2:03:d7:07:5c:6c:94:0b:f1:01:bc:68:8a: b2:f3:92:63:df:20:1f:26:5c:c8:99:d3:1f:c3:bc: ed:ea:79:da:36:ae:22:54:37:fd:9a:b1:1e:ef:75: 5d:40:15:c2:4f:73:2d:d0:b8:ea:3d:9f:19:c4:c3: 9c:b2:b1:23:ec:78:be:de:e3:39:2d:eb:6b:57:7a: f4:89:43:19:99:0d:39:b0:05:96:bb:2e:32:e3:02: c1:84:fd:38:c0:33:21:6e:5b:a6:e6:17:33:65:41: 2f:93:0b:27:3a:fd:a8:3d:0f:90:ff:e6:2a:b3:66: 67:2d:c2:f5:ca:13:11:c3:e9:e5:db:16:5e:05:94: 23:78:27:4b:c9:5e:67:34:18:fe:b6:f1:0c:78:dd: cb:10:c3:6a:a1:de:1a:81:aa:98:cf:95:2f:22:a1: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:17:75:AA:43:9C:7B:17:DC:35:24:E6:DF:4F:7C:D5:09:C8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af2700c1-46fe-36a5-9c15-322c3b593ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 134.128.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:76:4d:25:cc:11:f7:5d:3e:8d:b3:b6:99:16:ba:7d:14:31: c9:38:c2:67:34:6f:38:e3:dd:df:10:32:5b:1a:51:74:e4:70: 12:c1:e8:7f:4e:fd:98:db:bf:1f:41:31:78:95:d9:86:03:86: 31:f8:22:34:3b:ad:58:03:ac:0d:9d:50:06:26:dd:4e:79:7d: 25:9b:e7:1f:9f:d6:ba:c5:62:ba:3a:91:ea:83:41:89:c0:a8: 7a:de:99:fc:76:70:25:96:0a:7b:1c:b3:49:be:27:21:99:24: bc:be:5e:6c:a0:95:12:43:06:4b:21:b1:84:e6:c8:f4:23:37: df:2b:87:52:b7:83:61:76:aa:5c:56:1c:69:2b:c2:f6:7a:19: 33:59:92:dc:18:37:df:4b:f3:28:cf:f5:28:2f:dd:70:88:7d: ba:20:ec:42:36:c5:15:f6:3f:71:98:b3:b9:dc:a8:de:76:76: fc:85:f6:92:aa:3b:62:f7:9b:25:1d:bf:5a:71:28:b8:f9:b7: 96:32:ca:f0:5a:19:da:9a:c7:cc:d7:1e:f6:a0:12:d3:8c:d3: 82:fd:88:84:e2:3e:87:ae:da:6e:70:5d:58:79:af:bc:b6:d5: ee:83:2a:dc:aa:00:63:b0:0b:17:dd:62:60:64:5c:3e:26:f9: 6e:f4:22:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kECmJwNFx587oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzNjZTI4MjItOTJiZi00N2RiLTg1NjktODU1NDRjYmM1MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscP2N7dW+2CchIU9RsIIv4Ne0rhjCb0x8kht eAov27uAhcHPdj/VFhWh8qjPYd3gnRYfQzNLAnKdFBZ2iOIS22zINFAIKEH7bipT LzGKc/kf1slAKu1DaCErP/ID1wdcbJQL8QG8aIqy85Jj3yAfJlzImdMfw7zt6nna Nq4iVDf9mrEe73VdQBXCT3Mt0LjqPZ8ZxMOcsrEj7Hi+3uM5LetrV3r0iUMZmQ05 sAWWuy4y4wLBhP04wDMhblum5hczZUEvkwsnOv2oPQ+Q/+Yqs2ZnLcL1yhMRw+nl 2xZeBZQjeCdLyV5nNBj+tvEMeN3LEMNqod4agaqYz5UvIqHyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc8F3WqQ5x7F9w1JObfT3zVCch6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYWYyNzAwYzEtNDZmZS0z NmE1LTljMTUtMzIyYzNiNTkzZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhoBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh2TSXMEfddPo2ztpkWun0UMck4wmc0bzjj3d8QMlsaUXTkcBLB6H9O /Zjbvx9BMXiV2YYDhjH4IjQ7rVgDrA2dUAYm3U55fSWb5x+f1rrFYro6keqDQYnA qHremfx2cCWWCnscs0m+JyGZJLy+XmyglRJDBkshsYTmyPQjN98rh1K3g2F2qlxW HGkrwvZ6GTNZktwYN99L8yjP9Sgv3XCIfbog7EI2xRX2P3GYs7ncqN52dvyF9pKq O2L3myUdv1pxKLj5t5YyyvBaGdqax8zXHvagEtOM04L9iITiPoeu2m5wXVh5r7y2 1e6DKtyqAGOwCxfdYmBkXD4m+W70IpA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:50 2025 by rpki-client