$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa File: f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json) Hash identifier: fUIF+7fYjVFSfCYACEh2+2woI690AIbmer3DMfUupXg= Subject key identifier: 64:03:5D:2A:7B:F8:8E:B9:51:3F:C7:FC:93:2C:61:3A:43:9B:69:45 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584EA7876B250ADCC5FBBB2D5440 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53768 IP address blocks: 162.134.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:6b:25:0a:dc:c5:fb:bb:2d:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=624f38db-8614-4956-866c-d2fac6fe916e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:f1:ce:f9:c4:52:72:7f:23:47:ec:b1:5e: 95:99:bd:2e:fd:d8:59:0a:14:58:b8:61:e3:58:aa: 3d:09:f4:1a:e7:85:c2:c4:f4:15:0d:30:f3:e1:39: a9:e7:b6:8a:c0:b5:5d:21:d8:9b:fc:01:82:b0:e7: ac:4d:3b:3b:06:80:8d:b9:74:2a:9e:25:a6:ca:6f: 67:97:d5:f3:97:f5:54:43:4f:31:d0:3d:2e:fd:42: 96:29:64:9c:04:a6:74:a1:c5:cd:47:2e:08:50:4f: 52:35:06:c8:cc:fe:bb:03:a2:b5:6e:83:74:f8:3c: d4:9b:49:3c:48:0a:eb:e7:0c:67:f8:4d:42:4f:3b: cb:c9:e4:2c:09:98:3e:07:6d:8b:3b:43:16:03:1f: dd:5e:59:d5:53:36:5e:a0:f9:77:85:a4:38:71:56: 74:90:15:b5:22:8f:83:3d:d7:b4:3b:3a:23:d0:e3: 60:8b:3c:d8:3c:2a:03:dc:d5:24:6d:a7:da:d6:c5: c7:ff:23:1b:9b:ee:5c:e2:af:e8:4a:b0:1b:b0:ab: f4:76:7b:03:fd:90:78:cc:df:7f:e4:5b:fa:13:1e: 49:6e:be:10:8d:9a:4e:3c:5d:f1:41:71:2b:ab:cf: c5:8d:fa:36:b3:50:3f:7b:8e:2c:8d:5d:41:df:91: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:03:5D:2A:7B:F8:8E:B9:51:3F:C7:FC:93:2C:61:3A:43:9B:69:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6d:9f:4e:cd:02:37:67:68:94:94:51:8a:d9:b1:9b:a2:82: 90:1f:8f:e0:a5:87:d5:2c:19:84:e2:a9:cd:64:e1:36:41:fa: 4c:19:f7:3d:ee:eb:23:b9:bb:8c:7a:07:83:14:d4:6b:93:85: c0:c5:1f:d8:18:1c:ad:01:20:9a:c8:c1:d2:df:77:1c:c0:c9: ee:66:4a:e8:81:a0:10:8e:98:f2:b8:ba:09:07:fa:31:02:ca: 6d:6a:f2:48:23:8a:db:63:06:5e:d1:d9:76:ab:b8:f9:0a:6a: 83:bd:6d:c9:22:8e:c9:43:b7:ee:b5:ca:19:da:2e:dd:77:7d: 45:a6:d1:8e:4c:7a:66:23:8c:80:17:c9:a2:35:fe:a1:38:0f: 96:64:52:07:91:ce:26:50:fe:bc:2d:d9:20:02:df:8e:7a:db: ed:78:8c:4f:b9:4c:35:a6:83:01:aa:ff:2e:ec:6b:91:6b:58: a2:33:4f:af:23:6f:c3:af:c5:a4:e1:bb:da:89:c0:32:94:f6: 34:35:e6:36:4a:b5:a1:02:3e:ab:64:33:d2:7a:4d:f8:0a:07: 8b:78:14:50:c7:01:72:c2:54:91:91:d7:0f:4b:6f:4d:1f:0c: 9c:f3:22:fe:26:80:5a:bd:c1:26:90:ce:a0:10:91:f8:2c:3a: 38:34:a1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2slCtzF+7stVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjI0ZjM4ZGItODYxNC00OTU2LTg2NmMtZDJmYWM2ZmU5MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTzxzvnEUnJ/I0fssV6Vmb0u/dhZChRYuGHj WKo9CfQa54XCxPQVDTDz4Tmp57aKwLVdIdib/AGCsOesTTs7BoCNuXQqniWmym9n l9Xzl/VUQ08x0D0u/UKWKWScBKZ0ocXNRy4IUE9SNQbIzP67A6K1boN0+DzUm0k8 SArr5wxn+E1CTzvLyeQsCZg+B22LO0MWAx/dXlnVUzZeoPl3haQ4cVZ0kBW1Io+D Pde0Ozoj0ONgizzYPCoD3NUkbafa1sXH/yMbm+5c4q/oSrAbsKv0dnsD/ZB4zN9/ 5Fv6Ex5Jbr4QjZpOPF3xQXErq8/Fjfo2s1A/e44sjV1B35GCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQDXSp7+I65UT/H/JMsYTpDm2lFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZjUzOWNmZDEtOTUwMy0z MWUwLWEzODMtMmRiZTNiYWNkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1tn07NAjdnaJSUUYrZsZuigpAfj+Clh9UsGYTiqc1k4TZB+kwZ9z3u 6yO5u4x6B4MU1GuThcDFH9gYHK0BIJrIwdLfdxzAye5mSuiBoBCOmPK4ugkH+jEC ym1q8kgjittjBl7R2XaruPkKaoO9bckijslDt+61yhnaLt13fUWm0Y5MemYjjIAX yaI1/qE4D5ZkUgeRziZQ/rwt2SAC34562+14jE+5TDWmgwGq/y7sa5FrWKIzT68j b8OvxaThu9qJwDKU9jQ15jZKtaECPqtkM9J6TfgKB4t4FFDHAXLCVJGR1w9Lb00f DJzzIv4mgFq9wSaQzqAQkfgsOjg0oco= -----END CERTIFICATE-----Generated at Wed Jul 29 12:05:26 2026 by rpki-client