$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/984d6a80-fcab-383e-96b5-ed1556a0430d.roa File: 984d6a80-fcab-383e-96b5-ed1556a0430d.roa (raw, json) Hash identifier: Vq58yUwcwBRsQs0lkv2qeIlrSXJwooh7LkVW1nrpM+M= Subject key identifier: FF:92:C4:20:94:E1:7C:75:FF:9E:B5:C3:70:CC:65:62:6E:81:E5:5D Certificate issuer: /CN=407cb240-661e-489d-9198-56d20c6d1076 Certificate serial: 010D0C9F4328584F0C0784841A8A57B923875AA0 Authority key identifier: 2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/984d6a80-fcab-383e-96b5-ed1556a0430d.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 53520 IP address blocks: 134.49.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:84:84:1a:8a:57:b9:23:87:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407cb240-661e-489d-9198-56d20c6d1076 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=02857182-c2a8-418e-8ed7-b30114c73b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:f1:14:8d:fb:08:d1:55:03:d7:22:be:06: f9:13:fb:ab:aa:3e:f7:41:50:37:1b:ff:44:81:37: 14:43:c2:e0:b8:47:94:97:4d:e1:6a:7c:fe:7a:a6: 35:60:c1:35:5a:54:6f:4b:5c:77:02:2d:00:b1:f8: b0:97:54:ed:9e:34:0c:20:11:03:4d:6f:3c:39:aa: 28:e1:35:f5:8c:9f:e1:9e:3b:a6:47:3b:ee:8b:d6: f4:1d:9b:94:d3:50:ee:1f:03:54:37:19:88:0a:53: 90:a5:80:2e:95:ee:5a:4a:86:5f:54:02:9f:d3:19: 71:29:1c:59:14:5c:d5:2d:7d:89:a6:a9:db:3d:56: 38:54:eb:20:94:ad:54:f1:e1:79:14:61:fb:91:9c: db:dc:30:41:c0:60:a4:3f:77:57:62:89:a2:8b:fd: d5:21:34:82:96:3c:cc:fa:f0:d7:bf:a1:70:43:19: 02:44:b0:fb:06:99:de:64:df:7c:c3:4f:8d:32:15: f6:d4:ae:c5:32:44:f5:09:9b:22:e6:91:cd:a3:14: 12:13:96:a5:7a:d6:48:b3:32:aa:1f:f5:f6:2e:f1: 46:c6:2a:06:8c:12:ab:e4:58:57:94:58:bc:f0:9a: d6:7d:db:28:97:34:d4:47:32:42:7b:d0:c2:1d:1d: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:C4:20:94:E1:7C:75:FF:9E:B5:C3:70:CC:65:62:6E:81:E5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/984d6a80-fcab-383e-96b5-ed1556a0430d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl X509v3 Authority Key Identifier: keyid:2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer sbgp-ipAddrBlock: critical IPv4: 134.49.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c9:a4:f8:0c:23:44:af:e8:85:41:a3:4d:b9:6c:ff:e8:91: 5e:e6:08:ad:ef:b7:bd:7e:2b:13:56:27:a7:9d:3f:fc:3e:d9: 60:f6:70:a3:09:2a:a0:ce:ad:df:29:f9:2e:a4:7b:80:86:84: d6:a5:ff:5e:b1:6b:c0:c3:d8:88:ce:74:2c:b6:c6:36:88:be: 0d:f5:82:4e:fc:22:92:96:ea:87:9b:a1:46:f5:10:43:ef:b8: 8d:cd:16:23:85:47:c4:26:74:d7:3e:7b:b3:31:bb:b3:9f:00: 82:42:c2:ae:09:4f:98:57:4e:23:85:11:85:8a:4a:41:f1:6c: 0c:34:ec:7e:ee:19:65:d6:1b:f7:14:82:04:7b:e3:d8:98:c1: b8:59:66:e3:b3:7e:90:d7:c6:be:88:94:65:1d:5b:4d:6e:80: ca:f5:cc:06:7d:c5:4f:dc:4a:d0:61:74:1b:23:a1:c5:7b:44: bf:d9:83:3a:37:b3:86:f2:45:d9:d8:ae:e7:e8:03:9e:b7:c0: 8d:6e:63:98:f2:53:1b:d8:d0:1c:ac:1c:94:8e:0d:75:7f:87: 28:6d:64:39:40:39:99:e9:ec:97:bf:da:cb:1c:a1:02:f0:22: b3:ad:b5:3b:55:72:c6:d5:59:6b:35:3b:c9:c3:60:ad:63:1f: 5c:3e:63:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4SEGopXuSOHWqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA3Y2IyNDAtNjYxZS00ODlkLTkxOTgtNTZkMjBjNmQx MDc2MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MDI4NTcxODItYzJhOC00MThlLThlZDctYjMwMTE0YzczYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/bxFI37CNFVA9civgb5E/urqj73QVA3G/9E gTcUQ8LguEeUl03hanz+eqY1YME1WlRvS1x3Ai0Asfiwl1TtnjQMIBEDTW88Oaoo 4TX1jJ/hnjumRzvui9b0HZuU01DuHwNUNxmIClOQpYAule5aSoZfVAKf0xlxKRxZ FFzVLX2JpqnbPVY4VOsglK1U8eF5FGH7kZzb3DBBwGCkP3dXYomii/3VITSCljzM +vDXv6FwQxkCRLD7BpneZN98w0+NMhX21K7FMkT1CZsi5pHNoxQSE5aletZIszKq H/X2LvFGxioGjBKr5FhXlFi88JrWfdsolzTURzJCe9DCHR37FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+SxCCU4Xx1/561w3DMZWJugeVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDdj YjI0MC02NjFlLTQ4OWQtOTE5OC01NmQyMGM2ZDEwNzYvOTg0ZDZhODAtZmNhYi0z ODNlLTk2YjUtZWQxNTU2YTA0MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDA3Y2IyNDAtNjYxZS00ODlkLTkx OTgtNTZkMjBjNmQxMDc2LzQwN2NiMjQwLTY2MWUtNDg5ZC05MTk4LTU2ZDIwYzZk MTA3Ni5jcmwwHwYDVR0jBBgwFoAUK9cIJI4OXV7iM9cYSC+0eXIbX9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDdjYjI0MC02NjFlLTQ4OWQtOTE5OC01NmQy MGM2ZDEwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADJpPgMI0Sv6IVBo025bP/okV7mCK3vt71+KxNWJ6edP/w+2WD2cKMJ KqDOrd8p+S6ke4CGhNal/16xa8DD2IjOdCy2xjaIvg31gk78IpKW6oeboUb1EEPv uI3NFiOFR8QmdNc+e7Mxu7OfAIJCwq4JT5hXTiOFEYWKSkHxbAw07H7uGWXWG/cU ggR749iYwbhZZuOzfpDXxr6IlGUdW01ugMr1zAZ9xU/cStBhdBsjocV7RL/Zgzo3 s4byRdnYrufoA563wI1uY5jyUxvY0BysHJSODXV/hyhtZDlAOZnp7Je/2sscoQLw IrOttTtVcsbVWWs1O8nDYK1jH1w+Ywc= -----END CERTIFICATE-----Generated at Sun Sep 20 13:12:36 2026 by rpki-client