$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa File: f894fd05-f37a-38af-a864-4381a924fc4f.roa (raw, json) Hash identifier: SQVh9/flibLPUsKDAR0Ljg7RKykq2hK5tELNVcP+CTo= Subject key identifier: 24:2A:F4:A4:BE:47:E9:F1:9E:FD:8A:F4:0E:FC:64:27:05:B7:7C:E8 Certificate issuer: /CN=407cb240-661e-489d-9198-56d20c6d1076 Certificate serial: 010D0C9F4328584AB7A69CCD4C5BCF6AE1A57580 Authority key identifier: 2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa Signing time: Sat 02 Aug 2025 00:29:24 +0000 ROA not before: Sat 02 Aug 2025 00:29:24 +0000 ROA not after: Fri 31 Oct 2025 00:29:24 +0000 asID: 53520 IP address blocks: 134.195.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:a6:9c:cd:4c:5b:cf:6a:e1:a5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407cb240-661e-489d-9198-56d20c6d1076 Validity Not Before: Aug 2 00:29:24 2025 GMT Not After : Oct 31 00:29:24 2025 GMT Subject: CN=33002bbd-7667-47f0-908d-0fbef564911a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f9:19:82:4d:7d:6b:f4:63:ae:cc:88:e5:ab: 82:3e:6c:39:2f:56:db:e9:06:35:94:08:3f:06:73: 4b:46:c7:58:90:76:8e:57:3c:a0:c1:90:90:09:7f: c5:4b:a1:4d:31:c9:da:57:31:01:10:e2:fe:ad:78: 86:47:26:ca:c8:41:2c:d6:5a:03:b4:34:0f:fc:63: 20:25:4d:9e:65:bf:af:fa:bc:a0:ad:bd:77:8d:ec: 8f:95:9a:c0:f4:48:23:09:4e:07:d2:f2:fe:70:b3: c0:e3:0d:56:16:47:50:a8:da:fd:ac:3c:3a:45:7d: 6d:7d:c3:00:2f:ad:30:35:8e:03:71:e7:79:34:10: 64:a7:c6:18:37:6f:a5:88:91:ba:b8:e2:1b:0c:27: 70:7b:82:5e:3c:8d:45:bf:1c:f6:92:84:41:5e:c3: eb:86:e8:fd:4c:6c:2d:60:af:d8:f1:77:28:0c:68: 2c:53:2f:d6:f8:8f:aa:a9:c3:f8:ce:a9:03:10:34: b9:97:42:fc:ff:36:fb:e6:ec:e7:50:7f:5a:f9:c3: e6:29:78:af:3f:61:4c:f9:ba:25:c9:a5:d6:79:8f: 64:d8:32:6c:60:e2:c2:f7:0b:3b:1e:8a:7b:e2:53: 1e:5b:c5:87:8a:2f:35:2a:a7:5c:e6:81:4c:23:80: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2A:F4:A4:BE:47:E9:F1:9E:FD:8A:F4:0E:FC:64:27:05:B7:7C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/f894fd05-f37a-38af-a864-4381a924fc4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl X509v3 Authority Key Identifier: keyid:2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer sbgp-ipAddrBlock: critical IPv4: 134.195.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ce:62:70:7f:80:25:57:28:65:e7:30:61:c7:c7:da:ba:be: 9d:1e:c6:d5:ac:91:59:d5:aa:ca:31:e4:7b:82:34:85:c1:dd: 8c:2c:fd:15:ab:2a:67:d5:b8:29:0a:6a:8b:f2:7b:cf:85:98: 07:67:d3:3f:86:d5:bc:90:fa:0c:95:06:f2:2d:ac:97:51:c1: 66:60:be:83:ce:a3:3f:3d:d1:35:af:80:be:29:74:91:c1:8d: bd:61:05:e0:7d:cf:66:ec:65:18:e1:ba:ab:eb:f7:6a:9c:f7: e9:c5:ad:67:98:3f:84:bc:bd:a4:b1:c2:f2:0b:86:d0:b0:4a: 86:93:97:3a:ed:e2:eb:45:22:7e:83:66:03:1f:02:41:01:00: 4e:6a:4b:c0:98:8b:a6:6a:30:20:49:4b:07:49:16:5e:e3:84: 4c:ca:b4:8e:2e:a6:41:27:82:4c:a3:d8:e2:48:f2:5c:f6:e4: 6a:17:c2:8d:6a:f0:98:9c:dc:d2:85:bb:a1:bd:00:45:8f:68: 60:58:a2:20:84:44:cf:21:da:91:a6:8c:ec:a8:68:fb:67:41: 8e:a6:6a:4a:34:27:a2:56:c2:00:23:c1:77:b8:ea:9a:a6:67: 13:34:49:b6:72:bd:6e:c0:8f:43:e3:f9:57:03:9d:e2:1f:7f: 7f:13:2c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3ppzNTFvPauGldYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA3Y2IyNDAtNjYxZS00ODlkLTkxOTgtNTZkMjBjNmQx MDc2MB4XDTI1MDgwMjAwMjkyNFoXDTI1MTAzMTAwMjkyNFowLzEtMCsGA1UEAxMk MzMwMDJiYmQtNzY2Ny00N2YwLTkwOGQtMGZiZWY1NjQ5MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vkZgk19a/RjrsyI5auCPmw5L1bb6QY1lAg/ BnNLRsdYkHaOVzygwZCQCX/FS6FNMcnaVzEBEOL+rXiGRybKyEEs1loDtDQP/GMg JU2eZb+v+rygrb13jeyPlZrA9EgjCU4H0vL+cLPA4w1WFkdQqNr9rDw6RX1tfcMA L60wNY4Dced5NBBkp8YYN2+liJG6uOIbDCdwe4JePI1Fvxz2koRBXsPrhuj9TGwt YK/Y8XcoDGgsUy/W+I+qqcP4zqkDEDS5l0L8/zb75uznUH9a+cPmKXivP2FM+bol yaXWeY9k2DJsYOLC9ws7Hop74lMeW8WHii81Kqdc5oFMI4CVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQq9KS+R+nxnv2K9A78ZCcFt3zoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDdj YjI0MC02NjFlLTQ4OWQtOTE5OC01NmQyMGM2ZDEwNzYvZjg5NGZkMDUtZjM3YS0z OGFmLWE4NjQtNDM4MWE5MjRmYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDA3Y2IyNDAtNjYxZS00ODlkLTkx OTgtNTZkMjBjNmQxMDc2LzQwN2NiMjQwLTY2MWUtNDg5ZC05MTk4LTU2ZDIwYzZk MTA3Ni5jcmwwHwYDVR0jBBgwFoAUK9cIJI4OXV7iM9cYSC+0eXIbX9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDdjYjI0MC02NjFlLTQ4OWQtOTE5OC01NmQy MGM2ZDEwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjOYnB/gCVXKGXnMGHHx9q6vp0extWskVnVqsox5HuCNIXB3Yws/RWr KmfVuCkKaovye8+FmAdn0z+G1byQ+gyVBvItrJdRwWZgvoPOoz890TWvgL4pdJHB jb1hBeB9z2bsZRjhuqvr92qc9+nFrWeYP4S8vaSxwvILhtCwSoaTlzrt4utFIn6D ZgMfAkEBAE5qS8CYi6ZqMCBJSwdJFl7jhEzKtI4upkEngkyj2OJI8lz25GoXwo1q 8Jic3NKFu6G9AEWPaGBYoiCERM8h2pGmjOyoaPtnQY6mako0J6JWwgAjwXe46pqm ZxM0SbZyvW7Aj0Pj+VcDneIff38TLJE= -----END CERTIFICATE-----Generated at Mon Aug 11 10:03:04 2025 by rpki-client