$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/fd9032ca-d665-3c37-8230-07acded087fa.roa File: fd9032ca-d665-3c37-8230-07acded087fa.roa (raw, json) Hash identifier: R9kDIJwRNiUQ1lWaIHIgDnQPHuQO1TuxIIikLN3mSPQ= Subject key identifier: 4F:7E:91:0B:80:1A:EA:41:02:E9:5F:AE:14:17:C5:0D:4A:E0:AC:D5 Certificate issuer: /CN=f70f0f89-991a-443d-8967-db60c9e20dcf Certificate serial: 010D0C9F4328584F119CDFC73C6C129C80612C70 Authority key identifier: FA:37:86:18:99:0E:B4:ED:05:F6:C0:10:36:26:7D:A2:40:3D:0E:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/fd9032ca-d665-3c37-8230-07acded087fa.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 25841 IP address blocks: 134.195.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:df:c7:3c:6c:12:9c:80:61:2c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f70f0f89-991a-443d-8967-db60c9e20dcf Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c2d9199b-3f7c-4423-a2df-476be84b25bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:89:7b:5f:5f:f4:38:a0:90:1e:d3:65:9b:b8: c6:62:24:65:9f:17:8d:1c:6a:3f:c5:6a:5a:ea:fd: be:82:52:3a:3c:19:7e:22:2e:07:6a:08:b3:c6:f4: 8f:fb:77:c6:b9:f3:e7:1e:82:4a:7c:74:57:ec:f0: 82:9b:1c:87:f3:14:a5:1e:15:95:17:b3:36:2e:15: 2b:53:e1:77:3e:f3:e8:43:5a:88:74:74:6b:cb:44: 85:e4:4d:18:dd:58:8d:af:5b:69:6a:e2:1d:76:39: be:93:f7:45:8c:f4:b5:9a:c9:c5:0a:bb:d9:44:e3: 89:e3:21:2c:93:2a:7d:10:ab:76:2d:62:e5:8b:94: ab:28:e5:f9:01:34:b4:10:28:9f:78:1a:a4:ac:14: 4e:56:8a:8e:42:32:71:07:9a:d7:e4:a0:fc:29:a5: 82:aa:dd:90:c7:98:b6:99:7e:8e:a2:a3:1d:0a:d0: 71:d7:7b:53:54:88:92:69:c6:a0:ad:78:a8:8e:8b: 8b:16:57:99:ee:fe:e4:a9:bc:d1:dd:56:82:5f:f8: 37:5b:7c:5b:48:a8:61:5b:e4:12:b0:bd:73:7b:62: 5d:ce:20:0e:bf:0d:b5:e0:25:e4:f6:9c:79:1f:88: 64:b7:c9:94:0e:a9:a4:a1:c9:bc:a0:31:8a:53:bb: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7E:91:0B:80:1A:EA:41:02:E9:5F:AE:14:17:C5:0D:4A:E0:AC:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/fd9032ca-d665-3c37-8230-07acded087fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.crl X509v3 Authority Key Identifier: keyid:FA:37:86:18:99:0E:B4:ED:05:F6:C0:10:36:26:7D:A2:40:3D:0E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer sbgp-ipAddrBlock: critical IPv4: 134.195.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:65:36:96:60:94:11:99:ff:cf:ad:6d:2d:ed:92:02:bb:18: a2:93:63:2b:1a:3b:8f:a6:22:56:3f:39:0e:b4:d9:c9:b3:4f: 18:88:9e:67:48:da:05:17:d6:ee:47:62:e3:c3:4a:60:3f:f8: c2:98:68:ab:f8:a0:d4:ac:e7:c1:6a:03:1f:67:fb:46:28:07: fb:82:d1:9d:25:53:c1:96:0b:2c:3b:16:93:44:39:6c:fc:3f: 45:e8:55:17:7f:2e:54:fb:9c:fb:62:df:30:00:51:bb:4d:03: 7e:85:5b:27:e1:28:48:09:05:4b:b6:c1:13:0f:d2:1a:da:9f: de:09:77:40:b4:3b:c4:64:60:3f:0d:2f:bd:9e:17:f9:05:34: 24:57:78:c2:25:d5:36:7c:d6:13:86:7c:35:a1:99:33:cc:12: 41:bc:ee:45:f6:e2:8d:81:b6:a4:3c:87:79:ff:dd:8c:db:f7: 64:1a:9b:87:fc:46:8f:52:a8:e3:8f:18:b9:b4:fa:11:96:ea: 70:83:58:2e:4c:78:90:f4:57:ed:bc:cb:48:c6:d9:04:4f:10: 7f:a2:f7:d2:5d:66:ab:2c:99:76:31:12:e3:43:89:a1:2b:cf: 59:81:26:25:fb:b4:2c:4d:91:c0:0e:89:e1:a1:e7:2d:27:a1: f8:e1:0d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN/HPGwSnIBhLHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcwZjBmODktOTkxYS00NDNkLTg5NjctZGI2MGM5ZTIw ZGNmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzJkOTE5OWItM2Y3Yy00NDIzLWEyZGYtNDc2YmU4NGIyNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIl7X1/0OKCQHtNlm7jGYiRlnxeNHGo/xWpa 6v2+glI6PBl+Ii4HagizxvSP+3fGufPnHoJKfHRX7PCCmxyH8xSlHhWVF7M2LhUr U+F3PvPoQ1qIdHRry0SF5E0Y3ViNr1tpauIddjm+k/dFjPS1msnFCrvZROOJ4yEs kyp9EKt2LWLli5SrKOX5ATS0ECifeBqkrBROVoqOQjJxB5rX5KD8KaWCqt2Qx5i2 mX6OoqMdCtBx13tTVIiSacagrXiojouLFleZ7v7kqbzR3VaCX/g3W3xbSKhhW+QS sL1ze2JdziAOvw214CXk9px5H4hkt8mUDqmkocm8oDGKU7tUOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9+kQuAGupBAulfrhQXxQ1K4KzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNzBm MGY4OS05OTFhLTQ0M2QtODk2Ny1kYjYwYzllMjBkY2YvZmQ5MDMyY2EtZDY2NS0z YzM3LTgyMzAtMDdhY2RlZDA4N2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjcwZjBmODktOTkxYS00NDNkLTg5 NjctZGI2MGM5ZTIwZGNmL2Y3MGYwZjg5LTk5MWEtNDQzZC04OTY3LWRiNjBjOWUy MGRjZi5jcmwwHwYDVR0jBBgwFoAU+jeGGJkOtO0F9sAQNiZ9okA9DpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNzBmMGY4OS05OTFhLTQ0M2QtODk2Ny1kYjYw YzllMjBkY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsNHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRlNpZglBGZ/8+tbS3tkgK7GKKTYysaO4+mIlY/OQ602cmzTxiInmdI 2gUX1u5HYuPDSmA/+MKYaKv4oNSs58FqAx9n+0YoB/uC0Z0lU8GWCyw7FpNEOWz8 P0XoVRd/LlT7nPti3zAAUbtNA36FWyfhKEgJBUu2wRMP0hran94Jd0C0O8RkYD8N L72eF/kFNCRXeMIl1TZ81hOGfDWhmTPMEkG87kX24o2BtqQ8h3n/3Yzb92Qam4f8 Ro9SqOOPGLm0+hGW6nCDWC5MeJD0V+28y0jG2QRPEH+i99JdZqssmXYxEuNDiaEr z1mBJiX7tCxNkcAOieGh5y0nofjhDXo= -----END CERTIFICATE-----Generated at Fri Sep 25 13:46:29 2026 by rpki-client