$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa File: 5ba90132-30fd-3e7f-a67e-05193a6cd348.roa (raw, json) Hash identifier: hax8jpDOofrbQuACnGWnLzy57QS961uuhaYmk6fUdKo= Subject key identifier: 9B:84:AA:BF:FC:B6:7B:06:8A:12:29:C8:B1:68:18:6C:C5:F0:4E:FF Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Certificate serial: 010D0C9F4328584AE461155F2BD6813249AF3BB0 Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 7922 IP address blocks: 134.195.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:15:5f:2b:d6:81:32:49:af:3b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ae52c008-cf8b-472a-893c-d5226de435b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:7e:a5:1f:89:4c:dc:e2:3c:50:d9:f0:2d: e7:86:61:da:cf:a3:cd:74:8a:f2:4a:94:ce:79:f7: dd:64:92:2d:ec:6e:1b:38:ce:3c:e2:37:63:2a:50: 87:0b:8e:5b:b4:b1:39:72:5e:29:cf:94:82:30:f1: 85:38:cc:f0:01:b5:44:34:15:9a:fb:5d:b7:f5:ef: 08:8f:2d:f8:65:aa:f6:21:39:32:ec:0b:c5:cf:d4: 09:40:c2:65:37:bf:a4:fa:76:ee:9c:b3:47:1b:ff: d5:12:a1:26:50:77:01:77:ce:9a:34:23:c6:09:aa: 29:59:8e:43:9d:3e:fc:a0:94:2a:ab:cb:72:b7:32: cd:7a:f7:33:63:59:7a:be:ad:08:d6:f8:0e:39:d0: 40:bd:f8:d1:6e:7a:c4:f9:3c:fd:e3:c4:cf:a8:e4: e8:a3:c6:09:d7:e4:eb:54:d1:12:a3:69:a6:4f:d9: 7e:23:49:b4:03:c3:80:fc:76:33:0c:7e:ff:e5:32: f1:e5:3f:34:01:a0:dc:3a:0d:10:24:e3:6c:93:c0: 6a:c6:4a:65:b9:5b:d3:2c:88:f3:d1:3c:18:6e:27: f7:a6:70:86:de:d8:4c:1c:ec:98:de:73:1a:4f:23: a8:8e:61:7c:97:5a:07:24:96:d6:69:f8:80:ca:1d: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:84:AA:BF:FC:B6:7B:06:8A:12:29:C8:B1:68:18:6C:C5:F0:4E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl X509v3 Authority Key Identifier: keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer sbgp-ipAddrBlock: critical IPv4: 134.195.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8e:2d:ea:db:7c:a5:df:5c:7b:58:bf:56:7e:f2:e4:b7:3a: 89:6c:89:76:cc:f8:19:40:e9:08:0c:db:f9:12:87:5b:4f:da: 3f:b7:7b:32:30:20:1c:23:c6:5b:55:b6:fc:eb:58:f1:c4:f7: a0:44:65:ff:bb:9b:9e:8c:04:48:b6:a4:67:ca:00:3a:2e:06: b6:2f:20:80:77:c5:dc:98:51:7d:c8:73:95:9d:03:a2:33:57: 21:8b:5b:62:84:5f:db:a0:92:36:de:29:50:43:d4:94:9e:ea: 08:1d:14:e6:59:ae:c3:d1:98:63:9b:c0:c1:b6:46:ee:23:cf: 23:b2:89:8a:e3:3d:10:84:c3:e1:03:36:49:d5:a4:24:80:aa: b6:14:14:4b:a9:b8:40:18:c3:35:07:ba:42:ad:2d:88:f5:ba: cb:ff:00:29:0f:96:ec:59:6b:1c:cf:00:71:34:f2:03:c8:83: 16:6e:27:b0:d1:57:fa:23:62:ce:dc:24:0c:ba:da:8d:eb:7d: ae:9b:23:90:be:57:ac:42:0b:05:6a:2a:b3:66:bb:bf:97:d7: a3:03:64:13:89:3b:7b:00:c5:0d:a9:3d:99:5d:ca:f3:0c:91: 96:f8:41:23:7b:db:7d:46:ac:93:85:8b:63:70:58:b0:1c:2a: 10:73:7a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRVfK9aBMkmvO7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FiYTU1YWUtODMzYS00NDg3LThiZTEtOWI5OTdhZGJi ZWM5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWU1MmMwMDgtY2Y4Yi00NzJhLTg5M2MtZDUyMjZkZTQzNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqt+pR+JTNziPFDZ8C3nhmHaz6PNdIrySpTO effdZJIt7G4bOM484jdjKlCHC45btLE5cl4pz5SCMPGFOMzwAbVENBWa+1239e8I jy34Zar2ITky7AvFz9QJQMJlN7+k+nbunLNHG//VEqEmUHcBd86aNCPGCaopWY5D nT78oJQqq8tytzLNevczY1l6vq0I1vgOOdBAvfjRbnrE+Tz948TPqOToo8YJ1+Tr VNESo2mmT9l+I0m0A8OA/HYzDH7/5TLx5T80AaDcOg0QJONsk8BqxkpluVvTLIjz 0TwYbif3pnCG3thMHOyY3nMaTyOojmF8l1oHJJbWafiAyh0OmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuEqr/8tnsGihIpyLFoGGzF8E7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWJh NTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5N2FkYmJlYzkvNWJhOTAxMzItMzBmZC0z ZTdmLWE2N2UtMDUxOTNhNmNkMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FiYTU1YWUtODMzYS00NDg3LThi ZTEtOWI5OTdhZGJiZWM5LzdhYmE1NWFlLTgzM2EtNDQ4Ny04YmUxLTliOTk3YWRi YmVjOS5jcmwwHwYDVR0jBBgwFoAUm7mq9xQHJPlj+rsVMn+tqskRLrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWJhNTVhZS04MzNhLTQ0ODctOGJlMS05Yjk5 N2FkYmJlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGOLerbfKXfXHtYv1Z+8uS3OolsiXbM+BlA6QgM2/kSh1tP2j+3ezIw IBwjxltVtvzrWPHE96BEZf+7m56MBEi2pGfKADouBrYvIIB3xdyYUX3Ic5WdA6Iz VyGLW2KEX9ugkjbeKVBD1JSe6ggdFOZZrsPRmGObwMG2Ru4jzyOyiYrjPRCEw+ED NknVpCSAqrYUFEupuEAYwzUHukKtLYj1usv/ACkPluxZaxzPAHE08gPIgxZuJ7DR V/ojYs7cJAy62o3rfa6bI5C+V6xCCwVqKrNmu7+X16MDZBOJO3sAxQ2pPZldyvMM kZb4QSN7231GrJOFi2NwWLAcKhBzehM= -----END CERTIFICATE-----Generated at Sun Aug 24 06:39:38 2025 by rpki-client