$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/34596f4d-1f0b-3eb6-94dd-9c74108e915b.roa File: 34596f4d-1f0b-3eb6-94dd-9c74108e915b.roa (raw, json) Hash identifier: Jx5YIzhgrrWsT+OUJnVlF66qGG8QhP5LjYldf1aX0OM= Subject key identifier: FE:C6:88:49:68:90:54:26:57:8C:37:C9:E4:B3:98:D7:E3:B5:D1:EF Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F4328584D20AF4CE83E2363CC2A95F7C0 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/34596f4d-1f0b-3eb6-94dd-9c74108e915b.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 146943 IP address blocks: 134.195.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4c:e8:3e:23:63:cc:2a:95:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=6841da92-79ba-4fd3-b864-c2569b466fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:0f:31:e1:38:f7:18:f6:d4:2a:f2:17:53: c4:d0:a9:a2:98:a2:df:a1:fb:6a:75:7b:85:7f:64: 61:fa:d9:2a:7a:2a:0e:e3:b5:d6:e5:b6:43:78:ea: c2:30:ec:88:f8:5f:e0:cb:d2:30:5b:d0:a7:f9:69: 20:2a:e4:f5:14:dd:17:94:4c:0c:5a:d4:67:4b:bf: 8b:1e:eb:41:95:c2:4e:e8:4e:57:5d:4d:12:76:73: c5:34:42:cb:4c:fc:10:dc:7e:59:c1:ff:be:ca:c1: d5:c8:e0:d0:2f:74:5f:ff:61:33:84:cd:58:44:91: 5d:b5:3e:d5:e0:a2:93:94:dd:c4:4d:1e:bb:66:cb: e0:dc:59:bb:79:b5:96:1c:4f:ef:61:dd:11:cd:d4: d2:ed:bc:3e:55:91:82:9b:39:7c:74:c0:fb:44:c1: 88:18:de:08:42:f1:70:90:bf:69:6b:cc:a5:4f:81: a5:74:7e:c5:9d:d4:fc:f6:69:63:40:74:66:ba:cc: 33:cd:0b:9f:8d:f5:0b:c2:80:aa:09:cf:b1:56:f7: c6:e5:7c:65:ca:ab:ca:14:74:a7:c8:29:17:75:d0: 5f:06:3e:f9:31:85:5c:6b:ae:80:62:f4:b8:1d:11: b1:0f:ea:68:36:4a:cd:6b:50:c9:6e:2b:e3:d5:6e: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:88:49:68:90:54:26:57:8C:37:C9:E4:B3:98:D7:E3:B5:D1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/34596f4d-1f0b-3eb6-94dd-9c74108e915b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 134.195.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2f:73:88:9f:33:d4:ce:a8:a4:da:15:c9:f5:da:45:98:43: ce:d1:d6:f8:dc:94:90:87:87:4d:a0:84:03:ec:65:3f:c2:2a: 42:b8:79:be:68:b0:15:37:90:97:91:3a:ec:97:c1:a7:de:d4: 0a:bf:99:24:a4:ba:1e:b4:5a:4f:d8:ac:0e:d8:4b:14:32:fe: aa:a1:fe:c7:8e:da:8b:4d:21:a0:f9:30:33:c6:4a:af:24:76: 92:96:d2:b2:ce:be:a0:28:02:0b:f9:86:7a:ae:34:8d:4b:05: 08:7c:ee:1b:5a:49:9f:d5:eb:da:94:36:a5:a9:9c:b4:6f:d4: 3e:b0:7b:02:ec:0e:48:e5:4f:80:37:3e:6b:9a:d0:c8:43:59: bd:e9:39:9f:12:bd:2c:18:eb:ea:39:de:17:f1:e3:c4:a4:37: d4:08:83:2e:9c:21:c1:f2:42:59:8a:40:cb:67:4f:1d:f1:3b: 71:0a:40:c9:37:d1:eb:32:be:88:23:5d:73:b0:34:5f:64:19: 25:8b:a5:6e:c3:6d:50:7b:1f:6e:1d:32:6e:55:12:2f:62:61: 11:2e:9b:ac:93:48:e4:1d:0f:6c:84:a0:df:e3:64:18:fb:81: 86:0a:38:5d:d3:a0:80:0d:4a:a5:1c:1c:39:d4:3d:c6:6d:2f: 4f:43:59:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0zoPiNjzCqV98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk Njg0MWRhOTItNzliYS00ZmQzLWI4NjQtYzI1NjliNDY2ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNYPMeE49xj21CryF1PE0KmimKLfoftqdXuF f2Rh+tkqeioO47XW5bZDeOrCMOyI+F/gy9IwW9Cn+WkgKuT1FN0XlEwMWtRnS7+L HutBlcJO6E5XXU0SdnPFNELLTPwQ3H5Zwf++ysHVyODQL3Rf/2EzhM1YRJFdtT7V 4KKTlN3ETR67Zsvg3Fm7ebWWHE/vYd0RzdTS7bw+VZGCmzl8dMD7RMGIGN4IQvFw kL9pa8ylT4GldH7FndT89mljQHRmuswzzQufjfULwoCqCc+xVvfG5XxlyqvKFHSn yCkXddBfBj75MYVca66AYvS4HRGxD+poNkrNa1DJbivj1W4OXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7GiElokFQmV4w3yeSzmNfjtdHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvMzQ1OTZmNGQtMWYwYi0z ZWI2LTk0ZGQtOWM3NDEwOGU5MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAvc4ifM9TOqKTaFcn12kWYQ87R1vjclJCHh02ghAPsZT/CKkK4eb5o sBU3kJeROuyXwafe1Aq/mSSkuh60Wk/YrA7YSxQy/qqh/seO2otNIaD5MDPGSq8k dpKW0rLOvqAoAgv5hnquNI1LBQh87htaSZ/V69qUNqWpnLRv1D6wewLsDkjlT4A3 Pmua0MhDWb3pOZ8SvSwY6+o53hfx48SkN9QIgy6cIcHyQlmKQMtnTx3xO3EKQMk3 0esyvogjXXOwNF9kGSWLpW7DbVB7H24dMm5VEi9iYREum6yTSOQdD2yEoN/jZBj7 gYYKOF3ToIANSqUcHDnUPcZtL09DWQc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:37:20 2026 by rpki-client