$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa File: d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa (raw, json) Hash identifier: BiNmLIDL2XJNTDlq6FXm1CAZ2ps1U6Arhn9EQUNRHsE= Subject key identifier: FC:62:58:0F:9C:5B:D2:1F:2A:A3:B8:7F:7B:E7:01:31:A5:04:10:69 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F4328584EC7A1D771F35CB6BF725426E0 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 134.202.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d7:71:f3:5c:b6:bf:72:54:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=d4d37136-dc65-456e-a241-8e5fe7ede41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:ee:26:8d:0c:10:6c:9d:77:0e:93:1c:1b: 72:91:44:71:5c:ba:f5:ea:7b:d0:37:72:f8:a2:33: 57:0f:54:43:61:0b:17:85:ec:23:86:a1:f8:bb:9e: be:db:9b:ec:ad:c0:32:16:b0:8a:a7:b1:19:f5:fc: ca:97:19:66:d9:1c:1b:33:02:e9:0a:1c:a1:53:41: ab:60:93:ac:1b:88:1b:8e:97:bd:35:33:7f:54:88: e6:d8:f6:c6:d4:0d:53:24:70:84:c0:52:a7:2a:a5: 92:a6:20:39:7a:16:e5:67:db:c0:e1:53:a0:ff:ae: a0:70:5c:10:70:e7:62:77:d5:f7:52:26:01:6d:8a: d9:a1:ca:4e:79:28:ae:6a:1e:f9:c5:5f:6e:79:18: 71:78:29:26:47:c8:3c:5b:e2:0d:9b:9c:95:46:27: 59:bf:10:c3:19:77:ea:1d:87:9a:e0:80:3d:43:d8: 27:e0:db:67:53:11:3e:a4:72:50:e8:16:42:01:b6: e8:82:88:6e:df:11:c0:f5:33:c8:57:28:6f:71:fc: de:ff:17:85:12:72:53:0d:5e:aa:23:84:f2:f1:93: 44:0d:82:b8:0f:ad:b9:ee:21:7d:16:87:42:6f:02: 4e:8f:aa:86:62:8e:05:b3:c1:dd:25:6b:34:9e:c4: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:62:58:0F:9C:5B:D2:1F:2A:A3:B8:7F:7B:E7:01:31:A5:04:10:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:91:e8:91:8b:a7:99:ef:4c:2c:68:b7:06:cd:34:08:2e:05: e7:2c:a7:42:c4:e8:66:3e:6b:09:86:74:09:1a:91:5f:db:d1: 23:2d:ab:e1:18:d5:39:0a:ae:c0:62:5b:06:fa:08:1d:09:58: d3:2a:bf:12:61:84:0c:86:ff:e6:8f:40:25:e9:e9:7b:5e:de: d3:d2:43:6b:9e:c4:d4:38:62:14:fc:11:ca:7f:ea:23:14:4d: 55:9b:4d:68:1c:81:e9:6f:04:e3:1e:5c:68:09:d1:d1:7e:a0: 66:9b:2a:8e:88:9d:50:93:32:20:3e:a0:e7:d5:c1:0e:fe:80: 71:54:54:b6:0c:63:a3:0b:98:60:f0:ce:01:3d:61:9f:19:d1: 9f:00:84:2f:e0:58:c1:3f:4d:22:4d:58:af:2d:4c:4c:ac:72: 92:6f:c3:78:cb:18:4d:47:8f:a2:0c:49:32:1e:f1:d7:34:0e: 28:41:b6:60:12:ac:a7:e8:ec:50:fc:9f:ca:2d:4d:b5:98:c9: 27:c1:48:fb:a9:15:bd:f7:59:ae:ae:ab:0c:82:bb:2e:7a:a8: c4:4c:88:8c:98:8d:1c:68:2a:12:55:84:c4:f5:42:4b:ad:5e: 34:49:d9:d0:ce:d2:5f:2a:49:40:bb:89:d7:ac:db:aa:a8:94: f4:ac:81:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hoddx81y2v3JUJuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDRkMzcxMzYtZGM2NS00NTZlLWEyNDEtOGU1ZmU3ZWRlNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPjuJo0MEGyddw6THBtykURxXLr16nvQN3L4 ojNXD1RDYQsXhewjhqH4u56+25vsrcAyFrCKp7EZ9fzKlxlm2RwbMwLpChyhU0Gr YJOsG4gbjpe9NTN/VIjm2PbG1A1TJHCEwFKnKqWSpiA5ehblZ9vA4VOg/66gcFwQ cOdid9X3UiYBbYrZocpOeSiuah75xV9ueRhxeCkmR8g8W+INm5yVRidZvxDDGXfq HYea4IA9Q9gn4NtnUxE+pHJQ6BZCAbbogohu3xHA9TPIVyhvcfze/xeFEnJTDV6q I4Ty8ZNEDYK4D6257iF9FodCbwJOj6qGYo4Fs8HdJWs0nsQYRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxiWA+cW9IfKqO4f3vnATGlBBBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZDg5NGUzMjctZGQxNy0z MmU4LWE1Y2EtMGRkMGM0NzY1YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWR6JGLp5nvTCxotwbNNAguBecsp0LE6GY+awmGdAkakV/b0SMtq+EY 1TkKrsBiWwb6CB0JWNMqvxJhhAyG/+aPQCXp6Xte3tPSQ2uexNQ4YhT8Ecp/6iMU TVWbTWgcgelvBOMeXGgJ0dF+oGabKo6InVCTMiA+oOfVwQ7+gHFUVLYMY6MLmGDw zgE9YZ8Z0Z8AhC/gWME/TSJNWK8tTEyscpJvw3jLGE1Hj6IMSTIe8dc0DihBtmAS rKfo7FD8n8otTbWYySfBSPupFb33Wa6uqwyCuy56qMRMiIyYjRxoKhJVhMT1Qkut XjRJ2dDO0l8qSUC7ides26qolPSsgQw= -----END CERTIFICATE-----Generated at Sun Oct 4 21:27:26 2026 by rpki-client