$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa File: 34408d9c-ba17-3a98-a30c-784c9718904b.roa (raw, json) Hash identifier: C217bcQh2aARnNh448WsXzWLl2Y9hrild/3oQuB6/yQ= Subject key identifier: DF:55:6E:BB:F7:51:C0:BA:A5:D9:27:24:14:DD:5E:C5:99:C5:E7:DE Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7 Certificate serial: 010D0C9F4328584F093CD9771D96BAEBBBF91480 Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 3257 IP address blocks: 134.195.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d9:77:1d:96:ba:eb:bb:f9:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f02253c9-b5f8-4d57-aeab-f586d7070747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:88:64:74:f7:1d:0f:36:b3:9b:32:c6:5f: da:03:7b:97:f2:4a:5b:f8:8b:ee:da:8d:5a:e7:86: 57:77:78:2b:4f:6d:7b:e1:22:46:de:31:8f:d3:cb: 56:60:36:72:97:4a:83:cb:f4:55:f5:62:7c:09:99: 1f:97:09:ad:88:65:36:09:9a:bd:a1:2b:0d:3f:13: b2:e4:ae:27:38:3c:b4:2f:6e:4e:a9:5f:5d:53:45: b1:58:7b:ee:57:aa:f7:33:c2:ec:4d:82:ee:14:27: a6:66:fb:71:6c:6c:0a:47:94:43:68:c1:14:5b:36: 66:06:cc:7c:4f:05:64:ed:07:7a:c8:77:aa:e0:d8: 82:1a:ee:27:0a:97:69:79:03:07:09:32:4d:c2:c7: 55:40:30:b3:9a:d3:ed:4e:88:79:b1:26:17:0a:e9: 05:9b:b0:8e:24:1d:93:83:d0:35:df:dd:5f:9a:8e: 2b:c6:33:cb:46:2c:55:84:55:2f:26:f0:3e:b4:e5: 16:2f:6c:6c:ab:66:d0:d5:66:0b:15:5b:69:d8:a8: f6:70:13:1d:71:3d:81:6d:85:61:77:fb:37:64:4e: fd:06:a6:1d:3b:65:ed:4a:a8:0d:cc:5a:83:0f:72: 8c:47:8c:52:6f:77:53:ad:04:91:56:26:d7:6f:da: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:55:6E:BB:F7:51:C0:BA:A5:D9:27:24:14:DD:5E:C5:99:C5:E7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/34408d9c-ba17-3a98-a30c-784c9718904b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl X509v3 Authority Key Identifier: keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer sbgp-ipAddrBlock: critical IPv4: 134.195.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:93:de:ec:db:76:31:df:e1:1a:10:68:56:c2:39:b3:8b:4a: e2:e3:4b:13:a0:94:fc:0f:6f:18:b3:85:87:ed:26:35:1d:7e: 1f:2d:0c:46:18:d5:b7:6e:45:06:7a:00:9b:2c:bb:67:bd:89: 16:12:07:5b:6f:de:ca:8e:22:52:cf:c4:fe:fc:98:19:a1:28: dd:97:07:62:aa:77:43:ac:5e:80:fd:59:6e:02:9f:15:c4:77: a9:4e:03:f1:17:56:b2:b7:e4:dd:d6:5f:fd:3c:7e:e8:da:ac: c7:32:00:3e:b8:91:29:d4:ad:95:84:cb:1e:9a:d6:f5:e8:e6: e9:fd:87:c2:b6:5c:00:4a:6f:f1:b8:bf:c4:96:a0:18:4a:28: ec:8e:e0:f3:0e:77:ae:e9:67:e0:c5:1b:41:35:86:ea:06:ac: 83:f0:88:04:79:97:65:6b:c1:de:9a:fa:29:b1:f5:da:8e:bc: 79:7c:12:06:28:0b:75:2c:2b:62:49:28:e1:81:42:ff:a6:16: e2:37:d6:af:0c:6a:af:0d:e7:9c:1e:be:5f:96:94:54:0b:dc: 43:ff:e8:1f:34:ff:27:8f:44:00:08:e8:da:5f:5c:55:5f:1a: f7:15:04:30:43:6a:f9:9e:4c:da:a1:a7:f3:e8:09:61:4b:e9: a0:22:a9:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNl3HZa667v5FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQzMDMxYmItYjQ4Yi00ZWZiLWFlMjYtNDAzNTY4ODE5 OWY3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjAyMjUzYzktYjVmOC00ZDU3LWFlYWItZjU4NmQ3MDcwNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuCIZHT3HQ82s5syxl/aA3uX8kpb+Ivu2o1a 54ZXd3grT2174SJG3jGP08tWYDZyl0qDy/RV9WJ8CZkflwmtiGU2CZq9oSsNPxOy 5K4nODy0L25OqV9dU0WxWHvuV6r3M8LsTYLuFCemZvtxbGwKR5RDaMEUWzZmBsx8 TwVk7Qd6yHeq4NiCGu4nCpdpeQMHCTJNwsdVQDCzmtPtToh5sSYXCukFm7COJB2T g9A1391fmo4rxjPLRixVhFUvJvA+tOUWL2xsq2bQ1WYLFVtp2Kj2cBMdcT2BbYVh d/s3ZE79BqYdO2XtSqgNzFqDD3KMR4xSb3dTrQSRVibXb9pJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Vbrv3UcC6pdknJBTdXsWZxefeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMw MzFiYi1iNDhiLTRlZmItYWUyNi00MDM1Njg4MTk5ZjcvMzQ0MDhkOWMtYmExNy0z YTk4LWEzMGMtNzg0Yzk3MTg5MDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTQzMDMxYmItYjQ4Yi00ZWZiLWFl MjYtNDAzNTY4ODE5OWY3LzU0MzAzMWJiLWI0OGItNGVmYi1hZTI2LTQwMzU2ODgx OTlmNy5jcmwwHwYDVR0jBBgwFoAULS998jX/Dvkwd4cgQfSA0j4I2OowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NDMwMzFiYi1iNDhiLTRlZmItYWUyNi00MDM1 Njg4MTk5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2T3uzbdjHf4RoQaFbCObOLSuLjSxOglPwPbxizhYftJjUdfh8tDEYY 1bduRQZ6AJssu2e9iRYSB1tv3sqOIlLPxP78mBmhKN2XB2Kqd0OsXoD9WW4CnxXE d6lOA/EXVrK35N3WX/08fujarMcyAD64kSnUrZWEyx6a1vXo5un9h8K2XABKb/G4 v8SWoBhKKOyO4PMOd67pZ+DFG0E1huoGrIPwiAR5l2Vrwd6a+imx9dqOvHl8EgYo C3UsK2JJKOGBQv+mFuI31q8Maq8N55wevl+WlFQL3EP/6B80/yePRAAI6NpfXFVf GvcVBDBDavmeTNqhp/PoCWFL6aAiqWg= -----END CERTIFICATE-----Generated at Mon Sep 28 11:10:45 2026 by rpki-client