$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/984d6a80-fcab-383e-96b5-ed1556a0430d.roa File: 984d6a80-fcab-383e-96b5-ed1556a0430d.roa (raw, json) Hash identifier: PqK9ii9jiQ9ScjIav4cV0wM0DwobgQcDsQESoezxT04= Subject key identifier: 57:5A:A2:DE:E5:71:A7:6B:FE:E9:E4:98:DC:B1:A9:10:95:F9:98:61 Certificate issuer: /CN=407cb240-661e-489d-9198-56d20c6d1076 Certificate serial: 010D0C9F4328584E69A4B922A0F2D637CDC94640 Authority key identifier: 2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/984d6a80-fcab-383e-96b5-ed1556a0430d.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 53520 IP address blocks: 134.49.252.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b9:22:a0:f2:d6:37:cd:c9:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407cb240-661e-489d-9198-56d20c6d1076 Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=287c04a5-2620-4b16-bbab-3ced6b1d3606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:33:e0:dc:4d:0a:fe:4c:e4:d9:a4:ae:3f: dd:4e:1b:56:89:54:14:87:d4:b3:c8:f2:01:52:13: 27:7f:d5:c8:9a:94:6b:5e:90:dc:97:11:4b:f1:96: 4d:9b:b8:dd:70:8a:41:e6:19:b9:91:0e:70:00:81: 95:1d:77:7b:da:05:5b:1c:10:03:88:80:dd:7d:4f: 52:d7:31:c8:2d:5e:b0:cd:07:f9:bb:9c:0a:ca:ad: f0:13:8a:25:27:ff:0e:39:8a:4a:ea:ec:e8:e0:42: 22:f9:96:a6:01:83:17:23:d4:51:09:b6:2a:9a:a7: 14:2c:50:71:f5:90:1a:4d:64:1b:b7:4c:f7:25:52: 0a:f5:07:32:53:eb:84:64:f1:b4:9b:66:f4:60:22: ac:fd:1c:20:97:03:2d:5d:68:87:57:9f:b2:2f:ec: a7:d4:be:ac:e5:99:a9:3f:8e:6d:9e:77:36:c6:f9: 02:36:29:77:1c:c0:00:c1:a0:d0:d2:5c:2f:6f:22: 79:7f:ee:fc:45:68:43:ca:2f:4d:f3:da:0d:1d:0d: e0:5d:0c:c2:b6:9f:29:1a:ef:52:89:90:34:20:98: 4f:aa:4d:33:4d:97:65:41:8d:51:d9:5d:34:37:69: 9d:19:61:37:a6:4b:9d:3c:bc:79:3b:e5:5f:5d:a2: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:A2:DE:E5:71:A7:6B:FE:E9:E4:98:DC:B1:A9:10:95:F9:98:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/984d6a80-fcab-383e-96b5-ed1556a0430d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl X509v3 Authority Key Identifier: keyid:2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer sbgp-ipAddrBlock: critical IPv4: 134.49.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f2:fe:58:65:a6:4d:ec:58:6f:9d:d1:39:c0:e8:1f:c8:0c: 63:4e:55:e0:e3:97:04:69:b1:e6:56:b9:e1:d7:6d:d6:be:e3: cd:76:5f:cd:1d:18:f6:b6:b2:66:66:9f:d9:e3:91:f6:80:14: eb:c9:d9:0e:aa:66:65:e6:4e:d1:c7:2d:0d:97:59:ec:6d:10: 12:1c:cc:32:dc:ee:d5:3c:57:23:2c:94:24:ba:94:9a:16:b3: ed:f8:15:ec:1f:b1:b9:08:e4:ce:a9:5c:e7:53:57:77:9c:d9: 29:13:40:98:94:fc:b9:86:73:24:ff:79:f2:e8:31:ec:2a:48: 66:dc:3b:7d:83:c9:f7:30:d1:06:93:c1:cc:df:e7:0c:07:b2: af:50:06:7f:1c:35:20:db:e6:6d:48:08:2b:2c:bb:24:ac:54: 88:97:91:0b:70:86:bd:47:67:94:13:e9:b9:1b:cb:c4:5b:a1: 0d:ae:4b:14:55:d3:14:45:77:3c:a0:dc:9f:5e:83:bf:08:5d: 98:32:04:2f:f2:cb:be:18:38:b6:a8:9f:82:7b:da:d5:3d:0b: f4:22:fd:1f:3c:df:30:4c:1e:ac:4c:85:8a:37:0a:58:76:b6: ca:df:7a:68:0a:c0:48:b4:b7:fd:3c:57:f5:e8:eb:6c:ec:ec: 31:89:82:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLkioPLWN83JRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA3Y2IyNDAtNjYxZS00ODlkLTkxOTgtNTZkMjBjNmQx MDc2MB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk Mjg3YzA0YTUtMjYyMC00YjE2LWJiYWItM2NlZDZiMWQzNjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT4z4NxNCv5M5Nmkrj/dThtWiVQUh9SzyPIB UhMnf9XImpRrXpDclxFL8ZZNm7jdcIpB5hm5kQ5wAIGVHXd72gVbHBADiIDdfU9S 1zHILV6wzQf5u5wKyq3wE4olJ/8OOYpK6uzo4EIi+ZamAYMXI9RRCbYqmqcULFBx 9ZAaTWQbt0z3JVIK9QcyU+uEZPG0m2b0YCKs/RwglwMtXWiHV5+yL+yn1L6s5Zmp P45tnnc2xvkCNil3HMAAwaDQ0lwvbyJ5f+78RWhDyi9N89oNHQ3gXQzCtp8pGu9S iZA0IJhPqk0zTZdlQY1R2V00N2mdGWE3pkudPLx5O+VfXaLFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdaot7lcadr/unkmNyxqRCV+ZhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDdj YjI0MC02NjFlLTQ4OWQtOTE5OC01NmQyMGM2ZDEwNzYvOTg0ZDZhODAtZmNhYi0z ODNlLTk2YjUtZWQxNTU2YTA0MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDA3Y2IyNDAtNjYxZS00ODlkLTkx OTgtNTZkMjBjNmQxMDc2LzQwN2NiMjQwLTY2MWUtNDg5ZC05MTk4LTU2ZDIwYzZk MTA3Ni5jcmwwHwYDVR0jBBgwFoAUK9cIJI4OXV7iM9cYSC+0eXIbX9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDdjYjI0MC02NjFlLTQ4OWQtOTE5OC01NmQy MGM2ZDEwNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXy/lhlpk3sWG+d0TnA6B/IDGNOVeDjlwRpseZWueHXbda+4812X80d GPa2smZmn9njkfaAFOvJ2Q6qZmXmTtHHLQ2XWextEBIczDLc7tU8VyMslCS6lJoW s+34FewfsbkI5M6pXOdTV3ec2SkTQJiU/LmGcyT/efLoMewqSGbcO32Dyfcw0QaT wczf5wwHsq9QBn8cNSDb5m1ICCssuySsVIiXkQtwhr1HZ5QT6bkby8RboQ2uSxRV 0xRFdzyg3J9eg78IXZgyBC/yy74YOLaon4J72tU9C/Qi/R883zBMHqxMhYo3Clh2 tsrfemgKwEi0t/08V/Xo62zs7DGJgkA= -----END CERTIFICATE-----Generated at Fri Jul 24 20:26:18 2026 by rpki-client