$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa File: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (raw, json) Hash identifier: qVXsb8CaA4bob6HeMepnM7+Iz64iQ1YxiaoqaFuep2I= Subject key identifier: 4D:98:CA:EF:F0:2F:8F:09:60:F8:A0:E2:1D:AB:27:53:70:BA:4B:4E Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584E5A49F4AA0725E261FE6B0100 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 22773 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f4:aa:07:25:e2:61:fe:6b:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=b891447d-75fe-4c38-89ea-44323b817eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:a9:19:92:f7:55:81:57:76:98:65:d1:9e: e8:4f:1e:e1:51:20:a5:2c:e7:c5:39:64:e4:6f:69: 24:52:91:02:c8:b0:ca:53:72:fe:a1:68:ca:61:2b: d6:b7:6b:c2:2f:59:f7:b3:72:95:60:ed:1c:22:1f: 66:6d:9d:e2:1d:42:e7:a7:39:85:60:ec:6f:b4:4e: ba:3a:28:04:b2:2e:a8:38:2c:92:2d:cc:9d:eb:a6: 19:f8:b4:22:0b:0f:9b:c0:67:1b:29:a6:9f:e0:ef: b3:ec:7b:05:b2:c9:6c:93:75:1b:5b:1c:d8:12:5e: d0:5f:d0:3a:ee:73:a8:3d:fd:f0:2b:9f:bd:cd:d8: 42:ca:4c:48:ee:7c:3a:06:55:54:54:e1:f3:8a:89: b0:c5:c2:3e:ed:61:7d:65:ac:01:64:46:77:fc:45: eb:3e:6b:a0:06:f4:7d:02:c2:25:3c:1d:23:07:35: 79:d7:b1:69:16:4d:81:d6:60:0b:0c:62:ea:36:44: c3:19:03:3e:b6:b1:ec:0c:ea:5d:ec:5a:36:68:fc: 2c:94:58:bd:16:c6:9f:4c:44:1a:76:15:42:36:59: 5b:e9:2e:60:e9:68:ad:55:bd:7f:8e:ac:9a:2a:67: 21:e0:64:ba:c2:8f:6c:51:39:7b:d9:27:e2:4c:90: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:98:CA:EF:F0:2F:8F:09:60:F8:A0:E2:1D:AB:27:53:70:BA:4B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:33:dd:ff:cf:5b:1c:f9:3f:0c:86:60:4a:78:4d:ee:aa:c0: 61:47:13:5e:83:93:d3:66:06:fd:82:86:58:25:57:55:6f:df: aa:95:fd:a6:4e:d4:29:3b:88:10:05:21:7a:70:7a:10:4b:a7: dc:ce:4b:d0:f6:26:1a:13:44:55:2e:f5:14:43:bc:63:2b:0f: ad:a7:02:c3:89:92:07:2a:51:c4:2c:bc:ab:68:03:ec:4b:cf: d7:a6:c1:f0:ad:b4:b8:a9:f1:b1:0d:85:56:93:8e:d8:0d:9c: 8d:bf:18:54:08:ed:6e:6e:01:bb:65:a8:10:19:f6:08:57:de: 5b:84:5c:5f:98:d9:99:c3:35:56:bd:71:83:3e:7f:61:a8:d2: 9e:f2:12:16:37:5e:a1:94:ab:c4:ae:a3:b2:42:2e:96:a6:d1: ed:01:2f:a8:5b:fb:ee:5e:b5:c7:f7:9c:d5:39:24:52:e5:2d: c3:cb:07:71:53:b0:28:c6:10:a0:79:f1:00:c9:0b:10:e7:fa: fa:e6:3a:20:01:e1:de:22:e7:18:a0:23:69:76:51:ab:41:9b: 0e:5e:25:79:53:e8:bb:6e:9b:f9:dc:4f:80:2a:d1:54:9d:8f: 3e:7d:d1:94:82:0b:b7:51:7b:64:af:8e:97:46:e7:ba:2d:dc: a0:e5:97:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfSqByXiYf5rAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk Yjg5MTQ0N2QtNzVmZS00YzM4LTg5ZWEtNDQzMjNiODE3ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltmpGZL3VYFXdphl0Z7oTx7hUSClLOfFOWTk b2kkUpECyLDKU3L+oWjKYSvWt2vCL1n3s3KVYO0cIh9mbZ3iHULnpzmFYOxvtE66 OigEsi6oOCySLcyd66YZ+LQiCw+bwGcbKaaf4O+z7HsFsslsk3UbWxzYEl7QX9A6 7nOoPf3wK5+9zdhCykxI7nw6BlVUVOHziomwxcI+7WF9ZawBZEZ3/EXrPmugBvR9 AsIlPB0jBzV517FpFk2B1mALDGLqNkTDGQM+trHsDOpd7Fo2aPwslFi9FsafTEQa dhVCNllb6S5g6WitVb1/jqyaKmch4GS6wo9sUTl72SfiTJAiZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2Yyu/wL48JYPig4h2rJ1NwuktOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNjEzNGQyMWUtODk4Mi0z YTM5LWE1MWYtOGFkMjJjM2RlOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwz3f/PWxz5PwyGYEp4Te6qwGFHE16Dk9NmBv2ChlglV1Vv36qV/aZO 1Ck7iBAFIXpwehBLp9zOS9D2JhoTRFUu9RRDvGMrD62nAsOJkgcqUcQsvKtoA+xL z9emwfCttLip8bENhVaTjtgNnI2/GFQI7W5uAbtlqBAZ9ghX3luEXF+Y2ZnDNVa9 cYM+f2Go0p7yEhY3XqGUq8Suo7JCLpam0e0BL6hb++5etcf3nNU5JFLlLcPLB3FT sCjGEKB58QDJCxDn+vrmOiAB4d4i5xigI2l2UatBmw5eJXlT6Ltum/ncT4Aq0VSd jz590ZSCC7dRe2SvjpdG57ot3KDllxI= -----END CERTIFICATE-----Generated at Sat Jul 4 23:59:52 2026 by rpki-client