$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa File: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (raw, json) Hash identifier: qhjQ934rbdZg0wUFTPsKsN7i85B0E/TthXd2iWGlgYw= Subject key identifier: 17:88:3F:64:0B:FE:81:FC:7C:39:88:94:85:85:4C:78:CB:C3:F9:DB Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584EFCACBF6262BA166E776B9100 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 22773 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bf:62:62:ba:16:6e:77:6b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=27c44a20-c296-4ad8-89d2-a7023717c210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:10:d4:4a:a6:51:72:a9:de:d6:98:d8:f0: 69:9e:f2:24:97:2d:0f:bc:1a:a5:d4:28:3d:38:f4: 31:e0:85:f3:91:21:37:93:d5:bc:92:fe:34:03:cf: e6:f6:60:19:32:15:a6:18:a2:f4:05:41:ca:c0:9d: 31:48:a7:8c:d5:72:44:73:cf:f0:6a:90:c7:66:f8: d8:e0:68:b3:9c:bf:97:7e:09:6d:68:4b:62:97:5f: 29:c2:a7:56:40:7d:e2:47:bc:06:84:b5:42:29:c3: 85:89:cd:b6:3a:98:dc:52:c6:2b:d7:2f:b5:82:34: ee:f3:61:a4:f0:9d:35:1d:f3:d6:cc:b9:28:b0:84: c8:1f:10:af:e0:28:c2:73:09:c2:bc:fc:54:58:9a: 62:42:a6:ed:11:e2:32:81:eb:34:87:21:65:32:a1: 7c:ed:49:c6:a6:24:dc:3b:66:bd:8f:e7:6d:82:2a: 4d:26:c8:87:4f:5b:9a:ce:bb:da:6d:b3:9c:2f:c3: ca:08:c0:39:27:54:bc:d3:fb:69:7e:69:c3:7b:cb: 19:fc:3e:6c:af:5b:4d:55:b9:6d:ea:29:e1:07:d5: dd:12:c8:54:3f:26:0b:46:88:56:0d:d8:0b:5a:57: 73:9b:d7:be:3c:65:4e:9b:6c:e7:5c:14:9f:e6:0c: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:3F:64:0B:FE:81:FC:7C:39:88:94:85:85:4C:78:CB:C3:F9:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/6134d21e-8982-3a39-a51f-8ad22c3de95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3a:5a:6e:9e:21:46:c2:99:db:36:cd:b7:4b:f2:8f:a7:49: 37:d5:d8:62:18:a1:f5:20:72:81:47:79:f8:0e:6a:56:ff:c8: da:9a:ee:39:ec:35:8a:aa:f2:9c:ac:ba:1e:a8:57:9b:74:c8: 9b:7a:74:ea:b2:90:71:c4:69:d5:e9:9d:89:63:6a:80:7a:f4: 1b:b5:07:ad:63:92:54:a4:8f:ea:14:1c:27:08:a6:5d:1f:7c: 06:a0:62:f0:12:b1:3f:13:4c:c0:13:49:8a:e6:24:30:62:b1: 13:5a:70:34:b2:a9:cb:d5:b6:95:00:ff:b1:79:cc:69:e1:da: a5:29:09:b9:e2:30:2b:4f:fc:ea:85:b2:c7:1d:9c:c3:c1:7b: 54:c9:97:a9:e5:a4:80:38:f7:88:cd:45:4c:2c:39:53:c8:0a: bf:0e:fe:99:fa:5a:7a:c2:c2:a2:68:95:eb:91:21:02:3d:a2: f9:6a:4c:a6:16:49:6c:9c:cb:f2:34:11:8b:92:bb:ff:a8:3a: de:81:36:62:7e:d1:31:2e:80:62:5b:76:e8:ec:78:3e:18:d9: d5:1a:6c:b6:82:f3:1e:ef:8c:14:16:36:0c:4b:2b:e4:fe:fb: c1:4c:46:b6:d4:86:e9:53:9a:8e:a8:1e:b6:b2:d0:96:52:e6: 26:a8:8e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL9iYroWbndrkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjdjNDRhMjAtYzI5Ni00YWQ4LTg5ZDItYTcwMjM3MTdjMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy8Q1EqmUXKp3taY2PBpnvIkly0PvBql1Cg9 OPQx4IXzkSE3k9W8kv40A8/m9mAZMhWmGKL0BUHKwJ0xSKeM1XJEc8/wapDHZvjY 4GiznL+XfgltaEtil18pwqdWQH3iR7wGhLVCKcOFic22OpjcUsYr1y+1gjTu82Gk 8J01HfPWzLkosITIHxCv4CjCcwnCvPxUWJpiQqbtEeIyges0hyFlMqF87UnGpiTc O2a9j+dtgipNJsiHT1uazrvabbOcL8PKCMA5J1S80/tpfmnDe8sZ/D5sr1tNVblt 6inhB9XdEshUPyYLRohWDdgLWldzm9e+PGVOm2znXBSf5gwGrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeIP2QL/oH8fDmIlIWFTHjLw/nbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNjEzNGQyMWUtODk4Mi0z YTM5LWE1MWYtOGFkMjJjM2RlOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk6Wm6eIUbCmds2zbdL8o+nSTfV2GIYofUgcoFHefgOalb/yNqa7jns NYqq8pysuh6oV5t0yJt6dOqykHHEadXpnYljaoB69Bu1B61jklSkj+oUHCcIpl0f fAagYvASsT8TTMATSYrmJDBisRNacDSyqcvVtpUA/7F5zGnh2qUpCbniMCtP/OqF sscdnMPBe1TJl6nlpIA494jNRUwsOVPICr8O/pn6WnrCwqJoleuRIQI9ovlqTKYW SWycy/I0EYuSu/+oOt6BNmJ+0TEugGJbdujseD4Y2dUabLaC8x7vjBQWNgxLK+T+ +8FMRrbUhulTmo6oHray0JZS5iaoju0= -----END CERTIFICATE-----Generated at Sat Oct 3 12:13:21 2026 by rpki-client