$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa File: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (raw, json) Hash identifier: bKpeqi7SAmsyPw7JqH4nkYfVKWqlfrBPsnzvgnbnv/8= Subject key identifier: A3:7B:C6:76:09:EA:C2:8B:68:D8:66:11:29:3F:D2:B3:C1:5A:44:83 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584AD3A0F791E78ED3FDD6668DC0 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7922 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f7:91:e7:8e:d3:fd:d6:66:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=fb0f5b9e-d32d-485e-8f10-1d634ad65aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:e4:cd:2a:92:4d:ab:a4:2a:b0:f3:c5:96: e9:40:76:cd:0c:98:20:f4:07:bf:72:05:1c:3a:eb: 78:ec:67:4a:32:55:08:55:4f:e0:2e:7c:26:20:e7: aa:94:ce:68:c2:4b:3d:6a:76:2a:7f:15:8b:a8:78: 68:b5:ae:43:e9:34:52:8f:41:60:a3:78:a8:69:1d: a7:2e:aa:b1:90:34:84:db:34:ba:62:82:89:05:b0: 23:8b:e5:23:33:45:01:1a:4d:f4:45:44:9b:da:84: 0c:16:50:5c:f0:f4:9c:11:dc:37:47:1f:a3:d3:3b: 17:df:92:1a:7f:10:41:b2:38:cb:7b:b5:91:2c:14: c4:67:3e:a5:e7:34:81:3f:e2:b7:05:66:44:61:36: 66:95:00:6c:60:b8:67:79:78:ab:80:d5:05:71:19: 4a:23:ed:bb:74:0d:ca:84:b8:6e:b5:76:eb:70:fc: 73:f5:f2:63:7a:22:0a:ff:97:f2:8c:8b:45:b9:d3: cc:64:95:0a:85:90:93:90:18:85:af:86:de:f7:8f: 7c:cd:c1:21:96:2f:01:45:17:26:f5:59:27:e7:f3: db:be:2a:26:47:81:2f:df:ed:f2:93:cd:80:9c:da: ac:31:85:f2:8e:aa:b8:8b:2d:04:66:d4:aa:6d:5c: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7B:C6:76:09:EA:C2:8B:68:D8:66:11:29:3F:D2:B3:C1:5A:44:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:68:f8:9c:24:34:a0:3c:83:f1:70:70:10:e6:cf:78:83:15: 1b:e6:7a:e2:8b:df:88:66:3b:11:8a:dd:7b:68:06:71:ad:a2: 33:59:8a:1b:de:bd:fa:56:2d:81:a8:25:ad:e7:dd:66:d4:ce: 6f:58:28:f1:d7:0a:3f:b5:43:ac:1b:84:69:60:a5:34:6d:b3: eb:a7:21:f5:ff:c4:9e:a1:10:39:15:48:97:43:37:a8:f2:cd: 64:10:94:11:ef:c9:f9:0a:4f:50:05:d7:00:54:84:ff:13:e4: 00:b0:b8:5f:85:56:8e:96:c0:c5:38:9e:da:55:f3:9e:0b:a3: 1b:f1:0a:1e:83:fc:d1:9f:1a:ff:dc:ed:81:a9:89:04:0a:80: 6c:80:a9:f9:56:e9:c2:c8:6b:51:b7:6e:a8:44:cc:c7:28:64: 64:e6:c9:82:d2:97:61:20:3b:63:40:1e:f6:5b:36:0a:b6:f1: 47:5f:43:ab:3b:bd:58:84:7d:21:02:c1:31:e0:77:8c:08:5b: 28:3e:56:da:54:59:e2:cf:c5:7c:48:ca:31:a9:ec:02:c0:25: d2:c4:b6:6e:82:a9:29:4a:23:af:19:de:fa:f1:b2:af:1b:d0: fe:bd:37:4f:f1:d0:43:af:4f:23:36:c0:48:1d:8e:e2:91:31: 99:86:1f:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPeR547T/dZmjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmIwZjViOWUtZDMyZC00ODVlLThmMTAtMWQ2MzRhZDY1YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4PkzSqSTaukKrDzxZbpQHbNDJgg9Ae/cgUc Out47GdKMlUIVU/gLnwmIOeqlM5owks9anYqfxWLqHhota5D6TRSj0Fgo3ioaR2n LqqxkDSE2zS6YoKJBbAji+UjM0UBGk30RUSb2oQMFlBc8PScEdw3Rx+j0zsX35Ia fxBBsjjLe7WRLBTEZz6l5zSBP+K3BWZEYTZmlQBsYLhneXirgNUFcRlKI+27dA3K hLhutXbrcPxz9fJjeiIK/5fyjItFudPMZJUKhZCTkBiFr4be9498zcEhli8BRRcm 9Vkn5/PbviomR4Ev3+3yk82AnNqsMYXyjqq4iy0EZtSqbVwaOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN7xnYJ6sKLaNhmESk/0rPBWkSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNzE0Mzg1Y2MtNmNhZi0z NTM0LTk1NzEtNmJmOTJmOGVhMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1o+JwkNKA8g/FwcBDmz3iDFRvmeuKL34hmOxGK3XtoBnGtojNZihve vfpWLYGoJa3n3WbUzm9YKPHXCj+1Q6wbhGlgpTRts+unIfX/xJ6hEDkVSJdDN6jy zWQQlBHvyfkKT1AF1wBUhP8T5ACwuF+FVo6WwMU4ntpV854LoxvxCh6D/NGfGv/c 7YGpiQQKgGyAqflW6cLIa1G3bqhEzMcoZGTmyYLSl2EgO2NAHvZbNgq28UdfQ6s7 vViEfSECwTHgd4wIWyg+VtpUWeLPxXxIyjGp7ALAJdLEtm6CqSlKI68Z3vrxsq8b 0P69N0/x0EOvTyM2wEgdjuKRMZmGHxw= -----END CERTIFICATE-----Generated at Wed Aug 20 20:05:21 2025 by rpki-client