$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa File: 9699501c-da98-381a-90a4-a8aa59586482.roa (raw, json) Hash identifier: aXPRARkZ1O71g7JRyJ1+PCqtsWVwpJsOX5qk/PflZwo= Subject key identifier: 0D:84:BA:A1:AD:93:DB:15:75:AB:A7:EF:B3:97:0C:0C:A5:C4:26:F9 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584F9BCDC1675689989ACA636500 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 399296 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c1:67:56:89:98:9a:ca:63:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=6d931100-0895-4b11-94b7-22901c650282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:40:5d:a0:29:97:42:e1:73:e4:0e:f0:f9: 36:01:34:c0:7d:f1:ab:e6:36:74:51:7a:6a:10:b8: 3e:15:b6:fe:a4:5b:d7:cf:a7:dd:18:c5:77:9f:76: dc:0b:e7:29:25:4f:d3:33:e5:ca:29:57:f4:53:da: 4d:bf:cf:f4:b1:5a:b3:0a:03:49:8f:e8:5e:80:ca: 6a:88:28:80:19:ec:00:11:a8:8d:30:22:96:b8:36: 5b:32:6f:3f:12:0c:10:b9:db:a3:c5:7f:f7:05:d8: 18:40:02:68:8b:00:ba:42:ac:e7:11:ef:d0:9d:f9: 35:08:a8:06:1c:12:49:cd:a8:bc:25:50:c1:f4:4c: b9:78:e8:46:5a:42:c3:55:39:3f:b6:1f:be:d0:7f: e7:ee:19:fb:c2:a8:a3:17:88:32:d9:fb:42:9d:b2: 33:06:0d:7c:a6:fa:5b:86:20:90:60:01:b3:14:80: 2f:62:28:68:89:a7:82:2d:91:11:9a:0c:f5:d3:c5: 55:62:b9:5a:e6:8f:ce:a7:69:92:3d:a1:14:85:57: 1f:67:e6:b6:84:7e:b3:9e:b1:b7:5d:af:07:6a:6d: 05:0d:2d:e1:a4:76:71:ce:10:f9:50:5a:a2:2b:88: 5f:f2:17:76:5c:07:76:94:41:93:83:29:4c:ff:a5: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:84:BA:A1:AD:93:DB:15:75:AB:A7:EF:B3:97:0C:0C:A5:C4:26:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:66:61:6c:3a:ba:14:a1:50:11:78:dc:14:58:fc:27:d9:38: 6c:85:05:88:f3:0c:13:a8:e0:cb:20:c2:d2:9f:a4:64:cb:db: 7b:9e:d3:02:e9:12:f5:8f:4a:b8:9e:25:5a:ac:cd:44:84:cd: c9:76:11:5b:eb:af:66:a4:d4:cb:8a:18:d5:e3:22:d5:21:6c: 18:34:6e:18:9b:dc:ed:c3:d7:62:bd:43:76:ab:f6:70:f3:50: 49:ec:e6:64:ba:2b:b5:a3:80:b4:6e:8a:34:f1:b9:97:ee:b4: 39:60:58:b2:56:30:48:9f:09:1b:ee:5f:ac:99:24:bc:8a:d6: fe:6c:aa:d6:f2:df:9e:cb:1d:1e:71:0e:50:41:10:81:87:c1: 20:76:63:b0:11:7e:63:8c:c6:f3:bd:5e:47:b0:e1:b3:e3:98: 55:8e:9c:25:b9:1f:00:41:91:29:35:f6:d0:d7:e7:e2:8a:59: 7b:af:09:72:ad:af:a6:ec:f6:01:b3:85:53:72:a2:c6:e7:f7: fa:aa:a4:0a:3c:9e:e0:cf:d6:37:b1:1e:95:45:51:15:c3:f8: 31:53:ca:2f:e3:20:72:ac:43:1c:51:e9:c6:fa:5c:ff:b1:46: fb:04:07:d5:af:17:e0:fe:7b:1d:2e:69:58:4f:97:0c:a8:79: 97:0f:93:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcFnVomYmspjZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NmQ5MzExMDAtMDg5NS00YjExLTk0YjctMjI5MDFjNjUwMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL9AXaApl0Lhc+QO8Pk2ATTAffGr5jZ0UXpq ELg+Fbb+pFvXz6fdGMV3n3bcC+cpJU/TM+XKKVf0U9pNv8/0sVqzCgNJj+hegMpq iCiAGewAEaiNMCKWuDZbMm8/EgwQudujxX/3BdgYQAJoiwC6QqznEe/Qnfk1CKgG HBJJzai8JVDB9Ey5eOhGWkLDVTk/th++0H/n7hn7wqijF4gy2ftCnbIzBg18pvpb hiCQYAGzFIAvYihoiaeCLZERmgz108VVYrla5o/Op2mSPaEUhVcfZ+a2hH6znrG3 Xa8Ham0FDS3hpHZxzhD5UFqiK4hf8hd2XAd2lEGTgylM/6X56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2EuqGtk9sVdaun77OXDAylxCb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvOTY5OTUwMWMtZGE5OC0z ODFhLTkwYTQtYThhYTU5NTg2NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZmYWw6uhShUBF43BRY/CfZOGyFBYjzDBOo4MsgwtKfpGTL23ue0wLp EvWPSrieJVqszUSEzcl2EVvrr2ak1MuKGNXjItUhbBg0bhib3O3D12K9Q3ar9nDz UEns5mS6K7WjgLRuijTxuZfutDlgWLJWMEifCRvuX6yZJLyK1v5sqtby357LHR5x DlBBEIGHwSB2Y7ARfmOMxvO9Xkew4bPjmFWOnCW5HwBBkSk19tDX5+KKWXuvCXKt r6bs9gGzhVNyosbn9/qqpAo8nuDP1jexHpVFURXD+DFTyi/jIHKsQxxR6cb6XP+x RvsEB9WvF+D+ex0uaVhPlwyoeZcPk+o= -----END CERTIFICATE-----Generated at Tue Nov 3 13:51:46 2026 by rpki-client