$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa File: 43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json) Hash identifier: FqRHXXmNsBneoG9uSvjrb1g8EDg2nWKSmWyoskfe+JA= Subject key identifier: 61:C6:F8:85:19:07:1C:27:DE:73:5A:DC:84:A2:1D:2E:30:50:D7:FA Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584B2A2C25CA296E659AA4FFAA80 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:25:ca:29:6e:65:9a:a4:ff:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=15e07aff-7a52-4d1e-9a8a-e4820a6f965e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:56:90:ae:48:f6:76:1c:97:df:02:a1:a7: ed:42:c2:28:5f:7a:1b:db:39:56:af:55:81:b2:a6: cb:91:e4:a2:3e:07:0d:47:22:25:b9:ab:ca:cb:b7: 38:3f:13:0f:be:0c:fb:b4:eb:ef:b9:3c:52:d7:62: 71:e9:a3:d2:0f:1d:97:26:65:86:25:fc:c6:82:f5: 6d:a6:3a:0f:05:6c:2d:99:08:ba:7b:d1:7c:54:f1: a5:ca:09:0e:73:4f:1c:b6:91:fd:b4:ef:b4:88:d6: 4d:9f:ae:52:37:96:12:33:99:86:fe:ca:7a:ac:b5: 6b:60:05:d9:e8:99:ea:0e:8b:3a:6b:6c:f9:e3:c2: 0b:0e:9c:be:05:23:6d:c8:4d:84:13:33:0a:e6:30: 3d:e3:43:8d:9e:eb:18:d0:dd:3c:d8:94:97:19:40: 3a:1b:1e:d2:76:45:51:36:b1:05:a8:06:74:ee:17: 33:dd:f4:1c:fd:b6:d1:78:05:70:4d:1f:74:62:b6: a8:b2:47:a6:14:45:7b:8e:02:41:c3:c7:09:c2:fb: f1:77:a0:74:2f:5b:83:af:d0:66:4c:da:db:98:ea: fe:07:05:63:81:2a:96:e7:8c:fe:31:9e:61:2e:73: 2b:5a:75:ff:27:23:7a:2f:1f:ac:ae:c0:72:04:eb: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:F8:85:19:07:1C:27:DE:73:5A:DC:84:A2:1D:2E:30:50:D7:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:92:d4:bf:05:b1:f6:d8:43:7e:63:9e:4d:93:2d:21:87:cb: 3e:18:62:67:71:6f:b6:6d:f9:92:cd:83:ba:36:e8:cf:6d:54: 93:08:b9:79:30:94:cc:32:6c:e6:87:63:d1:85:a0:72:ef:37: 85:83:a5:13:87:62:0a:93:18:8f:09:b3:7c:8f:08:67:f2:be: 44:9e:fb:ab:96:16:16:bc:cf:8a:72:3c:8b:5a:aa:c2:1b:5b: 05:b6:33:4e:b7:aa:1a:50:fa:ac:27:77:37:38:a3:4b:fb:bb: de:00:50:18:f5:c8:fc:ad:cb:cf:6a:e9:a7:8e:45:47:df:10: 91:c9:02:96:34:d4:2a:ba:f0:47:03:05:75:28:92:69:2f:31: 10:82:91:44:96:b4:73:26:e9:27:14:9d:c3:78:69:48:53:21: 58:df:89:76:26:21:47:df:1e:11:50:c6:82:8e:f9:85:ae:2d: 15:7b:f2:7a:e7:a9:be:e6:57:5f:99:8b:ce:77:e6:0e:55:4e: e5:d1:88:78:90:e9:c0:22:c1:65:3a:e4:f6:d0:5b:d6:c3:83: 60:7c:20:6f:27:9b:ad:f6:0a:4f:ca:09:3e:2b:d6:74:57:12: be:c8:f6:fc:a3:98:0f:33:13:43:5b:8b:30:4c:d5:c0:4c:b0: c1:11:6d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCXKKW5lmqT/qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MTVlMDdhZmYtN2E1Mi00ZDFlLTlhOGEtZTQ4MjBhNmY5NjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+xWkK5I9nYcl98CoaftQsIoX3ob2zlWr1WB sqbLkeSiPgcNRyIluavKy7c4PxMPvgz7tOvvuTxS12Jx6aPSDx2XJmWGJfzGgvVt pjoPBWwtmQi6e9F8VPGlygkOc08ctpH9tO+0iNZNn65SN5YSM5mG/sp6rLVrYAXZ 6JnqDos6a2z548ILDpy+BSNtyE2EEzMK5jA940ONnusY0N082JSXGUA6Gx7SdkVR NrEFqAZ07hcz3fQc/bbReAVwTR90YraoskemFEV7jgJBw8cJwvvxd6B0L1uDr9Bm TNrbmOr+BwVjgSqW54z+MZ5hLnMrWnX/JyN6Lx+srsByBOvotwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHG+IUZBxwn3nNa3ISiHS4wUNf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNDNkNTI5YTUtMDZmYy0z NTk2LWIzMDYtMzgwNWVlMzllZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByS1L8FsfbYQ35jnk2TLSGHyz4YYmdxb7Zt+ZLNg7o26M9tVJMIuXkw lMwybOaHY9GFoHLvN4WDpROHYgqTGI8Js3yPCGfyvkSe+6uWFha8z4pyPItaqsIb WwW2M063qhpQ+qwndzc4o0v7u94AUBj1yPyty89q6aeORUffEJHJApY01Cq68EcD BXUokmkvMRCCkUSWtHMm6ScUncN4aUhTIVjfiXYmIUffHhFQxoKO+YWuLRV78nrn qb7mV1+Zi8535g5VTuXRiHiQ6cAiwWU65PbQW9bDg2B8IG8nm632Ck/KCT4r1nRX Er7I9vyjmA8zE0NbizBM1cBMsMERbUQ= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:09 2025 by rpki-client