$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa File: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (raw, json) Hash identifier: lHcP24J1FgbdPTg9LoqQp8gWtHhe0UlOIUe0bsXmzy0= Subject key identifier: 0D:67:53:21:B6:A6:C4:DA:35:A8:D9:C7:19:BB:13:F4:09:BE:49:67 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584BB45D172B7C6961B367832900 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7922 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:17:2b:7c:69:61:b3:67:83:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=395286d0-184b-4178-bf3c-f7f0cb4a0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:7e:28:5b:54:5a:00:f2:de:6f:27:23:4a: 1c:78:19:7c:a9:c5:2e:b3:75:3e:93:ee:89:81:f8: f7:27:36:60:f8:8d:6b:10:7e:d6:08:c3:ab:f7:21: 71:a7:83:79:0a:36:bf:51:b0:87:31:7c:6e:9f:cc: ac:c8:c0:0e:1b:dd:fe:3e:55:57:54:c9:bb:2b:fa: 8a:8d:66:20:be:50:cf:23:8c:8a:14:fd:6f:c3:db: 2e:b4:7c:53:af:c8:88:c6:e7:c9:6b:f0:aa:3f:41: 00:bd:81:02:b8:cd:5f:00:83:6c:94:ed:c3:ce:42: f2:ca:74:9b:4f:e7:95:17:62:c6:57:c5:15:fb:ca: b5:cb:67:6d:ee:2a:24:76:68:c0:92:8c:f6:4b:ed: 33:da:53:d3:fd:fa:a0:fb:4a:bc:07:6b:9d:9c:d2: bf:da:84:9b:6f:04:ad:e3:c6:b8:23:45:d3:cd:f3: 43:7b:20:56:55:89:58:4a:84:06:36:d5:bb:fb:b5: fc:9a:5c:9a:30:89:09:33:14:d0:78:d4:d8:e2:82: ac:9d:1a:e6:35:30:86:84:0b:79:74:1f:fc:61:a8: 0b:2f:b9:cf:81:4e:f0:b6:d7:fa:fb:c8:09:80:44: 4f:66:46:d5:6f:2d:af:2d:b6:38:d6:0a:6b:88:fa: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:67:53:21:B6:A6:C4:DA:35:A8:D9:C7:19:BB:13:F4:09:BE:49:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a2:61:4c:d1:ce:b3:5a:d0:96:19:e9:6c:f1:dc:6d:03:20: c1:39:f8:17:d5:33:fb:59:02:16:ab:6b:2e:0d:d0:b0:b5:69: 96:4d:60:9d:60:8a:9c:f6:f7:e3:59:a3:11:a8:df:f0:22:c0: 73:8c:7f:ea:dc:b9:dd:bf:c9:58:b6:c1:dd:2f:c5:99:34:0a: 7f:b5:4c:06:15:e5:2e:cc:d5:d1:b5:45:99:5a:c3:5b:02:b3: a5:75:26:66:8c:e0:41:a6:24:52:fe:98:fd:cc:f1:5b:4b:c0: b2:f9:f8:d2:a5:c5:f0:0a:d6:48:5f:f2:52:82:10:9a:a3:c6: 98:f0:2d:7b:06:63:4a:41:fe:0f:72:a7:d3:a1:69:2c:f8:66: 13:a1:8c:44:03:2d:7b:45:1b:c1:c8:a9:83:64:ce:de:b4:6f: 14:88:ce:f6:d4:11:49:55:fc:3d:0d:95:85:3c:ed:34:61:4d: 86:53:9b:49:c7:53:22:39:ce:42:3f:0c:81:ae:fe:06:a1:e0: f1:0b:b9:64:c8:9a:65:ad:5a:c6:bf:d7:1d:5a:4f:de:7e:1a: df:0a:39:9f:5b:4b:c9:96:ab:cd:2d:e3:89:44:04:7b:45:7b: 78:94:7e:7a:85:a3:83:9c:35:64:f5:0f:4d:58:d7:69:4e:80: 09:b9:09:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRcrfGlhs2eDKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Mzk1Mjg2ZDAtMTg0Yi00MTc4LWJmM2MtZjdmMGNiNGEwMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSR+KFtUWgDy3m8nI0oceBl8qcUus3U+k+6J gfj3JzZg+I1rEH7WCMOr9yFxp4N5Cja/UbCHMXxun8ysyMAOG93+PlVXVMm7K/qK jWYgvlDPI4yKFP1vw9sutHxTr8iIxufJa/CqP0EAvYECuM1fAINslO3DzkLyynSb T+eVF2LGV8UV+8q1y2dt7iokdmjAkoz2S+0z2lPT/fqg+0q8B2udnNK/2oSbbwSt 48a4I0XTzfNDeyBWVYlYSoQGNtW7+7X8mlyaMIkJMxTQeNTY4oKsnRrmNTCGhAt5 dB/8YagLL7nPgU7wttf6+8gJgERPZkbVby2vLbY41gpriPqZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1nUyG2psTaNajZxxm7E/QJvklnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNzE0Mzg1Y2MtNmNhZi0z NTM0LTk1NzEtNmJmOTJmOGVhMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyiYUzRzrNa0JYZ6Wzx3G0DIME5+BfVM/tZAharay4N0LC1aZZNYJ1g ipz29+NZoxGo3/AiwHOMf+rcud2/yVi2wd0vxZk0Cn+1TAYV5S7M1dG1RZlaw1sC s6V1JmaM4EGmJFL+mP3M8VtLwLL5+NKlxfAK1khf8lKCEJqjxpjwLXsGY0pB/g9y p9OhaSz4ZhOhjEQDLXtFG8HIqYNkzt60bxSIzvbUEUlV/D0NlYU87TRhTYZTm0nH UyI5zkI/DIGu/gah4PELuWTImmWtWsa/1x1aT95+Gt8KOZ9bS8mWq80t44lEBHtF e3iUfnqFo4OcNWT1D01Y12lOgAm5CQo= -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:46 2025 by rpki-client