$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa File: 9699501c-da98-381a-90a4-a8aa59586482.roa (raw, json) Hash identifier: eMM/FVX4cjLcbqw70dxFXT06tPgAlNwMlpHKM2R9CIs= Subject key identifier: 35:B2:16:A4:8F:85:A0:1B:5A:47:A9:E6:FA:DC:64:DE:1C:EB:31:2D Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584BB45D1740A01184F531F49980 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 399296 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:17:40:a0:11:84:f5:31:f4:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=918d4d1f-443c-4853-ab46-598c8a8e6655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:c7:3a:08:d5:9f:05:ce:a6:83:9f:35:d8: 70:b3:dd:d3:9b:04:bd:83:43:bc:f4:33:c1:2a:41: c5:d0:f9:5c:4b:6f:08:e9:ff:6e:03:5f:fd:30:15: e9:29:3e:c7:af:78:fb:e1:04:48:b3:91:e1:67:bf: 54:4e:b8:ef:b5:f1:54:b2:46:c1:7a:16:db:e7:24: 27:97:df:14:77:69:ce:31:39:bc:16:13:2e:7c:36: 45:ad:97:d7:25:f5:7a:3a:94:4c:7a:a5:27:af:36: 58:6a:e8:7f:71:25:b1:70:9c:9a:bd:65:31:da:4c: 4e:4c:7b:72:b8:90:d4:37:da:1f:5f:21:d5:32:1f: ba:29:09:8f:3e:fb:72:3d:6f:59:c1:d0:09:58:80: 5f:35:e8:72:12:3d:28:d1:c1:c4:2b:e1:64:e9:96: 54:90:31:70:db:cb:1a:90:0a:91:fb:40:2d:27:fd: 90:a9:fb:0b:24:0e:c5:10:c2:02:d7:83:8e:4a:92: cf:89:12:cf:ee:8e:2b:ee:59:ac:04:7c:fa:d1:71: 7b:6f:59:84:45:70:cd:9a:32:cd:13:51:4e:97:f8: b7:7b:60:3e:2e:df:ef:c0:e4:a1:29:20:91:df:e0: cd:dc:a4:3d:c4:b1:2f:9f:01:ab:57:0a:f1:9e:c8: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:16:A4:8F:85:A0:1B:5A:47:A9:E6:FA:DC:64:DE:1C:EB:31:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:71:ec:fb:47:2a:5e:73:97:d6:a5:2c:38:74:0a:b4:f3:b6: 4f:14:3a:a2:c5:13:a6:8d:9d:e4:6e:93:c6:ca:53:20:9c:98: c1:49:29:56:8a:5a:89:d1:d5:f6:c3:f1:1b:3f:9c:13:13:f6: 3a:dc:f2:d6:9e:2f:f0:9d:5b:25:b9:6c:4d:94:68:86:c7:50: 0c:7b:93:59:6d:c3:76:50:64:19:80:97:6d:89:a4:ad:6b:37: 5e:01:26:40:6b:bc:c1:0d:aa:6a:04:b3:0d:df:17:58:09:3b: ea:4b:07:54:3c:d3:84:10:56:4d:b9:97:29:be:98:c3:61:47: 71:65:df:f5:1b:4d:46:c0:97:b1:31:87:2e:ca:f2:dd:d6:2f: 4e:6c:74:54:88:bd:fa:f0:56:cb:08:0c:fa:7c:9d:fd:40:b0: 4f:ba:2e:98:b7:54:76:0e:f8:84:27:83:3e:b2:39:59:cc:b1: 0c:04:eb:fc:5d:18:21:8c:28:80:9e:9e:d6:c2:83:cd:7d:87: 89:13:d4:dd:20:18:fd:e3:2a:49:53:63:cc:4f:0b:82:b0:16: 73:ca:49:dc:6b:37:18:ce:d1:0b:0a:b8:80:75:8b:46:fa:89: 66:e7:77:c8:1e:4b:d4:21:67:0c:36:7a:d5:cb:91:22:6f:13: 99:cd:27:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRdAoBGE9TH0mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OTE4ZDRkMWYtNDQzYy00ODUzLWFiNDYtNTk4YzhhOGU2NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqILHOgjVnwXOpoOfNdhws93TmwS9g0O89DPB KkHF0PlcS28I6f9uA1/9MBXpKT7Hr3j74QRIs5HhZ79UTrjvtfFUskbBehbb5yQn l98Ud2nOMTm8FhMufDZFrZfXJfV6OpRMeqUnrzZYauh/cSWxcJyavWUx2kxOTHty uJDUN9ofXyHVMh+6KQmPPvtyPW9ZwdAJWIBfNehyEj0o0cHEK+Fk6ZZUkDFw28sa kAqR+0AtJ/2QqfsLJA7FEMIC14OOSpLPiRLP7o4r7lmsBHz60XF7b1mERXDNmjLN E1FOl/i3e2A+Lt/vwOShKSCR3+DN3KQ9xLEvnwGrVwrxnshA5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWyFqSPhaAbWkep5vrcZN4c6zEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvOTY5OTUwMWMtZGE5OC0z ODFhLTkwYTQtYThhYTU5NTg2NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApx7PtHKl5zl9alLDh0CrTztk8UOqLFE6aNneRuk8bKUyCcmMFJKVaK WonR1fbD8Rs/nBMT9jrc8taeL/CdWyW5bE2UaIbHUAx7k1ltw3ZQZBmAl22JpK1r N14BJkBrvMENqmoEsw3fF1gJO+pLB1Q804QQVk25lym+mMNhR3Fl3/UbTUbAl7Ex hy7K8t3WL05sdFSIvfrwVssIDPp8nf1AsE+6Lpi3VHYO+IQngz6yOVnMsQwE6/xd GCGMKICentbCg819h4kT1N0gGP3jKklTY8xPC4KwFnPKSdxrNxjO0QsKuIB1i0b6 iWbnd8geS9QhZww2etXLkSJvE5nNJ14= -----END CERTIFICATE-----Generated at Wed Nov 5 09:41:10 2025 by rpki-client