$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa File: 9699501c-da98-381a-90a4-a8aa59586482.roa (raw, json) Hash identifier: KGt1XmZSrxbN6eNIVjkz4NZs/opHA0d6hSyGTPflakU= Subject key identifier: 9F:12:AA:C2:3D:D7:46:5F:5A:02:A9:75:EE:4E:49:8F:57:32:49:00 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584D75D52B37A1BD96BFA404BB80 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 399296 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2b:37:a1:bd:96:bf:a4:04:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=b7e1983c-714f-42e0-bdc2-3eda1ead5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:74:5a:f8:73:58:78:d4:38:9e:c3:47:bd: 7f:3a:e7:24:e4:ce:fa:73:49:40:f0:94:7e:c8:74: d3:86:12:02:b9:3a:a0:02:cc:1a:be:ab:a2:ca:52: ea:7a:2b:2a:a1:5e:3c:40:64:40:b9:45:bc:ff:86: e2:59:a3:9b:0a:3a:0e:b8:d3:d2:68:18:4e:1c:4e: 59:13:98:2e:b0:30:32:d9:29:e0:b3:be:47:70:57: 1f:29:dc:d7:9f:95:f2:bc:41:d3:60:7e:14:4b:53: f6:de:81:73:e7:9d:39:67:81:ad:19:66:3c:4d:65: 9b:ad:15:99:28:4a:12:3a:4a:1c:79:56:65:93:85: 4a:80:59:02:f9:51:0d:3e:b8:6d:ff:33:33:a6:9c: 64:44:aa:c3:62:0f:65:7a:b4:a2:bd:c0:bc:ef:7d: 54:25:cc:ee:63:5b:5f:fd:36:3c:18:e5:83:35:a1: 69:08:9c:dd:ca:e8:67:77:8a:7f:83:13:b7:6c:03: 5d:1d:c1:48:ff:7a:92:95:d3:39:d6:d7:e1:6d:56: e4:90:9e:86:b3:cf:0a:1d:b6:17:a4:45:e8:72:d1: ee:c2:b0:d8:ec:fa:71:1d:e1:23:f4:60:33:da:b3: 76:5a:08:dc:7a:2a:89:c5:13:3b:25:0b:62:a0:06: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:12:AA:C2:3D:D7:46:5F:5A:02:A9:75:EE:4E:49:8F:57:32:49:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:38:9c:c3:af:65:9b:86:02:46:7a:50:2c:99:54:79:a0:d6: 41:93:ea:43:66:4d:1d:5e:60:ae:6e:7b:3c:38:2d:8d:5f:b1: 95:7d:1f:e1:55:16:1f:6e:2f:9d:3d:20:c8:5f:cb:61:e0:d5: 01:b6:0b:f9:19:80:9a:9d:c5:da:c0:cd:45:ef:62:99:8e:a1: 5c:23:25:7f:18:71:54:6b:ae:b2:a8:72:01:c8:d6:04:95:ef: a2:92:77:ce:37:77:0d:21:e6:4b:22:79:fa:c9:0f:8e:c1:24: 8b:1c:e6:1e:24:dd:67:ba:42:a3:d4:4e:e5:25:29:22:09:6e: 90:98:ca:6f:5b:2c:54:fc:f3:35:2f:d2:73:b9:cf:30:5e:07: fc:c7:a4:37:46:b1:03:95:ae:d8:47:b4:72:9b:23:12:48:40: 6e:ee:94:57:05:93:82:f5:92:dc:ac:10:9c:d3:1e:2c:74:6f: 54:3c:47:1a:48:26:55:d3:d9:2b:28:59:81:05:66:91:70:9e: b2:42:b3:0d:47:73:e9:b4:1e:73:84:bc:e1:47:d1:bc:c7:ca: 9f:ac:b8:d2:8e:0e:02:98:fc:78:9e:b8:48:72:d8:0d:12:99: 12:12:c6:f8:80:05:14:6e:dd:d7:78:9b:bf:22:bc:e3:85:2a: 1a:4d:60:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111Ss3ob2Wv6QEu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk YjdlMTk4M2MtNzE0Zi00MmUwLWJkYzItM2VkYTFlYWQ1NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIZ0WvhzWHjUOJ7DR71/Ouck5M76c0lA8JR+ yHTThhICuTqgAswavquiylLqeisqoV48QGRAuUW8/4biWaObCjoOuNPSaBhOHE5Z E5gusDAy2Sngs75HcFcfKdzXn5XyvEHTYH4US1P23oFz5505Z4GtGWY8TWWbrRWZ KEoSOkoceVZlk4VKgFkC+VENPrht/zMzppxkRKrDYg9lerSivcC8731UJczuY1tf /TY8GOWDNaFpCJzdyuhnd4p/gxO3bANdHcFI/3qSldM51tfhbVbkkJ6Gs88KHbYX pEXoctHuwrDY7PpxHeEj9GAz2rN2WgjceiqJxRM7JQtioAbcYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8SqsI910ZfWgKpde5OSY9XMkkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvOTY5OTUwMWMtZGE5OC0z ODFhLTkwYTQtYThhYTU5NTg2NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA84nMOvZZuGAkZ6UCyZVHmg1kGT6kNmTR1eYK5uezw4LY1fsZV9H+FV Fh9uL509IMhfy2Hg1QG2C/kZgJqdxdrAzUXvYpmOoVwjJX8YcVRrrrKocgHI1gSV 76KSd843dw0h5ksiefrJD47BJIsc5h4k3We6QqPUTuUlKSIJbpCYym9bLFT88zUv 0nO5zzBeB/zHpDdGsQOVrthHtHKbIxJIQG7ulFcFk4L1ktysEJzTHix0b1Q8RxpI JlXT2SsoWYEFZpFwnrJCsw1Hc+m0HnOEvOFH0bzHyp+suNKODgKY/HieuEhy2A0S mRISxviABRRu3dd4m78ivOOFKhpNYEg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:33:44 2026 by rpki-client