$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa File: 9699501c-da98-381a-90a4-a8aa59586482.roa (raw, json) Hash identifier: qG5rhzxxyukD/4Pe49AEo0lupILvNG8OGVt/eQhkkqU= Subject key identifier: AB:20:DA:02:B2:D6:04:B6:D8:9F:9F:3C:CE:F4:A1:85:68:00:18:FB Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584EF87CBF2F57FDE7F3561ABF00 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 399296 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bf:2f:57:fd:e7:f3:56:1a:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=bbec5d09-e6e4-4f56-a46f-f7ab6d377e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:bc:7c:5e:2e:da:06:91:1d:91:36:46:ee: 2b:52:66:55:02:d5:ac:a9:8d:d2:e6:9f:4b:3f:78: bf:3e:a7:18:a8:ac:1a:d0:fc:f9:19:bc:74:d8:a0: f1:90:26:d0:70:0f:43:5f:ca:da:e4:07:c5:27:4a: 96:45:fd:90:51:0c:d9:30:be:31:2c:58:7c:30:74: 27:aa:95:86:01:b5:c2:08:c9:d1:3c:a9:53:99:56: d8:4b:5a:9d:6f:fe:45:4d:81:98:0c:94:82:b5:28: b6:f8:4c:9b:ee:4f:09:5f:8c:f2:e8:37:f2:8f:7b: b3:4e:c6:38:3a:4e:d7:43:e9:77:f6:fa:07:5c:d6: 43:a0:5f:7f:89:30:44:12:6c:53:b4:a6:31:32:88: 41:7f:f3:3e:5f:1b:cd:1e:6d:90:dc:ec:86:b3:a5: fd:7c:7e:23:3d:a1:25:dd:d3:38:32:ab:75:76:9f: 3d:8d:ce:7c:c0:4b:f4:3b:23:37:16:97:8d:51:09: 05:e8:a8:f2:64:5f:8e:77:4b:85:85:aa:de:9b:56: 29:d4:d2:3b:42:44:46:2f:08:31:b6:13:8d:b5:e2: e0:2b:e7:21:9a:0d:da:99:bc:34:78:ec:d6:b6:61: 69:5d:46:b5:b0:50:f0:54:f8:74:d5:5e:ac:12:aa: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:20:DA:02:B2:D6:04:B6:D8:9F:9F:3C:CE:F4:A1:85:68:00:18:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:bf:41:07:b1:ff:ff:e3:b9:39:a8:7b:9d:1f:e7:6a:97:e0: 40:c4:a9:08:38:52:97:87:e8:80:40:57:6e:9a:4b:cd:94:90: 5b:b7:ea:e4:03:19:d4:d0:41:7d:ab:20:15:d1:3e:30:fa:63: 10:09:80:44:4d:6e:aa:7d:0f:d2:03:05:c2:22:54:46:40:f9: 93:68:ba:5e:7d:5b:7e:09:18:d6:3b:d1:b9:cb:9c:0a:38:b2: 53:b8:b0:32:f0:4b:cc:2a:6f:74:75:10:5e:c1:15:f9:54:47: 6c:90:f1:05:ab:14:96:01:d4:f6:a2:1b:85:10:a3:78:ac:43: ee:87:a1:81:88:15:ec:9e:72:e5:ec:8a:95:ef:40:26:1f:1e: 0c:cc:0a:66:97:99:6a:23:28:85:88:71:7b:de:48:e3:4d:40: 40:3e:84:7b:8f:18:5b:4c:cf:4c:76:0a:a6:df:5d:19:1b:34: 49:0e:2d:2a:ce:fb:5b:04:68:7f:78:86:e0:2f:4a:d5:e5:62: 55:35:d6:2c:7b:51:b3:fd:f4:57:7b:b4:3a:7f:01:61:08:de: ba:96:4e:e8:18:9f:d1:67:91:c6:9c:b9:9a:31:e0:d7:00:29: 19:70:a7:1a:56:23:b5:f9:b8:d8:3b:f1:9e:58:da:3b:d5:9e: dc:c7:df:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL8vV/3n81YavwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YmJlYzVkMDktZTZlNC00ZjU2LWE0NmYtZjdhYjZkMzc3ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTq8fF4u2gaRHZE2Ru4rUmZVAtWsqY3S5p9L P3i/PqcYqKwa0Pz5Gbx02KDxkCbQcA9DX8ra5AfFJ0qWRf2QUQzZML4xLFh8MHQn qpWGAbXCCMnRPKlTmVbYS1qdb/5FTYGYDJSCtSi2+Eyb7k8JX4zy6Dfyj3uzTsY4 Ok7XQ+l39voHXNZDoF9/iTBEEmxTtKYxMohBf/M+XxvNHm2Q3OyGs6X9fH4jPaEl 3dM4Mqt1dp89jc58wEv0OyM3FpeNUQkF6KjyZF+Od0uFharem1Yp1NI7QkRGLwgx thONteLgK+chmg3ambw0eOzWtmFpXUa1sFDwVPh01V6sEqovOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsg2gKy1gS22J+fPM70oYVoABj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvOTY5OTUwMWMtZGE5OC0z ODFhLTkwYTQtYThhYTU5NTg2NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO/QQex///juTmoe50f52qX4EDEqQg4UpeH6IBAV26aS82UkFu36uQD GdTQQX2rIBXRPjD6YxAJgERNbqp9D9IDBcIiVEZA+ZNoul59W34JGNY70bnLnAo4 slO4sDLwS8wqb3R1EF7BFflUR2yQ8QWrFJYB1PaiG4UQo3isQ+6HoYGIFeyecuXs ipXvQCYfHgzMCmaXmWojKIWIcXveSONNQEA+hHuPGFtMz0x2CqbfXRkbNEkOLSrO +1sEaH94huAvStXlYlU11ix7UbP99Fd7tDp/AWEI3rqWTugYn9FnkcacuZox4NcA KRlwpxpWI7X5uNg78Z5Y2jvVntzH3wI= -----END CERTIFICATE-----Generated at Sun Oct 11 23:56:19 2026 by rpki-client