$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa File: 43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json) Hash identifier: EhOTE+W0dlEDSy5KX6DVSYdH75Rp0ZcpzaZ0Lr/lztI= Subject key identifier: 4A:1A:FA:38:D9:32:B8:9A:75:00:8B:73:02:A5:C2:D4:2A:ED:88:3B Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584DCAFAF7A3E2AAD08712D13BE0 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:f7:a3:e2:aa:d0:87:12:d1:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=edee49fb-9455-40ba-aee2-888272617dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:cd:08:8c:d3:db:1f:23:47:58:94:93:20: a2:1d:17:22:04:d8:18:13:66:66:02:bf:97:fa:f3: b1:07:68:7d:53:b7:14:f0:19:bb:a0:47:6c:a7:49: 58:d0:20:3b:b3:85:7b:69:21:da:63:66:4f:80:49: 91:b1:1d:d0:19:45:ab:cb:c0:8b:fe:64:f1:5f:d4: c5:45:bd:25:cf:9b:52:03:f6:f0:54:ce:0d:09:96: c2:d8:d4:c0:da:b5:c5:ef:91:89:58:b7:1e:78:3a: 71:8d:50:e3:d9:01:74:12:17:d0:a1:2d:54:ed:54: 56:2a:ee:a5:a3:c9:56:77:d6:57:15:84:aa:e9:7c: 27:04:d6:3f:84:ac:bc:b7:82:df:f4:45:b6:10:d7: bb:e5:fe:8d:a1:72:94:ca:49:9d:9c:be:17:77:c4: b3:10:55:e5:39:e3:79:5a:40:96:6e:90:58:d0:7f: e6:e7:f0:f1:d2:4b:4e:b1:33:a1:f2:0e:40:42:9f: 98:a4:f5:2e:ab:c9:89:89:b3:64:a6:6e:4c:85:b0: 49:9a:83:67:87:d1:9c:b9:bb:a2:93:32:46:ff:95: 20:65:3f:de:28:d3:3c:03:71:5c:86:58:2f:08:bf: 33:37:21:f3:85:dd:cb:88:f8:0e:fe:6f:26:a0:27: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1A:FA:38:D9:32:B8:9A:75:00:8B:73:02:A5:C2:D4:2A:ED:88:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:77:71:c2:14:c6:0e:d9:12:0c:cf:7b:30:d2:11:f4:8d:4b: f6:0f:b1:5c:74:f7:c1:39:ca:4c:14:d6:1e:f4:a2:2f:d3:88: 94:aa:bc:3a:0e:f4:90:ab:a2:29:a2:e2:44:a5:18:a5:80:26: 96:03:40:b6:57:15:7d:55:5e:ee:bd:13:28:87:63:1f:f5:c6: 41:f3:87:2c:14:1b:34:81:53:93:23:31:61:b8:0d:c0:f7:91: d6:0a:86:ee:6e:67:16:6c:73:fb:05:29:4b:b7:0a:d1:82:50: a1:db:b2:64:ca:d9:ee:31:0a:a5:d2:62:7c:ff:2c:7a:5f:4e: 79:e6:9b:7f:83:0b:a5:c8:25:5f:64:9b:cb:8b:f9:30:76:a9: dc:df:54:21:db:74:95:26:56:6b:09:7f:ee:5c:10:de:18:80: 11:3c:f4:a1:6c:2c:7f:7d:0e:c2:60:65:3e:3d:8e:89:1b:60: a0:c4:c0:ef:96:c8:ae:a6:82:1d:67:7d:96:86:be:7c:83:61: 12:e8:7e:75:2f:16:93:66:ab:5e:0a:87:df:f7:8d:22:e4:ae: eb:ce:07:9a:ce:13:f7:d5:b7:2b:77:e2:f3:cd:eb:15:83:91: a3:81:61:de:ad:93:d3:7b:17:5b:a9:7f:74:61:f7:1b:f2:20: 1d:dd:05:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vej4qrQhxLRO+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWRlZTQ5ZmItOTQ1NS00MGJhLWFlZTItODg4MjcyNjE3ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphLNCIzT2x8jR1iUkyCiHRciBNgYE2ZmAr+X +vOxB2h9U7cU8Bm7oEdsp0lY0CA7s4V7aSHaY2ZPgEmRsR3QGUWry8CL/mTxX9TF Rb0lz5tSA/bwVM4NCZbC2NTA2rXF75GJWLceeDpxjVDj2QF0EhfQoS1U7VRWKu6l o8lWd9ZXFYSq6XwnBNY/hKy8t4Lf9EW2ENe75f6NoXKUykmdnL4Xd8SzEFXlOeN5 WkCWbpBY0H/m5/Dx0ktOsTOh8g5AQp+YpPUuq8mJibNkpm5MhbBJmoNnh9Gcubui kzJG/5UgZT/eKNM8A3FchlgvCL8zNyHzhd3LiPgO/m8moCc0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoa+jjZMriadQCLcwKlwtQq7Yg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNDNkNTI5YTUtMDZmYy0z NTk2LWIzMDYtMzgwNWVlMzllZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh3ccIUxg7ZEgzPezDSEfSNS/YPsVx098E5ykwU1h70oi/TiJSqvDoO 9JCroimi4kSlGKWAJpYDQLZXFX1VXu69EyiHYx/1xkHzhywUGzSBU5MjMWG4DcD3 kdYKhu5uZxZsc/sFKUu3CtGCUKHbsmTK2e4xCqXSYnz/LHpfTnnmm3+DC6XIJV9k m8uL+TB2qdzfVCHbdJUmVmsJf+5cEN4YgBE89KFsLH99DsJgZT49jokbYKDEwO+W yK6mgh1nfZaGvnyDYRLofnUvFpNmq14Kh9/3jSLkruvOB5rOE/fVtyt34vPN6xWD kaOBYd6tk9N7F1upf3Rh9xvyIB3dBdw= -----END CERTIFICATE-----Generated at Wed May 13 15:25:45 2026 by rpki-client