$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa File: 9699501c-da98-381a-90a4-a8aa59586482.roa (raw, json) Hash identifier: U2Z0vYpyKHOAL2nB6jm/OgECIGVfjh53bykn72pmaYk= Subject key identifier: 45:DB:DD:A2:56:EE:82:2E:49:A5:7A:90:EC:51:60:1F:48:B2:D2:8E Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584AD3A0F7A71144618E5CFB9100 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 399296 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f7:a7:11:44:61:8e:5c:fb:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=75bfec9f-a65c-4623-8b46-e3f112791ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:47:6f:5c:1c:3f:2f:5b:1c:3a:21:32:f5: 93:a5:6c:25:fb:cb:78:af:8d:73:93:f3:6b:80:33: d1:c9:e6:10:b7:98:d3:aa:4f:1b:c1:38:91:5a:80: 66:a9:f9:5c:b9:5d:aa:39:b5:7a:b5:4d:a9:cf:4b: 38:8c:39:f3:83:06:b0:ae:a3:2d:7a:81:21:de:a4: 50:cb:79:30:a4:80:c4:19:51:34:16:c6:86:6f:92: 53:16:b1:82:ca:bd:8e:fd:83:d3:d3:31:10:28:da: d6:e4:5e:de:b6:c5:31:c7:df:ce:79:e5:42:cd:d3: 43:0d:42:04:41:39:01:03:5e:f7:0e:77:89:70:c7: 32:8f:82:14:76:7b:45:a4:0f:d6:cd:cb:34:6a:4c: 03:31:06:14:80:09:af:0e:9f:e1:8d:31:42:53:4e: df:65:75:af:cf:c9:29:91:f2:5a:69:d5:a3:f0:fd: ae:1c:9a:aa:3f:e9:bb:a4:e3:8c:3e:20:ef:fb:b0: b3:42:a2:47:4b:d4:30:df:41:77:77:d9:7b:06:84: 7d:82:03:ce:d5:07:6c:97:87:ed:5b:97:0d:ed:07: c1:82:cd:1e:3a:15:9f:d2:12:d3:7a:07:16:fc:6e: d3:ed:c8:1a:ff:66:a7:ee:46:54:b2:95:ac:2b:e4: 2b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:DD:A2:56:EE:82:2E:49:A5:7A:90:EC:51:60:1F:48:B2:D2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/9699501c-da98-381a-90a4-a8aa59586482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:20:6f:91:9a:01:10:58:9a:41:7c:47:3e:c1:bd:b1:5e:40: 88:cf:5f:53:0e:93:8a:8e:66:0a:bd:4e:ae:5c:6f:74:b1:51: 06:05:3a:11:d8:d6:e3:cb:a7:13:bd:6b:27:4d:f4:dd:59:25: 9c:0c:33:b9:d5:a1:d8:11:96:04:0c:d6:ae:7e:09:cf:e1:2f: af:f9:8f:12:c5:25:5b:e6:d2:bd:ef:12:5e:b3:f6:53:ef:3a: 37:e7:44:21:82:c8:63:de:d8:4f:01:d2:c4:26:fd:2c:9c:8c: 37:9d:17:76:53:dd:15:9b:90:e7:bb:20:a7:89:cc:a8:97:96: 09:36:11:15:19:71:86:03:50:a2:7c:6d:59:c2:58:13:91:a3: 3d:ea:f7:58:80:5e:c7:a3:d0:ae:d9:b8:68:54:04:ae:9b:61: 17:40:d9:d6:72:2e:52:61:67:5e:00:68:61:e1:ef:a7:46:f8: 02:b2:1b:2b:73:a9:d0:ef:bf:50:a3:e1:8c:90:8f:4d:82:77: e9:bb:04:ee:a0:9e:fa:0d:45:ee:4e:76:53:1e:1e:33:71:b0: 76:9c:b5:25:4d:86:90:38:0d:81:a9:96:51:80:0f:63:dc:78: 10:ad:5f:ae:74:22:23:71:f4:77:cf:0b:ce:9b:39:f5:d4:e3: de:27:2b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPenEURhjlz7kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NzViZmVjOWYtYTY1Yy00NjIzLThiNDYtZTNmMTEyNzkxZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCtHb1wcPy9bHDohMvWTpWwl+8t4r41zk/Nr gDPRyeYQt5jTqk8bwTiRWoBmqflcuV2qObV6tU2pz0s4jDnzgwawrqMteoEh3qRQ y3kwpIDEGVE0FsaGb5JTFrGCyr2O/YPT0zEQKNrW5F7etsUxx9/OeeVCzdNDDUIE QTkBA173DneJcMcyj4IUdntFpA/Wzcs0akwDMQYUgAmvDp/hjTFCU07fZXWvz8kp kfJaadWj8P2uHJqqP+m7pOOMPiDv+7CzQqJHS9Qw30F3d9l7BoR9ggPO1Qdsl4ft W5cN7QfBgs0eOhWf0hLTegcW/G7T7cga/2an7kZUspWsK+QrvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXb3aJW7oIuSaV6kOxRYB9IstKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvOTY5OTUwMWMtZGE5OC0z ODFhLTkwYTQtYThhYTU5NTg2NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUgb5GaARBYmkF8Rz7BvbFeQIjPX1MOk4qOZgq9Tq5cb3SxUQYFOhHY 1uPLpxO9aydN9N1ZJZwMM7nVodgRlgQM1q5+Cc/hL6/5jxLFJVvm0r3vEl6z9lPv OjfnRCGCyGPe2E8B0sQm/SycjDedF3ZT3RWbkOe7IKeJzKiXlgk2ERUZcYYDUKJ8 bVnCWBORoz3q91iAXsej0K7ZuGhUBK6bYRdA2dZyLlJhZ14AaGHh76dG+AKyGytz qdDvv1Cj4YyQj02Cd+m7BO6gnvoNRe5OdlMeHjNxsHactSVNhpA4DYGpllGAD2Pc eBCtX650IiNx9HfPC86bOfXU494nKzk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:53 2025 by rpki-client