$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/b1b1af18-8301-3b67-934f-aa5fba9c73de.roa File: b1b1af18-8301-3b67-934f-aa5fba9c73de.roa (raw, json) Hash identifier: CdhJYZCoNblOh1pgQ/2N6+1hvdJGva3/ZwIE7bNfZmU= Subject key identifier: B4:D5:80:35:DB:B2:11:9A:72:68:06:53:65:1F:1E:DC:A9:FA:0D:C1 Certificate issuer: /CN=60c99364-71db-4a15-b5dd-c9b590a5c628 Certificate serial: 010D0C9F4328584AFEE6A83CAA9BF77A64727380 Authority key identifier: 30:BD:65:B1:18:E9:3F:1B:B4:E8:CA:88:6F:29:7A:44:00:FC:6E:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/b1b1af18-8301-3b67-934f-aa5fba9c73de.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 51299 IP address blocks: 194.61.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/60c99364-71db-4a15-b5dd-c9b590a5c628.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/60c99364-71db-4a15-b5dd-c9b590a5c628.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a8:3c:aa:9b:f7:7a:64:72:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c99364-71db-4a15-b5dd-c9b590a5c628 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=9611302d-9bb2-4a7a-b0ee-958f22bbcb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:e4:33:fa:7c:c2:1d:08:02:13:62:ee:df: c9:77:a4:07:ba:e0:9c:69:96:c7:f8:21:aa:6c:2f: 21:2f:b7:26:50:a0:22:a8:4b:64:8b:79:80:8b:0b: 84:1b:bc:a3:18:32:6c:77:e8:d4:21:3d:a8:b6:4c: 82:94:d9:6d:03:62:78:6d:4a:81:42:35:3e:12:25: 32:a3:68:ee:e3:22:02:16:59:ef:de:0f:3a:93:84: b8:82:19:b5:38:3f:6a:c4:2b:98:36:d9:e0:7b:8d: 7d:7f:d6:10:7a:67:af:82:2d:2d:1b:e7:a6:ff:c4: aa:64:a2:6d:5d:be:96:92:ed:31:b6:9a:1e:41:9a: bc:51:2e:e9:61:21:c2:7f:2d:3d:b0:bd:40:0d:65: 5e:73:1d:6d:f7:f2:68:a1:8a:21:70:b5:a9:6c:52: 62:0e:57:b6:0b:02:a5:24:11:75:a0:a1:ba:ed:c3: 43:d7:06:49:3f:06:e5:1a:6f:08:cb:9a:61:3b:ca: fb:b5:d4:7b:98:9f:8d:11:43:59:9b:e1:d0:62:fc: dc:98:12:ed:87:bb:c5:f0:bd:d0:d1:70:3d:28:01: 76:ca:89:96:75:02:ed:83:e4:91:4b:c7:38:f9:72: ad:e7:77:4e:0b:e4:83:3d:26:a6:18:82:56:7f:06: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D5:80:35:DB:B2:11:9A:72:68:06:53:65:1F:1E:DC:A9:FA:0D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/b1b1af18-8301-3b67-934f-aa5fba9c73de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628/60c99364-71db-4a15-b5dd-c9b590a5c628.crl X509v3 Authority Key Identifier: keyid:30:BD:65:B1:18:E9:3F:1B:B4:E8:CA:88:6F:29:7A:44:00:FC:6E:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60c99364-71db-4a15-b5dd-c9b590a5c628.cer sbgp-ipAddrBlock: critical IPv4: 194.61.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d1:34:02:cc:78:be:5b:d5:79:f5:b4:df:61:17:1b:77:7d: 0f:2c:b9:17:01:77:90:32:98:27:cc:0a:4e:f8:3a:51:12:67: 9a:8a:75:eb:be:96:76:49:ba:e2:3b:ab:e5:e4:e5:ca:97:02: 0c:ba:f2:f2:45:5f:e2:fe:45:c0:ce:86:c5:87:b8:44:cf:2f: a2:bf:80:b2:82:c0:89:0b:c4:61:63:9e:31:3a:78:03:e7:16: c2:bb:02:da:d4:f2:43:b2:de:b9:e0:58:a7:6f:f2:5c:dc:82: 45:9e:43:90:f9:e4:3b:e5:53:d8:2a:63:73:83:3a:ee:98:5d: 09:dc:86:d3:20:ca:c9:ab:1e:df:5b:0c:90:d6:9f:58:ff:6a: 04:f8:20:90:62:b2:db:bc:9e:bd:d2:85:88:64:d7:39:77:5e: 9d:d7:02:4b:8f:a8:5f:90:7f:fb:fa:8f:c0:39:10:fa:b1:e8: 11:94:27:88:1c:32:8f:dd:ae:cf:af:2a:9c:f3:40:09:b2:4d: 54:37:8e:57:cd:11:b1:93:9c:68:64:d5:7a:86:b4:df:25:3f: ee:bf:e6:5c:56:96:a3:1b:9b:8a:a7:96:f5:1f:92:9a:ea:0f: d8:40:c1:9f:07:3f:99:0d:fc:e7:14:8d:fb:eb:f4:a1:ac:9a: f5:1c:f2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qg8qpv3emRyc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBjOTkzNjQtNzFkYi00YTE1LWI1ZGQtYzliNTkwYTVj NjI4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OTYxMTMwMmQtOWJiMi00YTdhLWIwZWUtOTU4ZjIyYmJjYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjurkM/p8wh0IAhNi7t/Jd6QHuuCcaZbH+CGq bC8hL7cmUKAiqEtki3mAiwuEG7yjGDJsd+jUIT2otkyClNltA2J4bUqBQjU+EiUy o2ju4yICFlnv3g86k4S4ghm1OD9qxCuYNtnge419f9YQemevgi0tG+em/8SqZKJt Xb6Wku0xtpoeQZq8US7pYSHCfy09sL1ADWVecx1t9/JooYohcLWpbFJiDle2CwKl JBF1oKG67cND1wZJPwblGm8Iy5phO8r7tdR7mJ+NEUNZm+HQYvzcmBLth7vF8L3Q 0XA9KAF2yomWdQLtg+SRS8c4+XKt53dOC+SDPSamGIJWfwbAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTVgDXbshGacmgGU2UfHtyp+g3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGM5 OTM2NC03MWRiLTRhMTUtYjVkZC1jOWI1OTBhNWM2MjgvYjFiMWFmMTgtODMwMS0z YjY3LTkzNGYtYWE1ZmJhOWM3M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBjOTkzNjQtNzFkYi00YTE1LWI1 ZGQtYzliNTkwYTVjNjI4LzYwYzk5MzY0LTcxZGItNGExNS1iNWRkLWM5YjU5MGE1 YzYyOC5jcmwwHwYDVR0jBBgwFoAUML1lsRjpPxu06MqIbyl6RAD8bm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGM5OTM2NC03MWRiLTRhMTUtYjVkZC1jOWI1 OTBhNWM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvRNALMeL5b1Xn1tN9hFxt3fQ8suRcBd5AymCfMCk74OlESZ5qKdeu+ lnZJuuI7q+Xk5cqXAgy68vJFX+L+RcDOhsWHuETPL6K/gLKCwIkLxGFjnjE6eAPn FsK7AtrU8kOy3rngWKdv8lzcgkWeQ5D55DvlU9gqY3ODOu6YXQnchtMgysmrHt9b DJDWn1j/agT4IJBistu8nr3ShYhk1zl3Xp3XAkuPqF+Qf/v6j8A5EPqx6BGUJ4gc Mo/drs+vKpzzQAmyTVQ3jlfNEbGTnGhk1XqGtN8lP+6/5lxWlqMbm4qnlvUfkprq D9hAwZ8HP5kN/OcUjfvr9KGsmvUc8tY= -----END CERTIFICATE-----Generated at Wed Sep 17 20:34:04 2025 by rpki-client