$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa File: 6b98da56-6d05-3af9-8826-f7a70da179a0.roa (raw, json) Hash identifier: Xch1RMJi2Rr6PafVfEKWM4cbqxVB6VOTHcwV5zak0js= Subject key identifier: EE:22:E4:D5:8E:5E:72:2D:69:8A:7E:C9:9C:92:DA:3C:98:9D:58:E0 Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Certificate serial: 010D0C9F4328584F655D7E9B656E5F4889925CE0 Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 195.85.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7e:9b:65:6e:5f:48:89:92:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=f906b3a4-77bb-497f-a438-5d0459e8f23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:b4:c3:96:76:09:2b:67:ee:db:f6:e3:b9: 27:e2:db:37:fb:af:4f:1c:d1:01:97:15:6c:5f:f5: c6:d4:12:bb:73:e5:91:a5:f8:5e:28:da:5b:d1:d1: ab:29:92:03:b5:39:45:e4:43:96:7a:94:ed:c3:e0: d5:d8:aa:8f:af:ff:45:50:bb:57:18:7f:92:ae:49: e9:a5:8a:27:b1:7c:46:e3:5c:35:a7:1f:58:b4:dd: 10:ed:92:69:fb:85:e9:e3:71:9c:8a:eb:fd:9a:86: ef:1d:98:02:49:4e:e2:cb:b3:1f:e8:2b:29:84:66: 95:63:23:b3:7b:56:8b:0e:03:b5:7c:2e:53:25:f4: 25:f7:1b:24:c5:4e:3d:12:71:3c:70:47:02:19:fa: 60:1a:c1:90:47:77:b1:f1:b2:01:73:cd:ca:63:59: a9:12:a0:c9:1c:a9:8d:f7:ad:64:7e:19:46:57:15: 2c:04:ea:0c:cf:12:7c:3e:ee:ae:15:41:b3:77:41: 98:d2:19:4f:a2:26:1d:87:f4:d6:f9:00:fe:46:5e: 37:22:b7:86:e2:42:04:a2:36:9d:a9:e6:36:93:75: f8:d5:95:69:1a:b8:1f:d8:e1:f9:93:01:6a:fb:16: 00:80:47:61:cc:ef:f5:45:70:3c:dd:1b:98:4f:20: d1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:22:E4:D5:8E:5E:72:2D:69:8A:7E:C9:9C:92:DA:3C:98:9D:58:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl X509v3 Authority Key Identifier: keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer sbgp-ipAddrBlock: critical IPv4: 195.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8b:65:6a:57:28:ea:e5:a9:28:a1:1c:76:ef:ec:e4:7d:d2: c4:e5:a4:5f:c4:b8:41:f2:8c:15:35:4a:69:fb:c0:bf:cb:97: 85:90:5f:b0:02:a1:ca:c8:52:eb:0b:3d:68:ef:89:72:35:ff: a8:4a:b1:a4:98:8c:e4:6a:0c:f4:07:fe:bf:dc:88:b0:2d:1f: 3e:53:c8:9e:5b:89:24:50:09:7b:f2:e0:48:e5:ca:3f:41:5b: 59:c4:e7:34:52:86:54:a0:a8:1b:1e:94:32:47:87:a6:af:26: b4:15:e3:0a:5f:45:35:fd:ca:27:bb:a8:ca:3f:20:e3:1f:71: 38:67:97:50:26:ba:54:5c:48:c8:09:55:6a:77:20:91:b8:ae: eb:d5:b4:d8:03:7f:06:28:b5:2c:f4:5a:d9:b0:82:f7:2e:66: d0:ee:57:4b:1e:64:1f:b8:d9:67:ac:6c:ea:b1:c7:01:24:bc: 0c:ee:99:9a:d6:27:bd:84:df:5b:fa:15:7b:10:16:c3:94:d0: 34:e3:85:5d:cd:62:d5:60:a2:73:cb:50:52:45:9f:64:07:a9: 53:15:9f:aa:4c:a4:16:42:86:a4:a6:61:f3:57:08:d6:4b:04: 8b:13:cb:e1:7b:ba:26:d6:cb:3f:2d:d6:48:7a:5b:1e:8a:ef: f3:49:b2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXX6bZW5fSImSXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFh MjU4MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZjkwNmIzYTQtNzdiYi00OTdmLWE0MzgtNWQwNDU5ZThmMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxK0w5Z2CStn7tv247kn4ts3+69PHNEBlxVs X/XG1BK7c+WRpfheKNpb0dGrKZIDtTlF5EOWepTtw+DV2KqPr/9FULtXGH+Srknp pYonsXxG41w1px9YtN0Q7ZJp+4Xp43Gciuv9mobvHZgCSU7iy7Mf6CsphGaVYyOz e1aLDgO1fC5TJfQl9xskxU49EnE8cEcCGfpgGsGQR3ex8bIBc83KY1mpEqDJHKmN 961kfhlGVxUsBOoMzxJ8Pu6uFUGzd0GY0hlPoiYdh/TW+QD+Rl43IreG4kIEojad qeY2k3X41ZVpGrgf2OH5kwFq+xYAgEdhzO/1RXA83RuYTyDRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4i5NWOXnItaYp+yZyS2jyYnVjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5 ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvNmI5OGRhNTYtNmQwNS0z YWY5LTg4MjYtZjdhNzBkYTE3OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2YyOWVlN2UtZWExMi00MGU1LWE2 OGUtM2QwMDJjNmFhMjU4L2NmMjllZTdlLWVhMTItNDBlNS1hNjhlLTNkMDAyYzZh YTI1OC5jcmwwHwYDVR0jBBgwFoAUnjVyGUrjpjOocfCJHCgFY27TmmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAw MmM2YWEyNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1UkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuLZWpXKOrlqSihHHbv7OR90sTlpF/EuEHyjBU1Smn7wL/Ll4WQX7AC ocrIUusLPWjviXI1/6hKsaSYjORqDPQH/r/ciLAtHz5TyJ5biSRQCXvy4Ejlyj9B W1nE5zRShlSgqBselDJHh6avJrQV4wpfRTX9yie7qMo/IOMfcThnl1AmulRcSMgJ VWp3IJG4ruvVtNgDfwYotSz0WtmwgvcuZtDuV0seZB+42WesbOqxxwEkvAzumZrW J72E31v6FXsQFsOU0DTjhV3NYtVgonPLUFJFn2QHqVMVn6pMpBZChqSmYfNXCNZL BIsTy+F7uibWyz8t1kh6Wx6K7/NJsmc= -----END CERTIFICATE-----Generated at Tue Oct 6 01:41:33 2026 by rpki-client