$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa File: b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa (raw, json) Hash identifier: LmOqQisj+Yxy7M6vG6pklLVrsqI1rGs4ikCfSma6QiA= Subject key identifier: E3:07:86:C7:5C:57:12:12:23:99:05:F0:7C:E4:83:A9:94:F7:5E:FC Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584EEEB7541532FD28C6E2971880 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 399629 IP address blocks: 193.149.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:54:15:32:fd:28:c6:e2:97:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=3087d4a4-b2ec-4ff0-8528-6ca322774d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:49:46:f5:6d:44:c8:37:bc:d4:5e:51:69: 3b:6d:fb:a6:08:0b:0c:80:db:42:c3:e1:0e:62:0c: 25:6e:ba:4b:24:de:81:9e:7a:ce:7d:8a:fa:d7:21: d0:43:36:87:32:bd:8d:64:de:0f:b9:8d:19:78:ae: 40:01:5a:32:93:87:c4:2d:7c:ce:79:5d:17:78:2b: cf:dc:50:bd:88:b9:96:17:13:a6:57:94:4e:2d:86: 0d:1c:f9:49:bd:e0:67:8a:46:51:20:8c:33:f0:95: 6b:1c:65:be:1d:ea:e8:c1:be:69:da:9c:de:c8:a9: 04:ae:d4:e2:35:24:4f:a8:10:67:7d:2e:d4:87:01: b5:fd:8a:78:0b:d2:1e:8c:1a:eb:90:e7:26:07:a2: 7a:e3:39:31:cf:b3:82:8d:0b:da:97:65:c8:e4:94: 02:a2:52:4f:d0:70:13:d2:ac:a5:ea:47:83:b3:dd: 7f:79:bc:0c:ae:7b:5f:d5:97:fe:ec:a3:ae:1b:b9: ae:47:75:03:1d:8b:72:8d:3b:e6:65:48:23:c9:db: 66:d0:34:d1:f3:99:a5:fe:36:8e:91:8f:5c:76:c2: 05:4b:2a:70:28:f1:a0:22:f2:94:89:6e:7a:0a:a6: ba:e5:f0:c2:b8:95:a8:bf:4f:b8:a2:d7:9e:d3:87: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:86:C7:5C:57:12:12:23:99:05:F0:7C:E4:83:A9:94:F7:5E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:02:25:62:ce:22:03:84:e7:c3:72:8f:8d:2a:64:a9:05:97: a9:56:ac:1c:9c:34:13:bf:ff:c6:81:a3:a6:19:c1:5c:5f:dc: d5:d2:57:6a:9e:52:6e:89:10:f1:a7:f4:0a:9f:91:8a:9d:86: 74:21:bb:8f:83:82:37:d7:50:57:c0:41:fa:f1:ab:63:da:e0: ef:4e:4b:b8:b7:d2:97:36:57:cd:d4:ac:d7:d3:d1:f3:31:ad: 6e:57:be:d3:f1:ab:2f:e1:17:7a:08:e3:38:30:4d:bd:3a:2c: 89:12:f5:e9:7d:39:59:15:bd:17:25:2f:4d:06:1b:a6:aa:ce: 3f:58:e1:71:53:b0:87:ce:6e:71:d9:7a:b1:41:4c:75:96:c2: 86:5e:8a:68:aa:28:f3:f7:f1:62:ec:6d:93:0c:fa:fb:ce:47: 09:c1:99:ad:ca:d3:f7:94:bc:59:64:84:93:c1:c5:e0:88:47: ce:be:55:24:c5:f0:b8:32:f6:ca:7c:d4:98:00:b5:2d:0f:43: b2:f5:fa:97:2b:f5:12:dc:a3:53:3e:9a:85:1a:a5:d9:c2:fe: 0c:9f:7a:0a:e3:75:54:b1:93:87:68:7c:f7:09:36:4a:cf:cd: 6f:91:3f:87:5a:b5:73:9f:27:e2:4d:87:fc:33:df:7d:d9:b2: af:af:23:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1QVMv0oxuKXGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzA4N2Q0YTQtYjJlYy00ZmYwLTg1MjgtNmNhMzIyNzc0ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMZJRvVtRMg3vNReUWk7bfumCAsMgNtCw+EO YgwlbrpLJN6BnnrOfYr61yHQQzaHMr2NZN4PuY0ZeK5AAVoyk4fELXzOeV0XeCvP 3FC9iLmWFxOmV5ROLYYNHPlJveBnikZRIIwz8JVrHGW+Herowb5p2pzeyKkErtTi NSRPqBBnfS7UhwG1/Yp4C9IejBrrkOcmB6J64zkxz7OCjQval2XI5JQColJP0HAT 0qyl6keDs91/ebwMrntf1Zf+7KOuG7muR3UDHYtyjTvmZUgjydtm0DTR85ml/jaO kY9cdsIFSypwKPGgIvKUiW56Cqa65fDCuJWov0+4otee04faowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMHhsdcVxISI5kF8Hzkg6mU9178MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYjZmYWFlNGYtNTM3Ny0z ODQwLTg4ZDEtZTk0NzVjYjRiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQCJWLOIgOE58Nyj40qZKkFl6lWrBycNBO//8aBo6YZwVxf3NXSV2qe Um6JEPGn9AqfkYqdhnQhu4+DgjfXUFfAQfrxq2Pa4O9OS7i30pc2V83UrNfT0fMx rW5XvtPxqy/hF3oI4zgwTb06LIkS9el9OVkVvRclL00GG6aqzj9Y4XFTsIfObnHZ erFBTHWWwoZeimiqKPP38WLsbZMM+vvORwnBma3K0/eUvFlkhJPBxeCIR86+VSTF 8Lgy9sp81JgAtS0PQ7L1+pcr9RLco1M+moUapdnC/gyfegrjdVSxk4dofPcJNkrP zW+RP4datXOfJ+JNh/wz333Zsq+vI7A= -----END CERTIFICATE-----Generated at Thu Aug 27 13:39:24 2026 by rpki-client