$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: wyCdwiMby4ZR33VengHFtrCul+mplRNDUa7kzXYZ/AI= Subject key identifier: 78:69:FE:97:10:79:4F:54:B5:28:D4:A9:42:EC:F8:F5:AE:76:DA:E7 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584E4C548A31577178A731A74430 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8a:31:57:71:78:a7:31:a7:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=5765c21f-cfac-45c9-9d4d-ed33ab78551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:be:0f:61:2e:58:2d:77:6e:80:5a:10:3c: c5:f1:c9:3e:ac:8a:3f:53:dc:b4:a5:d4:98:65:c8: 2d:59:8a:89:22:c1:63:65:5b:66:17:70:95:f2:8b: 57:48:58:b1:18:7e:d9:7f:f1:df:1b:c8:12:e3:e0: 4b:ae:51:00:ea:23:88:68:34:65:e0:58:22:5c:99: 0e:ca:91:d3:83:a5:90:71:ad:42:0b:56:d3:7e:0d: 98:00:19:6b:71:74:65:72:e9:c3:a4:31:d1:cb:85: 3f:6e:c2:2f:13:6a:cf:ad:b9:d5:ad:50:10:82:1e: 3d:03:63:8a:f0:79:d1:3c:f7:c4:6f:62:94:63:ff: da:64:1e:50:bb:19:1f:0b:04:cc:07:e8:33:f0:58: 69:25:74:59:b3:5f:f0:f7:04:f2:25:b8:58:ca:50: c9:d8:82:73:fd:c5:9e:e7:66:7a:6f:5d:bd:5c:a5: b1:b1:74:0b:43:64:8e:02:d0:bf:28:39:22:9d:4d: e6:bb:ae:f7:b5:e1:59:60:73:fe:e2:97:60:23:a1: 0d:ae:fe:d1:ae:28:b3:9f:c7:3f:a4:98:ca:58:7b: 39:85:c2:ea:a8:43:58:6d:ff:90:9d:5a:61:be:c7: 6c:3f:bf:96:66:da:02:a1:fd:f8:3a:2b:98:fe:46: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:69:FE:97:10:79:4F:54:B5:28:D4:A9:42:EC:F8:F5:AE:76:DA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9c:6b:e6:06:92:51:e5:d1:57:22:f3:76:16:84:4e:d8:df: 9c:3f:f2:74:ea:b7:62:74:5c:6c:8c:5f:10:99:53:1e:ee:8f: 76:ad:1d:fa:1f:0e:e9:28:77:23:a2:d7:63:16:c2:3c:19:72: 5e:3e:ba:c6:dc:4e:db:d0:6e:1d:5b:31:54:6d:33:21:58:b1: 64:71:dc:1c:a5:60:df:32:ba:23:49:47:b3:1c:b8:eb:b9:40: a2:1f:a9:16:40:2e:22:b8:9e:7e:bd:d2:7d:bf:f7:cf:17:28: 63:94:16:01:42:2c:5a:39:2c:1e:fb:c3:2f:f9:36:fe:8d:c6: 89:64:b3:1e:64:04:36:9f:1f:0c:ff:ea:af:ba:f9:07:37:51: a6:a8:6d:64:62:e6:2c:1e:02:72:22:c0:c6:d4:4f:e0:28:19: a1:f4:1e:38:da:0d:ea:33:48:06:61:ca:0a:5c:b9:bd:14:0c: 27:9c:27:67:f5:ed:2f:48:5b:ef:3c:44:ce:47:07:11:8c:53: 97:04:5a:b1:ec:35:5a:9a:e4:eb:4a:81:d4:53:24:ec:e7:da: b5:d5:40:85:bc:23:5b:23:14:f5:64:91:f3:72:0f:7a:0c:26: ac:90:a1:d6:9a:5b:76:9c:37:b3:c7:09:93:e4:c6:58:e8:31: 1b:b3:4f:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVIoxV3F4pzGnRDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTc2NWMyMWYtY2ZhYy00NWM5LTlkNGQtZWQzM2FiNzg1NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG++D2EuWC13boBaEDzF8ck+rIo/U9y0pdSY ZcgtWYqJIsFjZVtmF3CV8otXSFixGH7Zf/HfG8gS4+BLrlEA6iOIaDRl4FgiXJkO ypHTg6WQca1CC1bTfg2YABlrcXRlcunDpDHRy4U/bsIvE2rPrbnVrVAQgh49A2OK 8HnRPPfEb2KUY//aZB5QuxkfCwTMB+gz8FhpJXRZs1/w9wTyJbhYylDJ2IJz/cWe 52Z6b129XKWxsXQLQ2SOAtC/KDkinU3mu673teFZYHP+4pdgI6ENrv7Rriizn8c/ pJjKWHs5hcLqqENYbf+QnVphvsdsP7+WZtoCof34OiuY/kbdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhp/pcQeU9UtSjUqULs+PWudtrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ca+YGklHl0Vci83YWhE7Y35w/8nTqt2J0XGyMXxCZUx7uj3atHfof DukodyOi12MWwjwZcl4+usbcTtvQbh1bMVRtMyFYsWRx3BylYN8yuiNJR7McuOu5 QKIfqRZALiK4nn690n2/988XKGOUFgFCLFo5LB77wy/5Nv6Nxolksx5kBDafHwz/ 6q+6+Qc3UaaobWRi5iweAnIiwMbUT+AoGaH0HjjaDeozSAZhygpcub0UDCecJ2f1 7S9IW+88RM5HBxGMU5cEWrHsNVqa5OtKgdRTJOzn2rXVQIW8I1sjFPVkkfNyD3oM JqyQodaaW3acN7PHCZPkxljoMRuzTyY= -----END CERTIFICATE-----Generated at Thu Jul 2 11:29:06 2026 by rpki-client