$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: crHuRgQtGKnlzmoKu/OMw2K6b1CfnQbUdr4Qs9pRjAY= Subject key identifier: 4E:71:40:18:8F:8A:E7:69:3E:FA:94:C1:C6:B4:BA:25:E9:8D:21:28 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584ACB40E659F47FB63EF881A080 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e6:59:f4:7f:b6:3e:f8:81:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=d8ab302f-0c97-4daa-a78c-a4d15730aa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e0:4a:7d:97:f1:c4:3b:33:6f:e3:05:22:31: d3:13:92:8f:7a:7e:89:cd:78:0a:2f:ff:07:d5:56: 05:02:b9:67:35:b3:fd:1a:02:96:c0:2d:08:24:6c: 19:7d:74:e6:26:87:69:20:0b:61:dd:e0:e7:d8:0e: a0:3e:f3:d5:4a:56:d4:d5:13:db:60:57:db:25:72: c5:e3:ff:b6:85:a5:da:31:a1:de:0e:cb:09:58:7b: 79:7e:92:d6:55:2c:39:ae:ad:86:31:6f:8d:2a:c8: 7d:21:8a:d7:d9:6c:f8:e4:16:b6:03:15:bc:5c:52: df:f1:46:c3:6a:1e:00:15:66:c6:9f:d0:70:c1:84: 70:59:72:1b:5c:62:5d:cb:e6:03:5e:69:87:65:c6: 03:ca:9e:98:2e:7d:6a:0d:a2:1d:02:f9:4a:ce:61: b6:40:82:d5:eb:0d:0e:15:58:d3:32:3d:d6:c2:d0: 00:ae:f1:1c:22:3b:76:13:bd:8a:e7:e8:7b:e5:b7: a7:12:34:c5:9f:a2:bb:22:a5:b4:8a:21:00:a5:bd: 1d:8f:ea:80:59:91:bb:c8:10:6c:88:6b:23:33:64: c4:02:f1:20:db:77:18:07:4c:a3:f9:ff:cb:85:5b: a6:e6:24:8b:e7:a9:33:57:9c:85:2d:fd:3f:19:c0: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:71:40:18:8F:8A:E7:69:3E:FA:94:C1:C6:B4:BA:25:E9:8D:21:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b2:7c:cd:4c:63:fd:fb:1d:cf:a8:c5:ec:ab:0a:f3:a3:52: 91:7b:9d:84:8a:4e:00:1e:af:0b:1f:7b:d1:61:5c:f2:b1:1f: d5:9a:ae:5f:62:c7:2a:1c:19:a1:ba:a3:a8:7f:2a:e4:4b:5d: fd:e3:5a:28:1c:5d:b3:b8:d8:b0:57:36:ff:54:4c:e1:b0:9e: 07:2c:0b:4d:e6:53:0a:ac:bc:a2:72:b0:c1:b6:7c:8a:85:0e: 30:13:71:e0:fa:03:90:de:5d:16:f8:f3:fa:94:45:e2:ba:1c: cd:39:06:14:1b:5c:17:23:1c:b8:30:4d:1e:f2:79:65:1b:d6: 72:c0:e7:9d:3d:37:2c:8c:2d:12:ad:39:af:da:f6:92:f3:96: a1:9d:54:63:a6:2c:e5:da:13:8a:94:e9:59:84:72:6d:12:e4: 95:00:65:4d:47:2b:32:b9:5b:5d:f8:c8:d0:4f:03:19:a2:da: 98:cc:57:29:96:9c:af:0c:de:53:6d:cc:dd:20:a2:a4:f0:aa: 24:7e:22:9f:99:74:0d:8e:2c:4b:fd:a3:cd:96:e3:be:cb:53: 76:13:dd:68:31:18:e0:b5:8c:c0:65:82:1b:73:40:b0:35:15: 33:97:fe:7f:6e:3a:ae:8e:29:be:cb:3d:3a:17:99:83:69:5b: 8b:35:63:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOZZ9H+2PviBoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDhhYjMwMmYtMGM5Ny00ZGFhLWE3OGMtYTRkMTU3MzBhYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uBKfZfxxDszb+MFIjHTE5KPen6JzXgKL/8H 1VYFArlnNbP9GgKWwC0IJGwZfXTmJodpIAth3eDn2A6gPvPVSlbU1RPbYFfbJXLF 4/+2haXaMaHeDssJWHt5fpLWVSw5rq2GMW+NKsh9IYrX2Wz45Ba2AxW8XFLf8UbD ah4AFWbGn9BwwYRwWXIbXGJdy+YDXmmHZcYDyp6YLn1qDaIdAvlKzmG2QILV6w0O FVjTMj3WwtAArvEcIjt2E72K5+h75benEjTFn6K7IqW0iiEApb0dj+qAWZG7yBBs iGsjM2TEAvEg23cYB0yj+f/LhVum5iSL56kzV5yFLf0/GcBcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5xQBiPiudpPvqUwca0uiXpjSEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIayfM1MY/37Hc+oxeyrCvOjUpF7nYSKTgAerwsfe9FhXPKxH9Warl9i xyocGaG6o6h/KuRLXf3jWigcXbO42LBXNv9UTOGwngcsC03mUwqsvKJysMG2fIqF DjATceD6A5DeXRb48/qUReK6HM05BhQbXBcjHLgwTR7yeWUb1nLA5509NyyMLRKt Oa/a9pLzlqGdVGOmLOXaE4qU6VmEcm0S5JUAZU1HKzK5W134yNBPAxmi2pjMVymW nK8M3lNtzN0goqTwqiR+Ip+ZdA2OLEv9o82W477LU3YT3WgxGOC1jMBlghtzQLA1 FTOX/n9uOq6OKb7LPToXmYNpW4s1Y2c= -----END CERTIFICATE-----Generated at Thu Aug 21 10:27:37 2025 by rpki-client