$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: 7hfgDZFSxLa+BpYQfT77kokPlh++/ImR9A7ZLsvUSFw= Subject key identifier: D3:81:6C:FB:CE:AE:B7:74:5A:D6:DB:7D:12:C1:C2:C2:05:13:8F:D4 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584EEEB7542F36FC6D67DBA81BE0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:54:2f:36:fc:6d:67:db:a8:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=1ebd5880-a483-435a-9205-a0a647773c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:69:e5:b9:81:2f:8d:77:55:7c:21:41:19: 6a:b2:40:69:4b:d5:c4:b2:68:44:73:31:29:07:ec: be:7c:e6:35:e3:7b:e9:1e:80:c8:f2:e6:4a:de:2e: 30:1b:c2:72:95:2b:8d:96:a3:22:dd:91:37:47:5b: b7:f2:57:c6:eb:f8:29:36:78:0a:79:31:bc:f6:76: 13:47:2c:f7:cd:25:8a:d6:37:6f:14:90:fd:f8:21: 2f:98:7a:c8:13:36:a5:99:2a:2e:be:52:c8:87:28: 4e:e1:c1:c3:29:2a:e5:db:96:50:e8:16:c6:fb:3a: c2:99:d2:03:97:61:dc:33:f9:31:b6:34:a1:55:3f: 67:ed:42:b5:3c:20:9d:d3:cf:99:e5:c9:e8:0b:35: 0b:9c:f6:03:d0:0b:4a:3e:30:a8:a3:d8:a7:6b:ec: 1a:ca:13:f5:2a:cf:69:1b:63:3a:72:48:cb:e9:1c: 19:9e:47:61:ef:ec:d0:86:1b:f9:21:e8:7b:bb:ae: a4:95:2c:fe:db:93:4e:9e:ca:7a:04:8b:12:b1:2d: d7:eb:2d:02:7b:f9:f9:ba:fd:85:63:06:f7:df:04: 80:4d:be:55:0d:7e:05:49:3e:17:63:79:85:fb:ec: 2c:99:78:dc:f8:73:4e:1c:62:5e:e3:ef:b0:78:0a: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:6C:FB:CE:AE:B7:74:5A:D6:DB:7D:12:C1:C2:C2:05:13:8F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fd:fa:44:dd:97:61:7d:83:1e:d9:8d:a7:f4:dd:fb:27:d3: 00:e3:28:45:cc:12:68:cb:0a:e5:9a:94:c4:f0:2d:28:fe:6d: f8:12:b0:e2:d6:9b:ba:c2:e6:ef:28:94:d7:93:be:9b:2f:ba: 2c:42:be:f9:8a:6e:8f:74:6a:bc:c1:b7:bf:6a:62:d5:08:2a: f0:20:38:15:30:43:87:a3:a4:da:c8:62:62:83:be:ea:49:dc: 55:c4:47:34:8b:ae:8a:aa:c9:c7:5c:1f:0d:3c:9f:f8:1f:a6: 5b:74:f5:e9:22:f2:7c:f3:2f:0e:6a:1a:41:64:d6:eb:f9:fd: fa:93:96:bc:fb:57:e7:11:c2:e1:ba:d9:4e:5a:18:98:7d:93: 30:ee:bf:eb:6f:02:3b:53:4c:e0:b9:68:b4:e5:11:90:89:7c: 10:a6:25:d1:b4:f4:b8:ba:b1:13:f5:cf:b3:8d:80:48:66:4a: a2:74:d7:5a:04:2d:c4:6c:89:9f:53:8b:0e:86:84:1f:35:37: 2b:18:d3:5c:b9:4b:1f:10:d3:85:95:58:12:8a:e9:58:69:58: a8:ea:60:cd:35:59:73:03:d5:12:bd:a6:d9:ea:8b:dd:de:f0: 7f:94:52:b9:6d:3f:eb:dd:02:27:79:07:41:91:2f:97:6b:bb: 7b:67:23:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1QvNvxtZ9uoG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MWViZDU4ODAtYTQ4My00MzVhLTkyMDUtYTBhNjQ3NzczYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Shp5bmBL413VXwhQRlqskBpS9XEsmhEczEp B+y+fOY143vpHoDI8uZK3i4wG8JylSuNlqMi3ZE3R1u38lfG6/gpNngKeTG89nYT Ryz3zSWK1jdvFJD9+CEvmHrIEzalmSouvlLIhyhO4cHDKSrl25ZQ6BbG+zrCmdID l2HcM/kxtjShVT9n7UK1PCCd08+Z5cnoCzULnPYD0AtKPjCoo9ina+wayhP1Ks9p G2M6ckjL6RwZnkdh7+zQhhv5Ieh7u66klSz+25NOnsp6BIsSsS3X6y0Ce/n5uv2F Ywb33wSATb5VDX4FST4XY3mF++wsmXjc+HNOHGJe4++weAreYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOBbPvOrrd0WtbbfRLBwsIFE4/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj9+kTdl2F9gx7Zjaf03fsn0wDjKEXMEmjLCuWalMTwLSj+bfgSsOLW m7rC5u8olNeTvpsvuixCvvmKbo90arzBt79qYtUIKvAgOBUwQ4ejpNrIYmKDvupJ 3FXERzSLroqqycdcHw08n/gfplt09eki8nzzLw5qGkFk1uv5/fqTlrz7V+cRwuG6 2U5aGJh9kzDuv+tvAjtTTOC5aLTlEZCJfBCmJdG09Li6sRP1z7ONgEhmSqJ011oE LcRsiZ9Tiw6GhB81NysY01y5Sx8Q04WVWBKK6VhpWKjqYM01WXMD1RK9ptnqi93e 8H+UUrltP+vdAid5B0GRL5dru3tnIyw= -----END CERTIFICATE-----Generated at Thu Aug 27 13:40:48 2026 by rpki-client