$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dc280ffb-3345-3e75-bd8e-af377beca73f.roa File: dc280ffb-3345-3e75-bd8e-af377beca73f.roa (raw, json) Hash identifier: x6Eteb8+mTTEG/U/WIBFR5sOrgHeZXWLP3OSZk++q4I= Subject key identifier: D3:BF:DB:3E:49:EA:61:8F:A3:57:14:30:18:A2:28:4F:6D:A4:73:1C Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584DE64EA9E3546CC19B46E07666 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dc280ffb-3345-3e75-bd8e-af377beca73f.roa Signing time: Wed 20 May 2026 19:56:00 +0000 ROA not before: Wed 20 May 2026 19:56:00 +0000 ROA not after: Tue 18 Aug 2026 19:56:00 +0000 asID: 14054 IP address blocks: 85.155.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:4e:a9:e3:54:6c:c1:9b:46:e0:76:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: May 20 19:56:00 2026 GMT Not After : Aug 18 19:56:00 2026 GMT Subject: CN=1701fc42-5931-49ce-934f-057bd837c786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:45:b4:15:71:d4:d9:a4:64:d7:ad:a4:c7: 3d:51:e3:26:6f:3d:2c:1c:d2:36:af:76:2d:89:da: ff:69:7b:61:25:72:44:0b:5e:b1:c3:06:70:12:da: 9c:cc:84:7c:82:bf:ef:a0:e7:09:32:02:1c:58:96: 27:e3:b8:05:41:d6:be:71:18:30:41:0a:17:12:b9: 5e:03:36:2a:40:f3:69:60:10:45:66:00:0b:8c:82: b4:b1:27:5d:a2:d0:35:ef:67:ef:38:29:53:ae:2c: 97:50:95:bd:b4:1d:c5:fc:8d:05:a5:08:d7:ee:f4: 5b:12:83:0c:2b:06:da:ee:5e:26:2f:17:74:ce:1b: f8:32:6e:77:14:ee:8d:76:be:70:f2:cd:bc:ce:e8: e3:54:a2:ff:65:af:b6:6b:c9:d0:7c:c3:89:50:5b: b0:ef:16:a7:72:1b:01:b8:cd:f7:f6:32:86:85:f4: 4f:09:38:53:61:8d:75:45:c9:90:38:55:68:1c:11: 5a:be:b1:32:15:ab:0a:14:68:e6:5a:58:5a:25:ff: 4b:ec:61:f7:86:c8:e3:bd:4d:11:2b:e5:86:32:fd: e0:58:65:f0:5d:ec:9b:43:84:c8:27:f0:db:b4:e9: 22:4a:2b:9c:b8:a5:52:4d:c6:f6:b2:bb:b3:b5:3c: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BF:DB:3E:49:EA:61:8F:A3:57:14:30:18:A2:28:4F:6D:A4:73:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dc280ffb-3345-3e75-bd8e-af377beca73f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv4: 85.155.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:29:9a:aa:7d:26:c5:52:dc:59:2d:25:53:12:81:37:d6:ce: 05:f1:69:00:4e:1e:47:08:cc:5e:84:fb:8d:e1:69:e9:42:97: 03:60:44:a8:50:bd:b4:04:8d:eb:3e:ef:3a:1e:ad:c2:4d:ee: 6e:0e:d0:12:e7:84:af:fd:a4:9d:fe:54:c8:f1:c1:8d:b5:71: 55:52:07:32:0b:bb:f9:f2:97:72:21:bf:2d:ab:2c:7e:70:55: d6:39:03:6c:94:9b:cb:7f:f9:17:67:52:89:2a:f3:2c:0e:dc: 1d:bb:22:8c:1d:42:c5:01:b6:99:fa:a5:fb:57:c0:b4:d3:66: cb:a1:75:0f:a8:7e:1e:98:ef:2f:a0:0f:a2:a2:55:17:c5:20: 52:a1:99:33:07:0d:c1:63:ba:4b:a0:5d:c4:b9:f3:54:91:1b: 53:84:ad:f7:4c:b5:5d:0e:8c:27:c7:7c:8c:ee:19:a7:38:74: 66:82:2f:78:db:70:fb:c7:c0:a4:8e:85:ee:b4:68:49:21:44: 93:46:39:b7:06:2f:ed:1d:36:f2:f0:3b:6b:3b:4a:d5:0b:c7: dd:ab:81:8b:ab:26:87:79:b0:d1:95:2e:7b:59:e6:74:43:7f: 2f:b8:a0:8a:da:6b:8a:51:ab:bf:f5:fb:8d:c6:b0:9a:0c:ad: ba:5d:82:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3mTqnjVGzBm0bgdmYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDUyMDE5NTYwMFoXDTI2MDgxODE5NTYwMFowLzEtMCsGA1UEAxMk MTcwMWZjNDItNTkzMS00OWNlLTkzNGYtMDU3YmQ4MzdjNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMpFtBVx1NmkZNetpMc9UeMmbz0sHNI2r3Yt idr/aXthJXJEC16xwwZwEtqczIR8gr/voOcJMgIcWJYn47gFQda+cRgwQQoXErle AzYqQPNpYBBFZgALjIK0sSddotA172fvOClTriyXUJW9tB3F/I0FpQjX7vRbEoMM Kwba7l4mLxd0zhv4Mm53FO6Ndr5w8s28zujjVKL/Za+2a8nQfMOJUFuw7xanchsB uM339jKGhfRPCThTYY11RcmQOFVoHBFavrEyFasKFGjmWlhaJf9L7GH3hsjjvU0R K+WGMv3gWGXwXeybQ4TIJ/DbtOkiSiucuKVSTcb2sruztTzG1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO/2z5J6mGPo1cUMBiiKE9tpHMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvZGMyODBmZmItMzM0NS0z ZTc1LWJkOGUtYWYzNzdiZWNhNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVZuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYpmqp9JsVS3FktJVMSgTfWzgXxaQBOHkcIzF6E+43haelClwNgRKhQ vbQEjes+7zoercJN7m4O0BLnhK/9pJ3+VMjxwY21cVVSBzILu/nyl3Ihvy2rLH5w VdY5A2yUm8t/+RdnUokq8ywO3B27IowdQsUBtpn6pftXwLTTZsuhdQ+ofh6Y7y+g D6KiVRfFIFKhmTMHDcFjukugXcS581SRG1OErfdMtV0OjCfHfIzuGac4dGaCL3jb cPvHwKSOhe60aEkhRJNGObcGL+0dNvLwO2s7StULx92rgYurJod5sNGVLntZ5nRD fy+4oIraa4pRq7/1+43GsJoMrbpdgso= -----END CERTIFICATE-----Generated at Thu May 28 13:40:10 2026 by rpki-client