$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/468cb492-8b73-378f-962c-116a57aa5b3a.roa File: 468cb492-8b73-378f-962c-116a57aa5b3a.roa (raw, json) Hash identifier: E+OW4EqYys25Axzye926llAtZdvodMxRcnysleZeYGk= Subject key identifier: 25:2F:AB:8D:94:8C:04:16:73:38:36:86:8C:F4:1E:BD:B7:FE:7C:BF Certificate issuer: /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Certificate serial: 010D0C9F4328584AF5212BE88F0BFC699216F980 Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/468cb492-8b73-378f-962c-116a57aa5b3a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 195.85.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2b:e8:8f:0b:fc:69:92:16:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a8c68da2-4409-421d-babd-587d5dd93f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:ae:63:b9:97:4f:28:1d:b0:50:9e:8d:35: a1:03:8d:37:c5:81:d8:17:ea:18:60:07:0b:de:02: 4f:89:c6:09:cd:0a:c3:e8:08:5c:69:62:a9:4b:a1: d4:f8:12:6d:db:6c:19:96:f1:85:af:e6:34:a1:64: dc:4e:1c:ab:b6:65:7f:8e:c1:3b:ff:91:3f:83:93: 54:37:3e:94:a2:84:5d:20:87:e1:e1:62:ca:c6:b1: b2:c1:66:2c:50:71:d7:65:e7:7a:c7:8e:ad:2a:2d: ea:8d:c2:c2:f9:b6:3d:c5:b6:33:a8:a4:5f:2e:e5: f7:ee:c2:cb:ba:65:da:6e:35:e2:45:41:16:5d:b6: 8d:5b:b2:fb:9b:18:da:ea:26:cf:a1:a6:6f:24:82: 43:24:e7:b3:8d:62:23:ab:46:85:99:2f:9e:fa:c6: 7f:9b:b6:d7:be:0a:65:74:2c:6c:be:ce:d7:8c:a5: 5b:a9:4e:cf:dc:d1:52:75:43:51:09:58:7f:f7:6b: 31:24:b0:f7:91:67:a4:76:08:fe:1b:20:41:bc:c6: 92:fe:14:ca:df:65:2e:51:7e:25:cc:c1:98:8c:3c: 11:0f:58:87:5b:aa:d0:df:7c:e7:b4:93:9d:99:fa: de:4d:c6:0a:5d:62:ad:a2:0a:57:80:17:3b:b3:bf: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2F:AB:8D:94:8C:04:16:73:38:36:86:8C:F4:1E:BD:B7:FE:7C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/468cb492-8b73-378f-962c-116a57aa5b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl X509v3 Authority Key Identifier: keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer sbgp-ipAddrBlock: critical IPv4: 195.85.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:82:b9:f5:e0:30:dc:70:82:0f:a6:90:1e:0b:e8:6c:d1:5e: da:f8:2b:9a:5c:d2:90:b9:c1:84:ad:8a:f6:0d:52:58:a3:a2: 54:57:10:aa:3d:ae:78:00:9c:82:4a:3b:39:22:2f:b3:d8:b9: f4:1c:f8:05:d8:9d:29:87:e2:61:e9:b1:b1:d5:f6:27:b7:76: 35:20:97:30:fd:2e:b9:7d:27:08:26:67:93:0e:6e:61:a2:5f: 80:37:e8:2d:9c:16:a0:2b:67:87:f2:18:f6:57:52:4c:6b:67: b0:2b:21:09:d6:39:13:6e:02:fe:10:10:36:92:6a:07:3c:a1: 5e:49:ec:7f:c5:36:c4:ac:82:1f:2a:41:39:97:04:08:bd:2c: 4d:b1:62:f4:12:30:fa:fe:f9:3d:21:96:2d:45:46:be:3a:6e: 07:50:87:6f:a8:bd:6c:be:1c:9c:b3:74:35:4b:68:ce:55:1f: b2:6c:e5:70:9c:b5:29:d4:1b:cd:57:80:e9:cb:da:c1:a4:b5: 64:f2:ba:02:03:bb:dd:f4:62:40:80:59:07:6e:82:9e:bd:99: 0b:b9:05:97:97:2d:83:ef:ec:6a:d9:e1:64:4d:3b:32:29:cc: 45:7b:64:34:23:c5:e6:05:fc:77:37:1d:4a:9d:5e:1d:fb:cd: c4:99:34:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISvojwv8aZIW+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUwZWJjZTMtZGRmNS00ZmIwLWI4ZWQtYjlhNDVkOGI0 NmIyMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YThjNjhkYTItNDQwOS00MjFkLWJhYmQtNTg3ZDVkZDkzZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN+uY7mXTygdsFCejTWhA403xYHYF+oYYAcL 3gJPicYJzQrD6AhcaWKpS6HU+BJt22wZlvGFr+Y0oWTcThyrtmV/jsE7/5E/g5NU Nz6UooRdIIfh4WLKxrGywWYsUHHXZed6x46tKi3qjcLC+bY9xbYzqKRfLuX37sLL umXabjXiRUEWXbaNW7L7mxja6ibPoaZvJIJDJOezjWIjq0aFmS+e+sZ/m7bXvgpl dCxsvs7XjKVbqU7P3NFSdUNRCVh/92sxJLD3kWekdgj+GyBBvMaS/hTK32UuUX4l zMGYjDwRD1iHW6rQ33zntJOdmfreTcYKXWKtogpXgBc7s79SUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUvq42UjAQWczg2hoz0Hr23/ny/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBl YmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0NWQ4YjQ2YjIvNDY4Y2I0OTItOGI3My0z NzhmLTk2MmMtMTE2YTU3YWE1YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjUwZWJjZTMtZGRmNS00ZmIwLWI4 ZWQtYjlhNDVkOGI0NmIyL2I1MGViY2UzLWRkZjUtNGZiMC1iOGVkLWI5YTQ1ZDhi NDZiMi5jcmwwHwYDVR0jBBgwFoAUVs/TeO1FMPG70WFTkaT81Dem6iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBlYmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0 NWQ4YjQ2YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCCufXgMNxwgg+mkB4L6GzRXtr4K5pc0pC5wYStivYNUlijolRXEKo9 rngAnIJKOzkiL7PYufQc+AXYnSmH4mHpsbHV9ie3djUglzD9Lrl9JwgmZ5MObmGi X4A36C2cFqArZ4fyGPZXUkxrZ7ArIQnWORNuAv4QEDaSagc8oV5J7H/FNsSsgh8q QTmXBAi9LE2xYvQSMPr++T0hli1FRr46bgdQh2+ovWy+HJyzdDVLaM5VH7Js5XCc tSnUG81XgOnL2sGktWTyugIDu930YkCAWQdugp69mQu5BZeXLYPv7GrZ4WRNOzIp zEV7ZDQjxeYF/Hc3HUqdXh37zcSZNDg= -----END CERTIFICATE-----Generated at Sun Aug 31 22:08:28 2025 by rpki-client