$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dc280ffb-3345-3e75-bd8e-af377beca73f.roa File: dc280ffb-3345-3e75-bd8e-af377beca73f.roa (raw, json) Hash identifier: MEVntbSfz1rTnJfO3GvFqbzagX235Mzr/wm6sNxT4/E= Subject key identifier: D1:4E:05:F7:42:25:9E:50:54:B0:5C:C3:41:5B:E4:03:07:CA:4A:C4 Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584F49747056C98F546615D98600 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dc280ffb-3345-3e75-bd8e-af377beca73f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14054 IP address blocks: 85.155.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:70:56:c9:8f:54:66:15:d9:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d5a2686-3d77-4eca-97dc-4e115308b32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:92:4a:1d:35:ee:78:51:eb:10:51:d1:d3: ef:49:78:ae:37:c3:aa:35:84:02:a7:d3:31:37:89: 3b:82:92:6b:12:7c:90:56:76:ec:f0:73:c4:c7:75: e1:ad:ce:c5:4b:ca:6b:2f:ae:9c:b6:ab:e8:e5:65: db:93:32:97:70:4f:c5:bc:fe:a3:60:ce:bd:08:45: 13:ac:6b:6f:2c:85:da:08:f3:81:20:57:eb:9a:f2: 3e:37:2b:07:86:0f:28:3c:e5:d1:72:15:60:e4:46: 01:37:08:8c:41:f4:f6:f3:83:43:a4:65:07:71:03: 76:c0:38:36:22:61:1f:af:0d:4d:29:eb:0e:87:67: 39:00:9e:de:9f:10:4b:e8:dc:a5:09:94:e5:ea:11: 50:62:a5:47:51:65:90:0a:65:ba:4c:99:d0:49:17: 52:13:a7:2f:5b:cd:e8:07:4a:07:66:7a:d0:15:91: a3:74:3c:4c:f4:fb:58:c9:3d:73:db:ba:bf:19:15: f7:5d:55:7a:ec:6f:ac:30:fe:95:c9:bd:06:f3:23: 9e:76:56:8a:ce:dc:db:be:12:a7:43:11:a8:b6:c1: d6:fd:49:4a:33:f5:85:3c:0f:89:fc:fa:ee:36:13: 38:99:41:31:0a:29:0c:f7:56:c1:e7:da:63:85:26: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4E:05:F7:42:25:9E:50:54:B0:5C:C3:41:5B:E4:03:07:CA:4A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dc280ffb-3345-3e75-bd8e-af377beca73f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv4: 85.155.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:14:9e:8e:b1:69:a3:77:ac:52:2e:26:da:cb:79:cc:49:b3: 39:b7:40:4f:f7:ec:14:42:4f:d0:11:f4:32:a4:98:76:6f:44: e7:39:8d:b2:a7:1e:a2:22:7b:67:ef:0d:d3:a7:8e:8c:88:82: 82:0f:00:47:ab:80:6a:40:a2:d6:f0:73:7b:7c:f5:a6:74:c9: ea:c5:d0:9a:fa:b5:ef:7f:55:f7:ef:6a:20:9d:cd:c2:cd:6a: ad:f9:6e:bd:19:11:0b:5a:d4:c8:25:e3:83:f2:2e:91:a7:3c: 90:ef:00:9b:62:03:e0:e3:01:50:f5:6d:08:e4:0c:b6:d4:a0: b1:84:af:33:36:2b:13:fd:1e:6b:38:89:40:fe:2e:fd:54:95: e1:ad:75:36:10:cf:30:08:8d:f7:27:1c:b4:9a:19:d5:6f:0c: 82:c6:b8:25:33:5c:81:5b:b2:f9:01:6f:18:7d:9d:67:98:ff: 5a:c0:0a:54:0d:98:0f:bc:3f:b7:3a:9a:b2:1a:83:22:1e:e9: 7a:75:a0:a8:90:8e:90:0a:f8:91:49:d2:53:32:f6:ae:1b:90: c9:37:5e:8d:6b:a0:33:cb:bb:6b:c8:ad:eb:69:9f:a9:55:d7: 25:28:2c:6d:bc:23:91:cb:05:88:4a:5a:07:30:e4:6e:4d:f1: 12:64:ed:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHBWyY9UZhXZhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Q1YTI2ODYtM2Q3Ny00ZWNhLTk3ZGMtNGUxMTUzMDhiMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR6SSh017nhR6xBR0dPvSXiuN8OqNYQCp9Mx N4k7gpJrEnyQVnbs8HPEx3Xhrc7FS8prL66ctqvo5WXbkzKXcE/FvP6jYM69CEUT rGtvLIXaCPOBIFfrmvI+NysHhg8oPOXRchVg5EYBNwiMQfT284NDpGUHcQN2wDg2 ImEfrw1NKesOh2c5AJ7enxBL6NylCZTl6hFQYqVHUWWQCmW6TJnQSRdSE6cvW83o B0oHZnrQFZGjdDxM9PtYyT1z27q/GRX3XVV67G+sMP6Vyb0G8yOedlaKztzbvhKn QxGotsHW/UlKM/WFPA+J/PruNhM4mUExCikM91bB59pjhSY/owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFOBfdCJZ5QVLBcw0Fb5AMHykrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvZGMyODBmZmItMzM0NS0z ZTc1LWJkOGUtYWYzNzdiZWNhNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVZuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEUno6xaaN3rFIuJtrLecxJszm3QE/37BRCT9AR9DKkmHZvROc5jbKn HqIie2fvDdOnjoyIgoIPAEergGpAotbwc3t89aZ0yerF0Jr6te9/VffvaiCdzcLN aq35br0ZEQta1Mgl44PyLpGnPJDvAJtiA+DjAVD1bQjkDLbUoLGErzM2KxP9Hms4 iUD+Lv1UleGtdTYQzzAIjfcnHLSaGdVvDILGuCUzXIFbsvkBbxh9nWeY/1rAClQN mA+8P7c6mrIagyIe6Xp1oKiQjpAK+JFJ0lMy9q4bkMk3Xo1roDPLu2vIretpn6lV 1yUoLG28I5HLBYhKWgcw5G5N8RJk7cE= -----END CERTIFICATE-----Generated at Sat Sep 26 16:41:21 2026 by rpki-client