$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/a6932549-4031-3efc-8d22-8da3ac4a709d.roa File: a6932549-4031-3efc-8d22-8da3ac4a709d.roa (raw, json) Hash identifier: Ou3apOPr0w6KHmHdY6J9PWvwFUqdhLMhP3tP4+jfhfw= Subject key identifier: 44:D2:FF:DE:10:1A:72:F0:13:C4:28:E1:29:3A:4A:A9:A2:11:B7:6D Certificate issuer: /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Certificate serial: 010D0C9F4328584AF0F137FAF3E6CE64B8EA2BB0 Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/a6932549-4031-3efc-8d22-8da3ac4a709d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 400207 IP address blocks: 195.85.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:37:fa:f3:e6:ce:64:b8:ea:2b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=cd4f026e-0325-49bf-ba74-f8e7bf56d998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:b5:43:31:33:5a:c3:ef:fe:42:1b:34:70: 64:4a:91:90:4b:b4:cf:c8:5e:c0:a9:9e:53:a8:26: e9:a6:ea:59:b4:0c:76:c1:95:8e:81:ed:2d:63:15: 02:73:76:49:ea:28:80:2a:7a:b0:ba:5e:aa:18:72: 39:6f:50:e2:bc:93:d6:ac:69:ee:9a:3a:99:5f:f1: 82:60:98:8d:27:2b:7e:54:a0:51:be:ed:a5:6e:bd: 7d:03:54:49:b5:44:34:1b:56:17:7c:de:69:ef:fc: 24:77:4b:aa:1d:bf:08:f9:70:13:4b:fa:ad:9d:f1: 4c:6e:29:43:0d:95:61:20:6f:18:c2:0a:f0:7e:a9: d3:59:01:31:34:e6:dd:de:70:28:df:f4:0d:bd:0e: 2d:77:91:fe:aa:9a:e6:08:75:90:af:85:ff:bc:43: b9:58:92:de:0e:65:2e:2d:e2:b7:81:f1:c0:a4:86: aa:2a:0d:3a:16:8b:58:79:7b:62:cc:42:d7:73:a0: 16:d3:1c:46:5a:74:0a:82:84:56:6d:0b:89:52:c4: 20:be:39:94:28:5e:55:aa:8d:81:72:27:4e:a0:7b: e3:a1:c5:b3:80:89:55:b7:63:03:52:81:78:ef:08: 62:5e:4e:e4:fe:20:d9:e9:44:11:f6:87:ca:4d:d4: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D2:FF:DE:10:1A:72:F0:13:C4:28:E1:29:3A:4A:A9:A2:11:B7:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/a6932549-4031-3efc-8d22-8da3ac4a709d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl X509v3 Authority Key Identifier: keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer sbgp-ipAddrBlock: critical IPv4: 195.85.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:91:d2:9e:d7:f0:32:06:da:9b:28:2e:62:7a:df:24:1e:95: 42:18:64:c3:56:fe:f1:ba:30:36:25:b2:cb:43:de:0f:37:51: 8b:c9:00:c9:27:38:8b:9d:09:76:4f:73:9b:cf:e2:04:9e:a5: dc:ec:95:a3:88:74:6b:8d:5e:ae:9a:35:20:d3:d8:40:78:cd: 98:f0:7e:94:ac:42:01:53:d8:c4:ad:94:8c:91:fe:50:aa:95: dd:6d:25:ef:a2:c4:94:4d:13:fb:bf:ee:2c:18:27:19:57:80: f9:d3:27:3e:51:ac:63:70:79:ba:7c:0b:ae:83:78:54:98:06: f0:26:c8:5a:f5:83:79:52:77:5d:03:36:08:2f:8f:c5:50:92: c7:08:a2:f3:ac:e4:9d:7c:85:62:4d:25:23:a2:0b:74:27:a3: b6:dc:db:d6:bb:be:76:02:51:7b:f9:03:78:ee:0f:9f:8f:3c: 68:ac:70:c5:d2:ac:ed:19:6c:6e:5e:74:c4:f8:0b:1b:3a:e0: da:32:ee:0d:d1:df:07:96:2d:e0:51:b8:4d:24:70:35:34:75: 08:00:6e:58:f7:67:cf:22:bf:e1:93:1c:9c:24:77:48:7a:ce: 06:f2:a4:bf:d3:0c:44:d7:d6:3c:83:19:14:2b:77:18:ac:c2: 4f:d7:f0:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Tf68+bOZLjqK7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUwZWJjZTMtZGRmNS00ZmIwLWI4ZWQtYjlhNDVkOGI0 NmIyMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Y2Q0ZjAyNmUtMDMyNS00OWJmLWJhNzQtZjhlN2JmNTZkOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtu1QzEzWsPv/kIbNHBkSpGQS7TPyF7AqZ5T qCbppupZtAx2wZWOge0tYxUCc3ZJ6iiAKnqwul6qGHI5b1DivJPWrGnumjqZX/GC YJiNJyt+VKBRvu2lbr19A1RJtUQ0G1YXfN5p7/wkd0uqHb8I+XATS/qtnfFMbilD DZVhIG8YwgrwfqnTWQExNObd3nAo3/QNvQ4td5H+qprmCHWQr4X/vEO5WJLeDmUu LeK3gfHApIaqKg06FotYeXtizELXc6AW0xxGWnQKgoRWbQuJUsQgvjmUKF5Vqo2B cidOoHvjocWzgIlVt2MDUoF47whiXk7k/iDZ6UQR9ofKTdRk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETS/94QGnLwE8Qo4Sk6SqmiEbdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBl YmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0NWQ4YjQ2YjIvYTY5MzI1NDktNDAzMS0z ZWZjLThkMjItOGRhM2FjNGE3MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjUwZWJjZTMtZGRmNS00ZmIwLWI4 ZWQtYjlhNDVkOGI0NmIyL2I1MGViY2UzLWRkZjUtNGZiMC1iOGVkLWI5YTQ1ZDhi NDZiMi5jcmwwHwYDVR0jBBgwFoAUVs/TeO1FMPG70WFTkaT81Dem6iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBlYmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0 NWQ4YjQ2YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSR0p7X8DIG2psoLmJ63yQelUIYZMNW/vG6MDYlsstD3g83UYvJAMkn OIudCXZPc5vP4gSepdzslaOIdGuNXq6aNSDT2EB4zZjwfpSsQgFT2MStlIyR/lCq ld1tJe+ixJRNE/u/7iwYJxlXgPnTJz5RrGNwebp8C66DeFSYBvAmyFr1g3lSd10D Nggvj8VQkscIovOs5J18hWJNJSOiC3Qno7bc29a7vnYCUXv5A3juD5+PPGiscMXS rO0ZbG5edMT4Cxs64Noy7g3R3weWLeBRuE0kcDU0dQgAblj3Z88iv+GTHJwkd0h6 zgbypL/TDETX1jyDGRQrdxiswk/X8CA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:52:16 2025 by rpki-client