$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/14c4fb92-c515-3d7a-b968-2c6aa5749aa2.roa File: 14c4fb92-c515-3d7a-b968-2c6aa5749aa2.roa (raw, json) Hash identifier: QHwRa6XlWIXy/l7gvM1H3T/pivt8sJgFhSDU6HDJCzk= Subject key identifier: 6D:22:14:60:E2:B4:65:3D:27:3D:9E:23:46:06:B3:DA:44:AA:71:33 Certificate issuer: /CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51 Certificate serial: 010D0C9F4328584F3FAD36A483D7AD1454EC5E40 Authority key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/14c4fb92-c515-3d7a-b968-2c6aa5749aa2.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 48896 IP address blocks: 195.85.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:36:a4:83:d7:ad:14:54:ec:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=2d104d1f-d4a8-4da6-a38f-2d439138c27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:e4:d7:04:81:ef:1f:1c:a4:18:0d:a9:f0: 92:08:0d:d4:7c:03:d2:e2:de:9f:b4:d7:97:e9:cb: 12:c9:72:ac:48:24:29:ad:ad:d7:9d:85:9b:f9:d9: 7f:db:05:91:ed:ff:3f:93:2f:8c:0d:63:15:08:c1: c9:a4:3c:24:e7:07:07:24:e1:de:d8:5a:ef:37:fc: 3a:b2:32:47:83:c4:ad:7c:97:bf:c9:83:0d:3e:aa: 3e:27:01:21:a6:2d:1e:c1:44:2f:6d:cc:50:55:94: 28:51:2c:61:ce:2c:79:06:88:ec:3b:c1:1f:1a:cb: a4:19:f4:63:c9:2a:a7:a2:72:e1:ed:ba:d9:20:b3: b7:ae:d6:da:a5:c5:58:1d:cb:53:90:11:72:c0:4d: 3d:a8:92:d4:f3:a6:08:c3:d6:14:44:27:66:f7:a0: 99:77:d0:11:ef:36:e3:c3:43:0d:64:be:22:30:e4: 17:bf:2e:d5:ac:f3:a5:ed:ef:f6:5e:85:79:35:2a: 24:5b:3c:a9:21:3d:11:76:5c:c3:d3:d8:69:92:ae: 04:fd:f0:29:c8:4e:df:17:db:f1:d4:1f:9b:52:db: 39:de:ef:8b:ab:e9:51:d9:f3:10:38:7e:90:c2:27: 50:dd:29:06:2c:d2:45:a6:fb:5b:b8:fc:79:d1:51: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:22:14:60:E2:B4:65:3D:27:3D:9E:23:46:06:B3:DA:44:AA:71:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/14c4fb92-c515-3d7a-b968-2c6aa5749aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl X509v3 Authority Key Identifier: keyid:B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer sbgp-ipAddrBlock: critical IPv4: 195.85.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:75:70:46:3f:b5:c4:68:31:3b:2c:ae:a8:8c:49:83:43:71: ed:7f:5b:c2:e2:15:d6:e6:ba:0e:f1:80:9b:e6:0b:39:3d:4c: e8:d7:5e:fc:af:42:bd:c6:84:4d:65:ca:e8:8e:24:8a:a2:23: 6a:24:d2:79:bd:b3:f1:80:48:bd:c8:d2:72:a5:fa:22:bf:48: 0d:f8:d5:3a:16:4e:ac:55:85:f4:48:e3:22:74:de:5b:1f:94: 90:a3:ba:5c:d7:40:bc:d4:c4:86:c0:8b:7a:1d:ca:57:9a:32: 68:39:be:cc:72:c5:b4:cc:b7:f6:ff:29:03:e6:8c:16:99:b0: 03:a4:8b:b5:7a:6c:d1:6e:81:b7:1e:bd:d0:3b:d8:0e:31:ee: f1:71:b7:d3:0d:20:66:56:25:d2:e9:9c:e3:9f:98:5f:96:3f: c2:01:98:bf:21:1b:b5:84:7e:52:a3:f8:c6:d4:23:cd:36:55: f4:2c:56:78:2e:4e:3d:eb:e4:51:fa:74:33:2d:60:60:81:15: 01:eb:e7:47:c9:38:90:ea:94:69:fc:d8:64:f7:5c:24:a6:0c: 39:5a:ad:50:e4:ab:a1:b3:de:a5:b4:58:4a:39:33:7d:ab:57: dc:dd:82:1c:fb:78:2d:e9:16:e9:e5:24:63:66:9d:c3:f6:d8: 29:65:8e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTakg9etFFTsXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRkODZiMjQtZjliNi00ZDMxLWIxMGItYTNjMjI2NGUy YjUxMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MmQxMDRkMWYtZDRhOC00ZGE2LWEzOGYtMmQ0MzkxMzhjMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22Dk1wSB7x8cpBgNqfCSCA3UfAPS4t6ftNeX 6csSyXKsSCQpra3XnYWb+dl/2wWR7f8/ky+MDWMVCMHJpDwk5wcHJOHe2FrvN/w6 sjJHg8StfJe/yYMNPqo+JwEhpi0ewUQvbcxQVZQoUSxhzix5BojsO8EfGsukGfRj ySqnonLh7brZILO3rtbapcVYHctTkBFywE09qJLU86YIw9YURCdm96CZd9AR7zbj w0MNZL4iMOQXvy7VrPOl7e/2XoV5NSokWzypIT0RdlzD09hpkq4E/fApyE7fF9vx 1B+bUts53u+Lq+lR2fMQOH6QwidQ3SkGLNJFpvtbuPx50VHKxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0iFGDitGU9Jz2eI0YGs9pEqnEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZGQ4 NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2MyMjY0ZTJiNTEvMTRjNGZiOTItYzUxNS0z ZDdhLWI5NjgtMmM2YWE1NzQ5YWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGRkODZiMjQtZjliNi00ZDMxLWIx MGItYTNjMjI2NGUyYjUxLzBkZDg2YjI0LWY5YjYtNGQzMS1iMTBiLWEzYzIyNjRl MmI1MS5jcmwwHwYDVR0jBBgwFoAUsbFajTey4seWzS+E26mJte6nj14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZGQ4NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2My MjY0ZTJiNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ1cEY/tcRoMTssrqiMSYNDce1/W8LiFdbmug7xgJvmCzk9TOjXXvyv Qr3GhE1lyuiOJIqiI2ok0nm9s/GASL3I0nKl+iK/SA341ToWTqxVhfRI4yJ03lsf lJCjulzXQLzUxIbAi3odyleaMmg5vsxyxbTMt/b/KQPmjBaZsAOki7V6bNFugbce vdA72A4x7vFxt9MNIGZWJdLpnOOfmF+WP8IBmL8hG7WEflKj+MbUI802VfQsVngu Tj3r5FH6dDMtYGCBFQHr50fJOJDqlGn82GT3XCSmDDlarVDkq6Gz3qW0WEo5M32r V9zdghz7eC3pFunlJGNmncP22Clljh8= -----END CERTIFICATE-----Generated at Tue Sep 29 13:30:43 2026 by rpki-client