$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa File: 6b98da56-6d05-3af9-8826-f7a70da179a0.roa (raw, json) Hash identifier: nE9FpFTtL6qjDXTwV6KgGHgYdkXr4Ld4GrIfuZcaBoA= Subject key identifier: 3F:5D:F5:61:6A:DB:94:9E:0A:B7:59:0A:36:18:CF:98:25:03:55:47 Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Certificate serial: 010D0C9F4328584AA160DE8850EC52699F68D780 Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 195.85.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:de:88:50:ec:52:69:9f:68:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=cc255e62-3567-4883-ad81-dfb5bc4f61f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:fb:87:92:f2:da:80:d0:c0:6f:c0:18:91: e2:01:f8:01:e3:f9:15:05:01:4d:c7:f8:28:68:5d: 70:1d:b8:b4:df:f1:36:f2:05:7b:bd:62:40:53:8d: 45:06:53:9c:6f:e2:fe:78:09:4c:ed:4d:6e:04:82: c4:e1:70:cc:a7:2c:04:bb:35:f7:46:8f:b2:27:f5: 81:36:af:1f:8d:80:e4:5e:0d:37:11:da:17:7c:4b: dc:5e:8e:7c:15:14:d7:25:88:85:1b:75:88:1e:ff: bb:00:c7:32:30:75:e9:47:99:91:64:39:bb:7a:b6: b6:07:ff:33:25:85:cd:7b:c9:d1:0c:80:8b:b5:53: be:e2:38:80:91:cd:b0:ae:64:56:00:70:e0:dd:da: 7e:cc:a6:90:a0:4c:e8:02:85:d4:a4:fa:22:e5:ff: df:09:ab:34:bd:5f:36:4e:48:07:c9:37:ef:a9:fa: 6b:8d:36:58:1a:2f:ad:0c:c5:1f:65:17:92:87:ea: e3:8e:ea:f7:39:2e:0f:c7:dc:1c:54:e0:fb:19:62: 27:41:9b:06:d7:dd:03:9a:db:6f:36:6a:9f:d1:c0: a8:bb:34:fd:9c:cc:1e:83:73:2e:92:63:e0:0b:60: 7b:57:95:69:03:6a:9e:ce:e6:55:80:88:7b:14:d5: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5D:F5:61:6A:DB:94:9E:0A:B7:59:0A:36:18:CF:98:25:03:55:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl X509v3 Authority Key Identifier: keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer sbgp-ipAddrBlock: critical IPv4: 195.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ac:c7:0f:6d:91:a4:47:b5:68:6d:7c:3d:43:38:57:5c:c7: 46:09:27:18:38:91:b6:ab:f4:55:81:95:76:79:bb:69:14:45: d8:f6:00:ea:78:23:db:43:ae:1c:7d:40:d9:71:50:01:b6:57: c4:09:86:0b:54:8b:c2:84:a5:f8:14:81:e9:1b:d2:97:d0:5f: cd:13:60:70:58:2e:5d:d3:73:23:bf:ed:93:2e:04:b3:2f:c6: 55:c3:a6:44:d9:64:55:4d:e2:3d:4d:37:da:d4:3f:6a:28:cb: bd:3d:b2:2b:7e:b5:28:ed:cf:38:83:b7:a7:c5:52:73:e2:e9: 12:1b:e4:31:2c:40:6c:5d:b8:15:09:6e:b6:66:0c:e6:61:45: 6c:e5:05:92:51:e3:ce:c3:e9:83:1b:c7:d5:6b:39:fb:2f:75: 5b:d0:2c:89:63:47:32:64:9f:71:62:8d:9c:7c:15:0d:cb:b9: af:b9:47:c5:8b:09:cf:ea:e5:18:88:8f:a2:a8:81:5a:81:61: 3f:c1:48:6f:3a:a8:80:29:83:e4:d1:5a:26:61:59:40:6b:b4: e4:7d:08:26:9b:b5:a4:8d:41:b4:08:ee:f2:18:88:0d:72:a3: 16:49:13:33:d0:1d:61:c7:12:06:f1:03:2e:58:af:27:06:b0: 9c:46:e7:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN6IUOxSaZ9o14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFh MjU4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk Y2MyNTVlNjItMzU2Ny00ODgzLWFkODEtZGZiNWJjNGY2MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipT7h5Ly2oDQwG/AGJHiAfgB4/kVBQFNx/go aF1wHbi03/E28gV7vWJAU41FBlOcb+L+eAlM7U1uBILE4XDMpywEuzX3Ro+yJ/WB Nq8fjYDkXg03EdoXfEvcXo58FRTXJYiFG3WIHv+7AMcyMHXpR5mRZDm7era2B/8z JYXNe8nRDICLtVO+4jiAkc2wrmRWAHDg3dp+zKaQoEzoAoXUpPoi5f/fCas0vV82 TkgHyTfvqfprjTZYGi+tDMUfZReSh+rjjur3OS4Px9wcVOD7GWInQZsG190Dmttv Nmqf0cCouzT9nMweg3MukmPgC2B7V5VpA2qezuZVgIh7FNXQLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9d9WFq25SeCrdZCjYYz5glA1VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5 ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvNmI5OGRhNTYtNmQwNS0z YWY5LTg4MjYtZjdhNzBkYTE3OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2YyOWVlN2UtZWExMi00MGU1LWE2 OGUtM2QwMDJjNmFhMjU4L2NmMjllZTdlLWVhMTItNDBlNS1hNjhlLTNkMDAyYzZh YTI1OC5jcmwwHwYDVR0jBBgwFoAUnjVyGUrjpjOocfCJHCgFY27TmmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAw MmM2YWEyNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1UkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADisxw9tkaRHtWhtfD1DOFdcx0YJJxg4kbar9FWBlXZ5u2kURdj2AOp4 I9tDrhx9QNlxUAG2V8QJhgtUi8KEpfgUgekb0pfQX80TYHBYLl3TcyO/7ZMuBLMv xlXDpkTZZFVN4j1NN9rUP2ooy709sit+tSjtzziDt6fFUnPi6RIb5DEsQGxduBUJ brZmDOZhRWzlBZJR487D6YMbx9VrOfsvdVvQLIljRzJkn3FijZx8FQ3Lua+5R8WL Cc/q5RiIj6KogVqBYT/BSG86qIApg+TRWiZhWUBrtOR9CCabtaSNQbQI7vIYiA1y oxZJEzPQHWHHEgbxAy5YrycGsJxG51g= -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:05 2025 by rpki-client