$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa File: b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa (raw, json) Hash identifier: rfQFBu/pnRX4ySVXxH4TYsNaXV9Bl09BxBjrYoZVYH0= Subject key identifier: 88:E0:7C:35:C1:F8:00:42:34:B3:BB:FE:CD:4E:24:FE:FF:52:08:35 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D6C0FB102AD7A3A7F730BCDFF Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 399629 IP address blocks: 193.149.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b1:02:ad:7a:3a:7f:73:0b:cd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=ba20913f-d45e-44b6-b9c7-61302e102b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:f5:d8:9f:c2:5a:15:2c:d1:26:fe:e7:5b: 9d:d5:12:31:1c:22:38:c4:31:d3:75:4b:14:f2:fb: eb:21:ee:86:67:03:42:9e:b2:06:ec:f6:fc:af:8b: b9:7e:15:88:64:94:30:d3:29:f3:da:5a:f3:5e:4a: 74:38:8b:f6:27:cb:0e:29:4b:fd:3b:1e:01:2f:bb: 13:e4:6b:ea:3a:72:88:5b:a5:91:62:f1:0b:35:93: 4f:4c:7d:1b:63:18:9d:ef:dc:95:c0:c7:77:45:a1: f8:7c:7c:62:94:24:d4:00:90:73:ad:cd:c1:f6:d7: 52:4c:0c:06:3d:c8:e2:82:61:f0:35:79:66:90:81: ef:e8:a7:bc:40:26:99:21:ee:c6:66:35:0b:e2:1e: 84:9e:5e:08:dc:4a:7e:fe:fe:bd:55:dd:93:ee:f7: 06:90:71:95:b8:7c:60:a9:9c:e7:27:2d:93:ef:42: e7:65:7f:34:d1:8d:3a:42:8f:bf:97:d1:76:c8:06: 16:a5:b2:b4:84:a1:be:1a:0f:ac:c7:30:01:42:c4: 34:1a:31:b5:fa:5c:76:e6:6b:de:2b:23:63:f0:c8: d3:f1:62:87:ee:ae:e1:72:09:f8:1e:3e:cf:c0:dc: c6:b1:be:6d:f1:46:39:e9:6b:c6:ea:8e:04:26:1a: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:7C:35:C1:F8:00:42:34:B3:BB:FE:CD:4E:24:FE:FF:52:08:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/b6faae4f-5377-3840-88d1-e9475cb4b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 193.149.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1b:56:d9:c1:5d:f7:22:7c:a0:09:56:4e:7a:0a:df:ce:35: ee:b7:8f:7a:63:40:cf:2d:56:6e:8d:c9:67:ae:ff:d5:3f:c9: 0f:52:9b:35:00:aa:a3:08:d4:5e:a3:e7:7a:6d:83:ff:7f:0e: 3c:66:8e:3c:5e:a4:91:a3:c8:1e:66:f7:da:3b:6e:ac:eb:43: 3e:3e:44:a8:3a:6d:d0:95:9e:90:ed:b6:6b:38:78:d0:64:08: a2:49:de:d5:5f:cc:0a:2f:bd:b3:9f:b4:38:2e:cc:f3:93:48: b8:16:e2:07:51:c5:b8:68:51:ac:4c:4a:af:68:57:54:0c:c8: b9:42:c2:7d:5c:a6:c3:59:f9:90:20:dc:62:48:35:b6:65:43: dc:ae:92:3f:72:15:4d:19:9a:4e:cd:27:38:eb:27:f8:de:57: c8:ac:a2:35:4d:97:c3:91:9d:6a:c3:67:fc:f6:2f:5e:f6:1f: fe:c9:57:cf:4a:a6:14:74:41:ca:56:b6:42:19:31:5e:60:19: 67:8c:ec:83:1a:9d:16:f3:d4:7f:04:fe:33:fb:8f:cb:a8:77: e4:97:39:0b:37:1f:ac:70:ae:8c:38:ba:7b:c1:b9:7c:a3:d1: fb:44:d8:c4:4b:06:76:7c:d0:57:25:93:c7:9c:27:65:85:2e: 76:06:85:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7ECrXo6f3MLzf8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YmEyMDkxM2YtZDQ1ZS00NGI2LWI5YzctNjEzMDJlMTAyYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaD12J/CWhUs0Sb+51ud1RIxHCI4xDHTdUsU 8vvrIe6GZwNCnrIG7Pb8r4u5fhWIZJQw0ynz2lrzXkp0OIv2J8sOKUv9Ox4BL7sT 5GvqOnKIW6WRYvELNZNPTH0bYxid79yVwMd3RaH4fHxilCTUAJBzrc3B9tdSTAwG PcjigmHwNXlmkIHv6Ke8QCaZIe7GZjUL4h6Enl4I3Ep+/v69Vd2T7vcGkHGVuHxg qZznJy2T70LnZX800Y06Qo+/l9F2yAYWpbK0hKG+Gg+sxzABQsQ0GjG1+lx25mve KyNj8MjT8WKH7q7hcgn4Hj7PwNzGsb5t8UY56WvG6o4EJhp6EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjgfDXB+ABCNLO7/s1OJP7/Ugg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYjZmYWFlNGYtNTM3Ny0z ODQwLTg4ZDEtZTk0NzVjYjRiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEbVtnBXfcifKAJVk56Ct/ONe63j3pjQM8tVm6NyWeu/9U/yQ9SmzUA qqMI1F6j53ptg/9/DjxmjjxepJGjyB5m99o7bqzrQz4+RKg6bdCVnpDttms4eNBk CKJJ3tVfzAovvbOftDguzPOTSLgW4gdRxbhoUaxMSq9oV1QMyLlCwn1cpsNZ+ZAg 3GJINbZlQ9yukj9yFU0Zmk7NJzjrJ/jeV8isojVNl8ORnWrDZ/z2L172H/7JV89K phR0QcpWtkIZMV5gGWeM7IManRbz1H8E/jP7j8uod+SXOQs3H6xwrow4unvBuXyj 0ftE2MRLBnZ80Fclk8ecJ2WFLnYGhd0= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:23 2026 by rpki-client