$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: lp5OBWZ0ezy4KejJB68W85IzakXb8Oi042UnskPFQJ0= Subject key identifier: C5:01:A3:FD:5A:72:EC:2A:FE:2B:AB:B5:73:A6:A0:76:B3:F5:33:BE Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584BABFD03C49A05ED1BEEF48C80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:03:c4:9a:05:ed:1b:ee:f4:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=1fb80bcd-b407-40c4-8f4f-93fd5f1ff510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:94:06:26:b5:77:b8:93:90:64:61:4f:36: 5b:76:82:af:bf:c4:6c:3f:79:9b:83:b2:9e:db:16: 23:4a:6c:76:6f:1d:f2:a6:62:03:5b:bf:f6:8d:71: dd:bc:45:b8:8e:3b:4e:0a:0d:f3:94:01:0a:60:38: 7b:c5:19:68:fe:67:72:35:25:62:3d:c0:a0:52:dc: 20:71:34:9f:2c:09:98:ca:52:b8:b2:da:5e:5d:1e: 79:74:04:47:56:cd:b5:15:f4:4e:5f:a1:9d:62:dd: dd:62:65:3d:cd:8b:92:d7:63:05:92:b3:10:6d:9d: 66:96:c4:27:ec:66:39:e3:22:07:3f:fe:d9:37:2f: 9e:05:a7:54:71:b6:ee:95:32:4d:33:0d:6b:7c:3d: 36:30:9b:62:e3:9d:ee:6b:88:8e:e0:8c:9c:1a:99: 31:71:93:2e:8e:9e:79:5c:1a:a7:b5:6f:b3:a5:97: 85:f9:89:68:85:58:21:3c:f7:47:a0:23:9a:d5:4b: f3:45:63:eb:e9:e2:7b:cd:e7:e9:54:f0:4b:44:6e: 55:8c:cd:d5:a7:be:67:a6:6f:64:4e:0e:dc:f8:b5: 04:e4:6f:ac:be:fa:1c:b9:bf:93:3f:c7:86:34:02: 09:d2:a0:75:9f:21:c9:e7:72:e9:e5:86:6f:b6:9d: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:A3:FD:5A:72:EC:2A:FE:2B:AB:B5:73:A6:A0:76:B3:F5:33:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b6:e3:f4:a2:3b:3e:67:85:ee:a6:e9:0e:b4:9a:94:37:7d: ef:05:aa:7a:da:90:25:3b:3a:70:24:7b:ea:13:7f:92:8c:80: 27:5c:55:9f:f4:18:9d:d8:29:b4:b2:66:20:96:07:4f:75:83: dc:1a:7e:22:f5:bc:82:d2:c1:5f:83:e8:21:b7:b5:dd:45:9d: 86:11:12:6e:0c:8a:9b:2e:e3:74:2d:a2:66:47:d1:97:14:0f: 02:a0:1c:84:9c:3d:b6:2d:18:e0:d4:16:4b:a4:03:a5:4f:15: 04:15:f8:9f:42:6f:25:0b:99:c2:06:b6:22:cc:54:d6:fd:42: 21:ab:46:55:b6:b6:f6:23:51:57:bd:38:13:44:46:fd:b7:3d: eb:53:72:fc:8f:27:81:64:08:9f:a1:1b:53:f6:ae:7f:b5:51: bd:bb:49:db:11:63:80:5f:c5:4f:a4:40:32:d9:59:c6:dd:0a: b4:3f:39:09:5e:3f:29:05:07:df:24:13:de:6d:30:1b:b9:ec: a7:88:8e:f0:b8:e8:bd:42:4e:3f:10:28:f8:99:b1:21:16:0b: ef:95:1f:87:22:90:de:9d:fb:d0:c4:85:c8:60:2d:8a:8f:0d: b9:2b:c7:14:57:fe:21:ba:b7:65:b0:bc:b8:02:c8:30:7b:cb: a7:4a:39:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QPEmgXtG+70jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MWZiODBiY2QtYjQwNy00MGM0LThmNGYtOTNmZDVmMWZmNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgaUBia1d7iTkGRhTzZbdoKvv8RsP3mbg7Ke 2xYjSmx2bx3ypmIDW7/2jXHdvEW4jjtOCg3zlAEKYDh7xRlo/mdyNSViPcCgUtwg cTSfLAmYylK4stpeXR55dARHVs21FfROX6GdYt3dYmU9zYuS12MFkrMQbZ1mlsQn 7GY54yIHP/7ZNy+eBadUcbbulTJNMw1rfD02MJti453ua4iO4IycGpkxcZMujp55 XBqntW+zpZeF+YlohVghPPdHoCOa1UvzRWPr6eJ7zefpVPBLRG5VjM3Vp75npm9k Tg7c+LUE5G+svvocub+TP8eGNAIJ0qB1nyHJ53Lp5YZvtp09PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUBo/1acuwq/iurtXOmoHaz9TO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH224/SiOz5nhe6m6Q60mpQ3fe8FqnrakCU7OnAke+oTf5KMgCdcVZ/0 GJ3YKbSyZiCWB091g9wafiL1vILSwV+D6CG3td1FnYYREm4Mipsu43QtomZH0ZcU DwKgHIScPbYtGODUFkukA6VPFQQV+J9CbyULmcIGtiLMVNb9QiGrRlW2tvYjUVe9 OBNERv23PetTcvyPJ4FkCJ+hG1P2rn+1Ub27SdsRY4BfxU+kQDLZWcbdCrQ/OQle PykFB98kE95tMBu57KeIjvC46L1CTj8QKPiZsSEWC++VH4cikN6d+9DEhchgLYqP DbkrxxRX/iG6t2WwvLgCyDB7y6dKOf0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:18 2025 by rpki-client