$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa File: d1a4c516-eb99-30e0-b49a-13082dc83820.roa (raw, json) Hash identifier: hbRTlhiDyzYHWORdpdrmBlBnoF5zd0mdpTiIEhNV/cE= Subject key identifier: 93:C7:70:95:1E:3A:81:F2:6A:C6:D9:DF:9F:64:A0:4F:DE:25:C8:C6 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584D6C0FB1244BD44122C69160E0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 399629 IP address blocks: 195.85.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b1:24:4b:d4:41:22:c6:91:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=1614224d-a879-4af4-b7a3-63e6abf70421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:68:ff:ef:be:de:f7:1a:e7:af:b4:fc:20: 62:fa:37:c6:a1:d8:06:7a:f5:5f:47:8c:b7:64:3d: 7d:c6:28:bc:aa:9f:f2:cd:1b:4f:48:5e:eb:6a:10: fa:df:d4:bb:88:67:5d:4b:40:39:8e:32:96:4c:8f: cb:c1:62:34:9f:5b:af:a7:1c:81:93:bc:23:bb:d7: ce:fd:34:0b:13:95:6c:80:e2:fa:1a:f9:1d:4b:c5: 33:c4:fa:ba:e2:7d:0b:29:66:c5:a8:de:15:3c:75: 46:81:ac:c4:01:ba:9a:1b:57:66:41:9c:84:06:e7: f9:aa:e6:8d:c5:14:dd:4f:5e:f3:45:6e:a3:2d:f4: 94:96:13:96:c7:8f:8e:f2:0a:1e:0e:7e:2b:7e:5a: fa:01:6d:d7:e6:54:03:6c:e4:55:e3:24:4a:5d:9f: 01:4b:92:c9:f7:af:bf:db:31:18:69:d6:fd:1b:5e: ef:b0:25:66:49:dd:21:0c:53:f0:94:61:77:84:a4: ab:61:c5:41:cf:3a:7b:60:86:f3:ab:29:1b:ba:fe: 9a:9f:95:0f:14:f6:06:a0:64:6f:51:45:98:4f:5d: 81:9e:40:5f:d7:cf:b1:c7:2e:cd:a2:17:fd:b7:98: 99:4a:1a:26:b1:4e:6d:1f:1f:a9:3b:aa:54:40:87: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:70:95:1E:3A:81:F2:6A:C6:D9:DF:9F:64:A0:4F:DE:25:C8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/d1a4c516-eb99-30e0-b49a-13082dc83820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 195.85.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0c:a6:bf:86:32:ad:ed:bb:c7:b7:2b:61:a6:d7:84:00:0b: 58:de:bd:86:41:d0:49:67:61:82:4d:48:9e:1e:8d:b3:18:17: 29:2a:a6:b4:ac:97:d6:db:80:f9:17:13:97:a2:e7:d4:74:36: b6:1f:dd:2d:50:39:e1:f3:9f:bc:84:fc:54:64:0b:d1:ed:5e: 93:0e:2e:d4:9f:02:67:c2:94:64:da:33:15:b8:c4:7a:ee:1a: 78:48:51:eb:d4:ca:19:d5:6a:c2:9a:29:45:b8:9e:2f:d9:bc: 1f:d1:eb:79:30:a0:4a:82:84:3f:21:3a:14:6b:0a:9e:17:2c: 5c:9a:e8:c9:bb:49:76:e4:21:8a:e8:ac:a6:98:9f:cb:03:d1: 30:8e:e7:52:78:96:58:b4:5b:9e:17:95:c8:98:cd:a7:f1:be: d6:c0:0f:57:05:ef:16:72:e7:d8:45:4a:56:cd:e5:7a:42:57: 81:58:a5:4b:5a:fa:77:dd:91:02:99:65:0c:16:0a:1a:d1:77: d4:cd:13:1f:b9:98:89:bb:20:c2:c0:ea:f3:3f:46:64:49:35: 38:22:84:c6:6a:2e:0d:a2:72:e8:65:46:bf:fb:d6:02:62:a9: 47:7c:b5:7e:7d:15:98:a4:c5:bd:c5:a3:1b:b7:42:93:32:a5: 59:10:23:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7EkS9RBIsaRYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk MTYxNDIyNGQtYTg3OS00YWY0LWI3YTMtNjNlNmFiZjcwNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Eto/+++3vca56+0/CBi+jfGodgGevVfR4y3 ZD19xii8qp/yzRtPSF7rahD639S7iGddS0A5jjKWTI/LwWI0n1uvpxyBk7wju9fO /TQLE5VsgOL6GvkdS8UzxPq64n0LKWbFqN4VPHVGgazEAbqaG1dmQZyEBuf5quaN xRTdT17zRW6jLfSUlhOWx4+O8goeDn4rflr6AW3X5lQDbORV4yRKXZ8BS5LJ96+/ 2zEYadb9G17vsCVmSd0hDFPwlGF3hKSrYcVBzzp7YIbzqykbuv6an5UPFPYGoGRv UUWYT12BnkBf18+xxy7Nohf9t5iZShomsU5tHx+pO6pUQIfiVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPHcJUeOoHyasbZ359koE/eJcjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZDFhNGM1MTYtZWI5OS0z MGUwLWI0OWEtMTMwODJkYzgzODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1VyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgMpr+GMq3tu8e3K2Gm14QAC1jevYZB0ElnYYJNSJ4ejbMYFykqprSs l9bbgPkXE5ei59R0NrYf3S1QOeHzn7yE/FRkC9HtXpMOLtSfAmfClGTaMxW4xHru GnhIUevUyhnVasKaKUW4ni/ZvB/R63kwoEqChD8hOhRrCp4XLFya6Mm7SXbkIYro rKaYn8sD0TCO51J4lli0W54XlciYzafxvtbAD1cF7xZy59hFSlbN5XpCV4FYpUta +nfdkQKZZQwWChrRd9TNEx+5mIm7IMLA6vM/RmRJNTgihMZqLg2icuhlRr/71gJi qUd8tX59FZikxb3Foxu3QpMypVkQIzc= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:50 2026 by rpki-client