$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/dedf1a67-51e3-3031-954c-722dadbb83de.roa File: dedf1a67-51e3-3031-954c-722dadbb83de.roa (raw, json) Hash identifier: 43qsnXcL8qSmMJrfNtWd9wnIduBHxBsiwz1y6vijlOQ= Subject key identifier: AF:3B:D2:6A:DF:16:08:81:80:9A:9C:E2:D1:2F:B2:BB:CD:F8:AE:5A Certificate issuer: /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278 Certificate serial: 010D0C9F4328584BABFD0441446062DEB74F8400 Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/dedf1a67-51e3-3031-954c-722dadbb83de.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 195.85.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:04:41:44:60:62:de:b7:4f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=8bff107b-6736-4461-abc4-503797b5fed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:b1:c1:da:b5:a8:e1:67:51:3b:3e:da:4d: e4:d9:8c:21:aa:23:12:2d:30:8a:bd:a9:60:84:52: 26:6e:ac:49:de:61:71:6d:c4:21:1e:b8:93:ac:3c: e2:87:f6:25:ae:e0:e1:43:98:62:65:06:e7:ef:af: 65:b0:96:1d:da:7b:53:91:48:0a:12:6f:42:cf:3c: 05:7c:7a:6d:4b:8c:9b:23:0c:98:a2:2d:0f:9f:33: 72:10:8a:3b:be:90:6f:69:25:77:61:11:1b:04:b8: 80:31:06:88:05:e4:11:34:01:41:ab:eb:fd:bd:33: 0e:9d:83:e3:59:57:12:de:6b:49:72:d2:a7:0b:23: 9e:a4:db:ac:f3:72:87:d8:91:91:93:52:fd:03:94: 5c:a5:be:df:a4:df:2b:34:25:ae:03:b4:4b:83:a7: 68:b7:98:3c:46:f0:6e:2a:3e:21:4d:c7:72:08:90: 66:b5:5c:0d:6f:a0:3a:f4:9b:62:51:00:70:76:b5: 93:54:f1:01:1d:4d:00:21:48:c4:cd:2b:86:e5:ed: fe:ed:ba:67:98:44:9b:6b:09:04:e4:39:c5:e4:16: aa:71:7f:05:38:0a:cf:4b:86:50:c3:9f:eb:a9:bb: 14:e1:c2:fd:86:34:f9:30:cf:c0:0f:d1:5c:1d:81: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3B:D2:6A:DF:16:08:81:80:9A:9C:E2:D1:2F:B2:BB:CD:F8:AE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/dedf1a67-51e3-3031-954c-722dadbb83de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl X509v3 Authority Key Identifier: keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer sbgp-ipAddrBlock: critical IPv4: 195.85.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:96:6a:c6:43:43:0d:4e:51:76:73:b0:c8:8e:c3:36:d9:a6: a1:00:7a:c8:10:37:58:c5:af:5d:31:e1:9b:98:62:2f:b8:e7: 2d:00:14:96:ef:77:6c:47:76:66:09:5e:82:0c:69:8a:c4:e4: 86:e8:f4:20:c1:5e:82:f6:e6:12:1b:86:53:41:0d:b3:6f:99: ff:e6:42:15:f2:b7:77:79:48:07:c6:fd:c7:7f:97:8b:80:6b: 1f:c4:69:a4:29:d9:78:31:22:a7:04:24:88:18:eb:74:7b:4c: 40:99:7b:62:53:32:16:54:85:2f:c8:23:15:3a:e4:47:98:3b: c8:fd:72:f7:b9:91:0c:4e:25:b6:0c:45:23:e7:2f:fd:04:a3: 96:ff:4f:5e:70:e3:3b:75:5d:8b:17:75:4a:c5:90:df:b9:81: 33:27:97:f1:70:99:82:fe:ea:fe:03:34:0a:06:a7:74:24:2f: 5e:a6:62:47:b4:0b:bb:a2:78:10:43:63:1f:0d:ec:88:37:26: 08:e7:36:5d:34:2c:34:93:8d:d8:c4:a7:8e:12:37:d9:13:b5: 0d:ce:93:22:f3:20:e9:bd:7d:fd:b7:53:a1:28:d3:36:41:ed: fe:74:6f:41:6f:13:8a:e3:2b:c1:13:e0:85:6a:eb:10:0e:e7: 48:0c:10:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QRBRGBi3rdPhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmZjMzc0MWItZGVmZi00ZWNmLWJjMzctMjYyYjIwZTFl Mjc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OGJmZjEwN2ItNjczNi00NDYxLWFiYzQtNTAzNzk3YjVmZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGxwdq1qOFnUTs+2k3k2YwhqiMSLTCKvalg hFImbqxJ3mFxbcQhHriTrDzih/YlruDhQ5hiZQbn769lsJYd2ntTkUgKEm9CzzwF fHptS4ybIwyYoi0PnzNyEIo7vpBvaSV3YREbBLiAMQaIBeQRNAFBq+v9vTMOnYPj WVcS3mtJctKnCyOepNus83KH2JGRk1L9A5Rcpb7fpN8rNCWuA7RLg6dot5g8RvBu Kj4hTcdyCJBmtVwNb6A69JtiUQBwdrWTVPEBHU0AIUjEzSuG5e3+7bpnmESbawkE 5DnF5BaqcX8FOArPS4ZQw5/rqbsU4cL9hjT5MM/AD9FcHYG6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK870mrfFgiBgJqc4tEvsrvN+K5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMz NzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJiMjBlMWUyNzgvZGVkZjFhNjctNTFlMy0z MDMxLTk1NGMtNzIyZGFkYmI4M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZjMzc0MWItZGVmZi00ZWNmLWJj MzctMjYyYjIwZTFlMjc4LzZmYzM3NDFiLWRlZmYtNGVjZi1iYzM3LTI2MmIyMGUx ZTI3OC5jcmwwHwYDVR0jBBgwFoAU48Ch8+RHuqq9mAhrsX88GNUiBEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMzNzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJi MjBlMWUyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGWasZDQw1OUXZzsMiOwzbZpqEAesgQN1jFr10x4ZuYYi+45y0AFJbv d2xHdmYJXoIMaYrE5Ibo9CDBXoL25hIbhlNBDbNvmf/mQhXyt3d5SAfG/cd/l4uA ax/EaaQp2XgxIqcEJIgY63R7TECZe2JTMhZUhS/IIxU65EeYO8j9cve5kQxOJbYM RSPnL/0Eo5b/T15w4zt1XYsXdUrFkN+5gTMnl/FwmYL+6v4DNAoGp3QkL16mYke0 C7uieBBDYx8N7Ig3JgjnNl00LDSTjdjEp44SN9kTtQ3OkyLzIOm9ff23U6Eo0zZB 7f50b0FvE4rjK8ET4IVq6xAO50gMEDk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:18 2025 by rpki-client