$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa File: 6cf09c11-cdfc-3291-a79f-6993e6710f10.roa (raw, json) Hash identifier: 9AeZhcmsygWIj3wzCAXYDNJJQuFtKLHreU9NNi1PncM= Subject key identifier: 37:BA:A8:84:3D:13:F7:CE:E1:EC:F2:AB:FC:9A:5D:BB:F6:FC:38:A4 Certificate issuer: /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Certificate serial: 010D0C9F4328584AF5212BFEC38BC2B94CD946C0 Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 195.85.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2b:fe:c3:8b:c2:b9:4c:d9:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=e629a6b4-cd52-4806-a242-364835ddd0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:73:18:d3:3a:dd:21:37:df:db:45:01:19: be:d2:f3:06:ab:38:2f:81:79:97:3f:e4:6f:1f:74: 49:0c:03:ed:fe:6d:73:df:63:0d:dc:ec:81:28:6a: 84:bb:01:d8:d2:69:6e:ff:1d:44:1d:b8:a1:4b:c4: 19:15:83:cf:d2:5d:d9:72:28:f6:d6:02:0c:67:04: 41:12:32:de:05:d7:99:04:eb:53:b1:1a:9f:77:10: 46:3d:db:8a:04:fc:26:90:8a:7b:01:d4:dd:d0:72: 1f:87:6a:31:49:80:28:43:00:c9:2b:06:22:31:d3: 9c:e0:5b:66:57:60:9b:6c:c2:25:0e:07:e2:14:62: dd:4d:5b:a2:51:19:d1:16:a2:7f:f6:02:7a:36:8b: 42:92:28:39:cb:3c:2d:12:21:07:f9:b6:3a:69:5a: 3f:f4:44:a2:d8:33:14:96:02:37:0d:31:96:7e:af: 0e:d0:b5:6e:07:c5:e0:e3:8d:20:9f:06:ff:77:16: 20:e2:c6:8f:a1:bd:cb:c0:1a:30:72:ed:1b:ef:d6: a4:38:6c:7d:8e:59:ba:90:8f:20:f1:5a:91:d9:a9: bc:38:88:8a:96:b8:03:34:19:04:ef:aa:35:76:75: f7:23:77:c3:1c:a1:2a:68:29:fb:9a:a3:66:ca:04: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BA:A8:84:3D:13:F7:CE:E1:EC:F2:AB:FC:9A:5D:BB:F6:FC:38:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl X509v3 Authority Key Identifier: keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer sbgp-ipAddrBlock: critical IPv4: 195.85.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c4:2b:5c:b4:b9:69:ea:bc:98:66:55:c7:a6:c4:13:8e:2d: f7:66:7f:da:c9:d7:13:1e:28:31:07:ed:16:fe:fe:22:bd:c4: 5f:5e:b9:74:71:b1:d5:3f:a9:44:b1:d9:8d:f2:28:78:64:f6: 2f:0d:e0:3d:23:2a:38:de:35:0a:9b:80:98:65:4f:08:88:5a: ef:de:29:dc:f4:65:77:0d:7f:a8:41:80:78:ed:19:29:40:e6: 71:ae:a0:5c:5b:21:b0:25:6b:72:64:31:84:75:27:c9:8c:c0: 19:52:60:4a:9d:30:61:28:e6:58:cd:b9:fa:bc:1c:84:49:96: 3f:18:f0:eb:d8:03:53:0f:6e:67:f7:f5:23:68:23:0f:ef:97: c0:cf:4a:9c:72:51:5d:e5:1c:cf:05:f3:81:2e:4e:ba:6c:c0: 81:78:7d:b3:17:e5:f1:79:27:21:fc:54:fe:f5:77:2b:ca:6e: c8:40:73:ce:fd:a9:1d:f9:ae:57:c5:5f:db:77:5a:ff:ee:d4: 28:67:8f:46:1c:af:55:f3:5a:62:16:99:dc:77:0b:02:bc:21: 94:a2:a5:12:27:0a:7b:6d:b9:82:0f:9e:fa:ea:1e:d1:86:e0: b8:bb:33:9b:3c:aa:30:bb:22:f1:5b:1f:28:28:d2:aa:f7:e6: 7a:95:61:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISv+w4vCuUzZRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUwZWJjZTMtZGRmNS00ZmIwLWI4ZWQtYjlhNDVkOGI0 NmIyMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTYyOWE2YjQtY2Q1Mi00ODA2LWEyNDItMzY0ODM1ZGRkMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWtzGNM63SE339tFARm+0vMGqzgvgXmXP+Rv H3RJDAPt/m1z32MN3OyBKGqEuwHY0mlu/x1EHbihS8QZFYPP0l3Zcij21gIMZwRB EjLeBdeZBOtTsRqfdxBGPduKBPwmkIp7AdTd0HIfh2oxSYAoQwDJKwYiMdOc4Ftm V2CbbMIlDgfiFGLdTVuiURnRFqJ/9gJ6NotCkig5yzwtEiEH+bY6aVo/9ESi2DMU lgI3DTGWfq8O0LVuB8Xg440gnwb/dxYg4saPob3LwBowcu0b79akOGx9jlm6kI8g 8VqR2am8OIiKlrgDNBkE76o1dnX3I3fDHKEqaCn7mqNmygQFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe6qIQ9E/fO4ezyq/yaXbv2/DikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBl YmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0NWQ4YjQ2YjIvNmNmMDljMTEtY2RmYy0z MjkxLWE3OWYtNjk5M2U2NzEwZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjUwZWJjZTMtZGRmNS00ZmIwLWI4 ZWQtYjlhNDVkOGI0NmIyL2I1MGViY2UzLWRkZjUtNGZiMC1iOGVkLWI5YTQ1ZDhi NDZiMi5jcmwwHwYDVR0jBBgwFoAUVs/TeO1FMPG70WFTkaT81Dem6iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBlYmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0 NWQ4YjQ2YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3EK1y0uWnqvJhmVcemxBOOLfdmf9rJ1xMeKDEH7Rb+/iK9xF9euXRx sdU/qUSx2Y3yKHhk9i8N4D0jKjjeNQqbgJhlTwiIWu/eKdz0ZXcNf6hBgHjtGSlA 5nGuoFxbIbAla3JkMYR1J8mMwBlSYEqdMGEo5ljNufq8HIRJlj8Y8OvYA1MPbmf3 9SNoIw/vl8DPSpxyUV3lHM8F84EuTrpswIF4fbMX5fF5JyH8VP71dyvKbshAc879 qR35rlfFX9t3Wv/u1Chnj0Ycr1XzWmIWmdx3CwK8IZSipRInCnttuYIPnvrqHtGG 4Li7M5s8qjC7IvFbHygo0qr35nqVYTc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:51:56 2025 by rpki-client