$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa File: d97bba36-eba0-3176-b968-980f5a55ba17.roa (raw, json) Hash identifier: br6Gl66fctKS7C5AVKh+ZUnMGM2GW1VlWwaFem4QLao= Subject key identifier: 2A:3C:9C:1F:BE:B9:59:84:24:89:11:37:30:2F:4B:99:5C:C7:82:1B Certificate issuer: /CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51 Certificate serial: 010D0C9F4328584D71A5250450B1F26DEEFC3D00 Authority key identifier: B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 208414 IP address blocks: 195.85.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:25:04:50:b1:f2:6d:ee:fc:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd86b24-f9b6-4d31-b10b-a3c2264e2b51 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=b5e001b4-12a8-4327-8f3d-2e23e5a1bd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:26:31:2d:da:67:d1:4c:97:81:e9:e6:20: 18:40:7a:d6:58:76:43:16:db:65:4f:a3:14:ba:4a: c9:29:16:94:6b:31:1e:04:41:77:05:07:73:5b:4b: 15:b3:10:e7:41:cf:74:01:e0:be:db:ef:55:0a:24: 77:b7:e1:0e:a0:33:7b:a3:01:38:f5:72:82:d0:8b: 1d:f6:90:37:16:3d:7c:cc:01:05:03:9d:4d:fe:3e: a3:c1:4d:ea:c9:3b:8d:5a:e4:cd:25:b7:10:a6:7e: f0:5e:9b:26:9d:c9:97:50:6a:a4:32:9e:e0:8d:ce: ec:a3:bd:cb:29:40:9e:ac:26:cd:73:06:71:20:80: f3:4d:e1:75:e0:61:7f:fc:0d:af:93:13:61:8b:48: 25:e1:d9:7a:ab:1c:c7:10:b4:88:51:e4:be:48:0c: f3:0d:8e:90:c0:d6:2d:25:13:2f:b3:f2:33:a2:b9: f2:b9:b1:77:c3:b1:87:dd:bf:bf:6d:41:a4:96:88: 2b:f3:3f:f6:f6:d7:76:d7:ab:47:78:d8:47:e4:95: 64:97:b8:65:88:1e:24:3d:df:69:29:17:7a:5f:74: 21:9a:38:fd:66:1d:a7:2b:91:b7:3c:b9:57:d1:bf: 11:f1:b5:8e:24:8c:71:ab:57:4c:05:6e:b6:5d:3f: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:9C:1F:BE:B9:59:84:24:89:11:37:30:2F:4B:99:5C:C7:82:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/d97bba36-eba0-3176-b968-980f5a55ba17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.crl X509v3 Authority Key Identifier: keyid:B1:B1:5A:8D:37:B2:E2:C7:96:CD:2F:84:DB:A9:89:B5:EE:A7:8F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dd86b24-f9b6-4d31-b10b-a3c2264e2b51.cer sbgp-ipAddrBlock: critical IPv4: 195.85.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ad:b2:ca:23:f1:5a:43:7d:ce:67:8a:27:e9:82:45:1b:15: b7:ff:bd:16:ab:30:ad:e8:7e:07:3d:87:4a:9e:27:ec:ac:df: 85:17:6b:51:1f:c8:68:b8:c5:9d:98:7a:14:cc:36:3e:61:a0: 80:fc:5c:81:8c:4a:55:ac:5a:81:42:48:9d:8c:00:6d:8f:07: 92:f4:0f:89:3e:e9:31:b6:60:d9:1a:2f:e2:c2:1d:ea:a7:a5: 03:ec:19:a7:93:51:31:62:4c:2e:42:da:7a:86:69:d6:81:30: 38:7c:e5:6d:84:4a:93:9d:44:23:18:a7:92:7c:61:b2:3a:36: c2:f6:bb:56:43:46:1e:e1:a1:09:0a:56:09:b6:35:68:38:ec: f0:fc:5a:2e:3c:ae:d8:39:52:93:f8:7c:26:41:61:bf:f3:b1: 21:53:2b:c1:8f:22:64:44:60:97:78:65:91:7b:2a:df:e9:96: 57:3b:7a:0c:d4:74:fe:1e:31:ea:6f:9c:05:85:6b:29:5b:44: d8:e2:c6:26:8d:da:cc:3b:e9:97:50:fd:18:09:a7:67:8e:74: 81:f6:a4:42:9a:45:97:3f:d4:4d:dd:d3:89:ea:a8:94:1d:bb: 2a:0a:6a:17:df:49:bf:06:20:35:f2:71:61:59:ca:b2:f5:7d: 4e:27:d2:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSUEULHybe78PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRkODZiMjQtZjliNi00ZDMxLWIxMGItYTNjMjI2NGUy YjUxMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YjVlMDAxYjQtMTJhOC00MzI3LThmM2QtMmUyM2U1YTFiZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL8mMS3aZ9FMl4Hp5iAYQHrWWHZDFttlT6MU ukrJKRaUazEeBEF3BQdzW0sVsxDnQc90AeC+2+9VCiR3t+EOoDN7owE49XKC0Isd 9pA3Fj18zAEFA51N/j6jwU3qyTuNWuTNJbcQpn7wXpsmncmXUGqkMp7gjc7so73L KUCerCbNcwZxIIDzTeF14GF//A2vkxNhi0gl4dl6qxzHELSIUeS+SAzzDY6QwNYt JRMvs/IzornyubF3w7GH3b+/bUGklogr8z/29td216tHeNhH5JVkl7hliB4kPd9p KRd6X3Qhmjj9Zh2nK5G3PLlX0b8R8bWOJIxxq1dMBW62XT8QQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo8nB++uVmEJIkRNzAvS5lcx4IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZGQ4 NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2MyMjY0ZTJiNTEvZDk3YmJhMzYtZWJhMC0z MTc2LWI5NjgtOTgwZjVhNTViYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGRkODZiMjQtZjliNi00ZDMxLWIx MGItYTNjMjI2NGUyYjUxLzBkZDg2YjI0LWY5YjYtNGQzMS1iMTBiLWEzYzIyNjRl MmI1MS5jcmwwHwYDVR0jBBgwFoAUsbFajTey4seWzS+E26mJte6nj14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZGQ4NmIyNC1mOWI2LTRkMzEtYjEwYi1hM2My MjY0ZTJiNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6tssoj8VpDfc5niifpgkUbFbf/vRarMK3ofgc9h0qeJ+ys34UXa1Ef yGi4xZ2YehTMNj5hoID8XIGMSlWsWoFCSJ2MAG2PB5L0D4k+6TG2YNkaL+LCHeqn pQPsGaeTUTFiTC5C2nqGadaBMDh85W2ESpOdRCMYp5J8YbI6NsL2u1ZDRh7hoQkK Vgm2NWg47PD8Wi48rtg5UpP4fCZBYb/zsSFTK8GPImREYJd4ZZF7Kt/pllc7egzU dP4eMepvnAWFaylbRNjixiaN2sw76ZdQ/RgJp2eOdIH2pEKaRZc/1E3d04nqqJQd uyoKahffSb8GIDXycWFZyrL1fU4n0qM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:48 2026 by rpki-client