$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/87493802-e09d-3695-9aa7-f2c300bd01a4.roa File: 87493802-e09d-3695-9aa7-f2c300bd01a4.roa (raw, json) Hash identifier: TbtLeApTESKINU59umDhvK9HDXaL9USxYNbHHBWpta0= Subject key identifier: DE:9D:53:D0:F3:A3:85:59:AC:21:F6:F6:44:36:AB:96:1A:D1:3A:34 Certificate issuer: /CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Certificate serial: 010D0C9F4328584B95AC1398A490FFAC8BE08180 Authority key identifier: 03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/87493802-e09d-3695-9aa7-f2c300bd01a4.roa Signing time: Mon 20 Oct 2025 13:09:51 +0000 ROA not before: Mon 20 Oct 2025 13:09:51 +0000 ROA not after: Sun 18 Jan 2026 14:09:51 +0000 asID: 62523 IP address blocks: 199.38.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ac:13:98:a4:90:ff:ac:8b:e0:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Validity Not Before: Oct 20 13:09:51 2025 GMT Not After : Jan 18 14:09:51 2026 GMT Subject: CN=349afeb5-b60d-4fd6-aadd-dcfb0cd9386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:3a:d9:ad:e8:82:97:cf:67:1d:ed:71:b4: bb:95:3e:84:90:6c:72:b7:7b:e4:fe:a4:16:6c:15: 53:2e:13:82:08:17:b4:0c:cf:12:96:54:b8:93:90: 45:db:28:54:4c:23:78:1d:4d:1e:83:fe:16:27:90: f6:5f:88:40:b2:3c:ad:7c:9a:50:5b:26:3c:33:4c: 6c:7b:f0:08:bb:b8:74:f8:9e:ff:13:86:be:ea:e6: f9:05:5d:4a:bc:88:6d:b9:ae:52:b4:1e:d0:b8:58: 1b:4a:bc:e3:29:47:e9:f4:98:e6:60:bc:9a:cc:47: 71:37:5a:d6:d2:e3:44:55:7c:16:7c:cb:fe:64:ad: 59:48:14:5a:73:ba:1b:e9:6c:f1:10:07:c1:4b:40: e8:e6:8e:23:bd:da:ff:a4:75:b5:24:d3:0a:3e:5d: b6:4d:6d:f8:ed:e4:6e:94:58:ce:c5:a4:1b:47:09: 51:d1:09:5c:d7:aa:1d:cf:61:fa:ca:cc:7e:e6:07: 38:3d:a0:56:35:9b:0b:e7:3d:e9:61:56:d9:66:79: 86:c3:55:fc:88:65:56:ce:79:d8:17:42:c9:de:a8: 04:24:ff:1f:b2:8e:6b:ab:a2:8e:f2:f6:29:ee:74: ae:e0:63:e9:f8:df:81:c4:64:0b:ce:91:23:fe:f6: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9D:53:D0:F3:A3:85:59:AC:21:F6:F6:44:36:AB:96:1A:D1:3A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/87493802-e09d-3695-9aa7-f2c300bd01a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl X509v3 Authority Key Identifier: keyid:03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer sbgp-ipAddrBlock: critical IPv4: 199.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ef:40:0b:a0:b7:ad:38:f9:cc:50:cc:88:69:1e:8d:9d:8e: 8d:b1:85:de:f4:65:20:38:6e:04:a2:90:81:f2:9a:18:2a:87: d6:72:6e:17:12:50:fd:7e:5a:b9:cb:e3:9f:c7:3b:6e:0f:31: 56:ca:1c:0e:f4:79:c5:0c:d0:cc:21:e9:f4:27:20:58:f9:37: 4f:ef:71:a8:3d:a2:a3:5a:16:d6:8b:77:be:1d:ad:24:a6:5b: 25:bc:1d:92:50:0f:d3:ad:01:5d:a5:f3:58:ba:9b:b6:54:56: 9a:22:2e:90:5f:8b:ac:75:5f:76:c9:05:57:20:03:19:d7:7d: cb:d9:df:b2:1b:b2:dc:b7:fb:c6:89:1c:cc:39:f1:50:24:b0: a2:00:25:a6:ce:bb:5e:d8:40:1a:b5:4a:24:14:24:9a:ec:b4: e9:76:60:ae:26:d5:51:d5:ea:2d:31:1c:f6:cb:29:05:43:0c: f3:0d:9c:45:cc:79:25:a8:27:c5:3b:4e:75:a1:55:57:81:a3: d7:ce:ae:7d:2c:1a:1f:9b:41:b3:29:f0:94:6f:46:9a:74:78: 86:c9:45:31:26:61:90:b3:5f:60:38:ea:46:bb:2f:14:73:d0: b5:9a:fb:bf:cc:67:15:42:df:13:aa:0b:df:01:49:4d:03:74: 6a:b5:29:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVrBOYpJD/rIvggYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU0NjBjMGYtNTJhYy00NGRjLWEyYmEtMTI1MDU1NWRi YTFmMB4XDTI1MTAyMDEzMDk1MVoXDTI2MDExODE0MDk1MVowLzEtMCsGA1UEAxMk MzQ5YWZlYjUtYjYwZC00ZmQ2LWFhZGQtZGNmYjBjZDkzODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVw62a3ogpfPZx3tcbS7lT6EkGxyt3vk/qQW bBVTLhOCCBe0DM8SllS4k5BF2yhUTCN4HU0eg/4WJ5D2X4hAsjytfJpQWyY8M0xs e/AIu7h0+J7/E4a+6ub5BV1KvIhtua5StB7QuFgbSrzjKUfp9JjmYLyazEdxN1rW 0uNEVXwWfMv+ZK1ZSBRac7ob6WzxEAfBS0Do5o4jvdr/pHW1JNMKPl22TW347eRu lFjOxaQbRwlR0Qlc16odz2H6ysx+5gc4PaBWNZsL5z3pYVbZZnmGw1X8iGVWznnY F0LJ3qgEJP8fso5rq6KO8vYp7nSu4GPp+N+BxGQLzpEj/vbZCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6dU9Dzo4VZrCH29kQ2q5Ya0To0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2 MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUwNTU1ZGJhMWYvODc0OTM4MDItZTA5ZC0z Njk1LTlhYTctZjJjMzAwYmQwMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODU0NjBjMGYtNTJhYy00NGRjLWEy YmEtMTI1MDU1NWRiYTFmLzg1NDYwYzBmLTUyYWMtNDRkYy1hMmJhLTEyNTA1NTVk YmExZi5jcmwwHwYDVR0jBBgwFoAUAwiTttenhsGJa3cTLyM2l8RvyQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUw NTU1ZGJhMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExyYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7vQAugt604+cxQzIhpHo2djo2xhd70ZSA4bgSikIHymhgqh9ZybhcS UP1+WrnL45/HO24PMVbKHA70ecUM0Mwh6fQnIFj5N0/vcag9oqNaFtaLd74drSSm WyW8HZJQD9OtAV2l81i6m7ZUVpoiLpBfi6x1X3bJBVcgAxnXfcvZ37Ibsty3+8aJ HMw58VAksKIAJabOu17YQBq1SiQUJJrstOl2YK4m1VHV6i0xHPbLKQVDDPMNnEXM eSWoJ8U7TnWhVVeBo9fOrn0sGh+bQbMp8JRvRpp0eIbJRTEmYZCzX2A46ka7LxRz 0LWa+7/MZxVC3xOqC98BSU0DdGq1Kcg= -----END CERTIFICATE-----Generated at Wed Oct 29 05:01:11 2025 by rpki-client