$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa File: dbf13fb6-398c-328d-b921-4514d9775eaf.roa (raw, json) Hash identifier: NYVWfqkJ2LWiKp3LxqlHm0cI9n3hPDC4/AFdkthFudI= Subject key identifier: 67:0A:6F:58:48:7A:39:2A:0F:B7:23:59:5B:EB:2C:F2:CC:08:C9:FE Certificate issuer: /CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Certificate serial: 010D0C9F4328584E3CF9C10CDC23D4E431D9F140 Authority key identifier: 03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa Signing time: Sat 20 Jun 2026 21:00:12 +0000 ROA not before: Sat 20 Jun 2026 21:00:12 +0000 ROA not after: Fri 18 Sep 2026 21:00:12 +0000 asID: 62523 IP address blocks: 107.152.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f9:c1:0c:dc:23:d4:e4:31:d9:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Validity Not Before: Jun 20 21:00:12 2026 GMT Not After : Sep 18 21:00:12 2026 GMT Subject: CN=472cb32e-5c5b-4053-a216-d309562042b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:88:25:ec:8b:d0:1a:03:80:4f:48:91:7f:89: f4:cd:80:94:56:e9:9f:40:4d:ed:6a:87:33:85:e6: 11:cf:13:f5:10:33:37:e0:9b:1e:f1:9a:f7:e6:76: af:08:22:84:0a:64:cc:df:d0:bc:ba:f9:28:98:ec: 7e:0f:fa:71:1c:61:f5:4d:38:d3:ad:af:62:6d:02: c2:30:bf:e4:c1:4a:17:73:4b:24:7a:6d:78:72:00: 0b:f2:3a:38:8d:e6:13:fa:c3:87:86:19:4a:43:c2: 35:9f:82:0d:35:d8:4c:5f:a7:ac:2a:9d:09:5c:f4: 28:f3:a0:df:13:47:c7:c2:aa:7e:65:b1:39:a3:80: 3a:1d:9d:a3:2e:63:04:b8:f3:07:e0:0b:33:67:84: 1a:d6:68:71:e8:31:49:36:f7:e6:20:fb:ad:a9:4b: 9f:68:ca:28:a1:f5:01:8e:86:ae:b8:58:78:b7:48: 11:b8:b9:b1:41:d7:46:4a:5d:5e:34:c1:e9:08:a6: 9a:4a:b2:f2:ba:5d:a6:bb:4f:99:16:21:76:17:2e: 4d:f0:1f:84:13:dd:76:30:63:4b:fa:c4:33:ac:0b: ec:76:84:0c:1b:f9:df:6e:67:3b:91:35:8b:66:3a: 8a:2f:07:8a:0e:fd:24:57:46:79:d9:5a:c2:48:a8: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:6F:58:48:7A:39:2A:0F:B7:23:59:5B:EB:2C:F2:CC:08:C9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl X509v3 Authority Key Identifier: keyid:03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer sbgp-ipAddrBlock: critical IPv4: 107.152.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3b:68:09:c4:c1:bc:d6:d0:dc:ba:b9:6e:84:6d:15:09:7c: 84:f6:e9:ff:fa:25:88:46:3c:38:d7:ca:32:31:25:69:53:ec: 6f:ea:3a:4e:1f:5e:15:30:62:a6:14:c9:64:e3:69:78:e4:4c: 3c:cd:7b:e5:9d:63:d1:72:ac:a3:8b:39:f9:2e:8f:5e:50:6f: 40:a0:74:69:24:05:56:79:0d:5a:ba:68:1f:4b:85:22:d2:44: 84:41:26:23:e7:01:b0:08:9f:59:a6:0d:08:06:0d:31:e6:bb: 11:a1:71:cd:5e:43:b8:bd:bd:c4:5a:37:e0:0d:f1:28:af:0d: 0f:b8:ab:1b:30:93:52:26:7e:69:67:17:f0:22:ab:5b:1c:de: 80:66:21:50:e8:ed:c9:78:08:88:10:f2:a5:f8:7e:0f:0f:de: 45:99:77:a0:e9:be:8a:36:99:84:a7:e4:c6:90:b8:fc:7a:63: 72:79:87:ae:3e:f8:86:e8:c9:81:81:6a:a3:98:61:52:c2:67: 97:11:f0:e0:18:4b:1d:c2:1f:e2:1b:a2:3a:a3:6b:2e:eb:fb: cb:a1:ba:a3:a7:8d:b9:04:7d:57:c1:de:58:ee:ff:cc:67:e7: 67:69:9c:a3:d5:0b:64:d3:45:d6:3e:d4:15:66:6e:e5:7f:9d: f1:96:e7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE48+cEM3CPU5DHZ8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU0NjBjMGYtNTJhYy00NGRjLWEyYmEtMTI1MDU1NWRi YTFmMB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk NDcyY2IzMmUtNWM1Yi00MDUzLWEyMTYtZDMwOTU2MjA0MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIgl7IvQGgOAT0iRf4n0zYCUVumfQE3taocz heYRzxP1EDM34Jse8Zr35navCCKECmTM39C8uvkomOx+D/pxHGH1TTjTra9ibQLC ML/kwUoXc0skem14cgAL8jo4jeYT+sOHhhlKQ8I1n4INNdhMX6esKp0JXPQo86Df E0fHwqp+ZbE5o4A6HZ2jLmMEuPMH4AszZ4Qa1mhx6DFJNvfmIPutqUufaMooofUB joauuFh4t0gRuLmxQddGSl1eNMHpCKaaSrLyul2mu0+ZFiF2Fy5N8B+EE912MGNL +sQzrAvsdoQMG/nfbmc7kTWLZjqKLweKDv0kV0Z52VrCSKiqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcKb1hIejkqD7cjWVvrLPLMCMn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2 MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUwNTU1ZGJhMWYvZGJmMTNmYjYtMzk4Yy0z MjhkLWI5MjEtNDUxNGQ5Nzc1ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODU0NjBjMGYtNTJhYy00NGRjLWEy YmEtMTI1MDU1NWRiYTFmLzg1NDYwYzBmLTUyYWMtNDRkYy1hMmJhLTEyNTA1NTVk YmExZi5jcmwwHwYDVR0jBBgwFoAUAwiTttenhsGJa3cTLyM2l8RvyQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUw NTU1ZGJhMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs7aAnEwbzW0Ny6uW6EbRUJfIT26f/6JYhGPDjXyjIxJWlT7G/qOk4f XhUwYqYUyWTjaXjkTDzNe+WdY9FyrKOLOfkuj15Qb0CgdGkkBVZ5DVq6aB9LhSLS RIRBJiPnAbAIn1mmDQgGDTHmuxGhcc1eQ7i9vcRaN+AN8SivDQ+4qxswk1Imfmln F/Aiq1sc3oBmIVDo7cl4CIgQ8qX4fg8P3kWZd6Dpvoo2mYSn5MaQuPx6Y3J5h64+ +IboyYGBaqOYYVLCZ5cR8OAYSx3CH+Ibojqjay7r+8uhuqOnjbkEfVfB3lju/8xn 52dpnKPVC2TTRdY+1BVmbuV/nfGW5zM= -----END CERTIFICATE-----Generated at Mon Jul 13 01:21:14 2026 by rpki-client