$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa File: dbf13fb6-398c-328d-b921-4514d9775eaf.roa (raw, json) Hash identifier: 0YGfl92NbXUrlptq5OLSMAsPDLYCwGEVcgjtakJv8Es= Subject key identifier: 43:4E:8E:8E:2D:33:F9:67:76:FD:9D:D7:A7:5B:5A:A7:11:EE:19:70 Certificate issuer: /CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Certificate serial: 010D0C9F4328584D5CB4F3BED4273C2A12719008 Authority key identifier: 03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 62523 IP address blocks: 107.152.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f3:be:d4:27:3c:2a:12:71:90:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=3cf22013-c718-461a-a39f-1f5632fae33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:bb:83:ea:54:fa:25:b1:f4:aa:bf:ff:a6: 3b:db:4a:ac:2b:46:3a:02:9f:ef:e4:0d:25:1d:58: fd:a5:b0:15:ad:89:b5:70:30:0e:33:7a:f6:7b:11: 3b:85:32:ee:fd:03:92:2a:fc:5b:e6:78:ea:b7:3b: b5:05:5c:88:4f:2e:9c:61:cf:d0:54:23:d5:67:6b: 05:ef:8c:d1:ff:bc:54:eb:7e:a1:33:af:2f:ea:63: 85:7e:36:4c:a1:28:5f:fd:a4:08:85:17:74:e6:60: 2b:61:79:50:62:53:f2:2e:37:11:e5:4d:5a:0d:ff: 2a:e8:d5:a0:87:c5:a8:ce:07:16:d6:f9:b9:10:0b: a1:0a:12:c0:a7:0c:fa:92:87:e3:f1:6d:ac:44:05: 4b:0e:7b:15:19:11:c4:be:6b:55:5c:64:70:9d:4d: dd:ca:2b:f4:24:af:3c:62:b4:b7:f0:bb:d2:dc:18: f0:e3:37:01:63:51:84:18:7d:36:07:e8:f3:37:67: d1:bf:fa:9c:bc:21:c3:d2:7f:53:13:a2:f9:fe:67: 50:56:c3:ec:20:0a:f4:e0:11:33:44:b5:6a:f8:03: fb:0d:46:ff:34:7a:bc:da:3d:62:0d:ea:98:1b:54: 40:4f:2c:53:28:e2:bd:59:7a:6e:9f:7e:45:08:ef: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:8E:8E:2D:33:F9:67:76:FD:9D:D7:A7:5B:5A:A7:11:EE:19:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl X509v3 Authority Key Identifier: keyid:03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer sbgp-ipAddrBlock: critical IPv4: 107.152.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8b:f0:ef:91:ae:de:ad:bb:e3:96:30:3c:7f:44:c9:f5:80: 45:70:d6:b8:06:93:e0:66:46:71:b0:cb:82:74:f8:33:bc:5f: 02:62:90:2d:22:da:b0:06:3b:06:c8:30:66:66:f3:b8:3a:b1: 03:cc:d5:72:47:05:d9:95:8e:dc:9c:82:b8:0b:4e:31:6f:60: c0:85:44:04:c9:4f:2f:b9:25:3c:5d:65:82:8c:73:bf:0d:3b: d9:af:ff:da:f9:66:1d:cd:ec:42:5a:07:90:95:8e:83:56:ed: 24:92:46:bd:4e:d6:a7:20:77:a6:ec:85:5f:5b:88:0a:87:c9: 25:72:5c:34:e9:0b:7d:ce:90:eb:3b:4c:6c:12:68:46:bb:0d: 45:e6:c9:b1:b3:98:68:b7:3d:8e:6f:d8:39:e6:a9:2a:4c:fe: 72:60:2e:07:f7:93:a3:bc:8a:c1:8f:43:42:eb:9b:52:50:5b: 25:5b:c5:fb:0d:2e:b1:33:7f:95:21:85:fa:b5:fd:17:4f:78: 49:8a:41:f8:87:9f:8d:32:85:e0:52:72:f0:8e:96:ef:6d:fc: a3:cf:fb:64:c6:1d:4c:fa:e8:51:e1:f9:a8:44:74:cb:ec:de: a7:1f:22:b2:a6:b5:16:80:89:6a:51:cd:d5:5e:64:09:ab:64: ae:5a:cb:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPO+1Cc8KhJxkAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU0NjBjMGYtNTJhYy00NGRjLWEyYmEtMTI1MDU1NWRi YTFmMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk M2NmMjIwMTMtYzcxOC00NjFhLWEzOWYtMWY1NjMyZmFlMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6my7g+pU+iWx9Kq//6Y720qsK0Y6Ap/v5A0l HVj9pbAVrYm1cDAOM3r2exE7hTLu/QOSKvxb5njqtzu1BVyITy6cYc/QVCPVZ2sF 74zR/7xU636hM68v6mOFfjZMoShf/aQIhRd05mArYXlQYlPyLjcR5U1aDf8q6NWg h8WozgcW1vm5EAuhChLApwz6kofj8W2sRAVLDnsVGRHEvmtVXGRwnU3dyiv0JK88 YrS38LvS3Bjw4zcBY1GEGH02B+jzN2fRv/qcvCHD0n9TE6L5/mdQVsPsIAr04BEz RLVq+AP7DUb/NHq82j1iDeqYG1RATyxTKOK9WXpun35FCO8HSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENOjo4tM/lndv2d16dbWqcR7hlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2 MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUwNTU1ZGJhMWYvZGJmMTNmYjYtMzk4Yy0z MjhkLWI5MjEtNDUxNGQ5Nzc1ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODU0NjBjMGYtNTJhYy00NGRjLWEy YmEtMTI1MDU1NWRiYTFmLzg1NDYwYzBmLTUyYWMtNDRkYy1hMmJhLTEyNTA1NTVk YmExZi5jcmwwHwYDVR0jBBgwFoAUAwiTttenhsGJa3cTLyM2l8RvyQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUw NTU1ZGJhMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqL8O+Rrt6tu+OWMDx/RMn1gEVw1rgGk+BmRnGwy4J0+DO8XwJikC0i 2rAGOwbIMGZm87g6sQPM1XJHBdmVjtycgrgLTjFvYMCFRATJTy+5JTxdZYKMc78N O9mv/9r5Zh3N7EJaB5CVjoNW7SSSRr1O1qcgd6bshV9biAqHySVyXDTpC33OkOs7 TGwSaEa7DUXmybGzmGi3PY5v2DnmqSpM/nJgLgf3k6O8isGPQ0Lrm1JQWyVbxfsN LrEzf5Uhhfq1/RdPeEmKQfiHn40yheBScvCOlu9t/KPP+2TGHUz66FHh+ahEdMvs 3qcfIrKmtRaAiWpRzdVeZAmrZK5ay6c= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:20 2026 by rpki-client