$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa File: dbf13fb6-398c-328d-b921-4514d9775eaf.roa (raw, json) Hash identifier: BR/oPOgGkyhGjGo1ctIJh+x8aPRb3zLQEO/a7K2O9x4= Subject key identifier: FD:31:36:CE:4A:6D:6D:3D:DA:54:84:BF:2B:77:B7:1D:7C:B8:5F:47 Certificate issuer: /CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Certificate serial: 010D0C9F4328584B9B4F159291EFFF01C393D800 Authority key identifier: 03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa Signing time: Wed 22 Oct 2025 13:37:20 +0000 ROA not before: Wed 22 Oct 2025 13:37:20 +0000 ROA not after: Tue 20 Jan 2026 14:37:20 +0000 asID: 62523 IP address blocks: 107.152.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:4f:15:92:91:ef:ff:01:c3:93:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Validity Not Before: Oct 22 13:37:20 2025 GMT Not After : Jan 20 14:37:20 2026 GMT Subject: CN=0bd37a6b-c64e-4939-82a1-b6cec37593f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:f9:d9:f0:e8:12:04:33:7c:bc:c1:26:ca: b5:61:c2:74:a2:98:56:33:f0:92:cc:89:9b:11:5c: 92:87:5a:ef:55:1e:8a:bc:da:d7:7d:c8:3c:09:f2: 5b:f1:6d:31:8e:69:90:1e:9a:02:7e:fc:2d:97:3a: 4d:f6:ea:8e:f9:b0:41:13:bb:a1:47:62:74:46:bb: 1b:d5:51:b8:1f:df:3c:03:78:5b:ff:18:cd:70:ed: c9:31:70:a8:e6:10:2a:55:19:6a:a5:bc:e9:e1:09: db:67:45:85:0f:f3:fe:b8:b5:2c:9f:78:4c:7d:4f: a7:91:6e:3d:04:46:9b:ea:93:0c:a2:82:70:6d:97: c5:77:47:07:95:ee:77:18:50:f0:df:68:6b:b4:3d: 23:46:87:ed:15:a8:db:53:32:f6:a4:9c:68:4b:da: df:a4:78:6e:1b:ac:00:45:7e:cd:08:fc:0a:85:93: 4c:1f:f5:1e:a9:b5:f1:05:07:1a:5d:79:4d:a4:e5: 8d:03:f1:5e:a6:68:6b:57:4d:62:95:a3:ce:d3:77: 03:a3:e7:30:e5:88:da:0d:28:ba:29:ad:54:1c:71: b1:b6:1d:d9:24:08:b2:6c:93:ea:1f:ce:f9:1d:e5: 7e:7a:cb:91:60:b5:f3:7b:f2:49:60:ee:6e:f3:69: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:31:36:CE:4A:6D:6D:3D:DA:54:84:BF:2B:77:B7:1D:7C:B8:5F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/dbf13fb6-398c-328d-b921-4514d9775eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl X509v3 Authority Key Identifier: keyid:03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer sbgp-ipAddrBlock: critical IPv4: 107.152.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b3:ad:01:12:2a:b5:78:a6:9b:d2:35:ce:c3:89:84:04:06: 9d:ec:84:fe:dd:92:fb:10:ba:40:32:06:ce:4b:59:56:ea:0a: 8d:3a:8f:36:01:b2:ef:ef:d1:8c:fc:30:84:d0:35:7b:3f:aa: b1:7e:cd:5e:aa:dd:05:08:d2:31:f4:87:13:eb:11:31:3d:20: a0:f9:17:35:91:de:2d:ba:e3:f6:c8:8c:1a:be:12:ae:20:9f: 09:a7:92:ac:ea:0a:7d:02:0b:ec:9a:92:c9:a9:f1:da:17:e7: 22:be:d6:6c:01:c1:8a:f9:82:49:1c:2b:e7:be:d4:29:41:bb: f8:41:a5:9a:72:ee:49:28:bd:3d:b3:d9:f6:ac:5f:50:ae:1f: 49:6b:42:73:f7:a4:c9:33:12:05:41:88:25:8a:1d:bb:a2:1c: 6b:73:10:8a:be:73:4d:4a:91:00:c7:3e:ef:68:b4:69:5f:dd: eb:1c:dc:9f:cc:f9:5b:e3:de:7e:b8:31:e4:b0:4c:25:54:e5: f5:3d:13:e3:03:bd:52:dc:75:d0:b4:82:db:0d:ef:2b:8a:02: 69:50:6f:b7:98:bd:f9:3a:d9:f1:10:26:94:82:a7:05:f5:ad: 66:04:d5:0e:3e:3a:a1:cb:32:a1:3e:2e:45:5e:59:67:25:54: a0:48:f2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubTxWSke//AcOT2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU0NjBjMGYtNTJhYy00NGRjLWEyYmEtMTI1MDU1NWRi YTFmMB4XDTI1MTAyMjEzMzcyMFoXDTI2MDEyMDE0MzcyMFowLzEtMCsGA1UEAxMk MGJkMzdhNmItYzY0ZS00OTM5LTgyYTEtYjZjZWMzNzU5M2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUL52fDoEgQzfLzBJsq1YcJ0ophWM/CSzImb EVySh1rvVR6KvNrXfcg8CfJb8W0xjmmQHpoCfvwtlzpN9uqO+bBBE7uhR2J0Rrsb 1VG4H988A3hb/xjNcO3JMXCo5hAqVRlqpbzp4QnbZ0WFD/P+uLUsn3hMfU+nkW49 BEab6pMMooJwbZfFd0cHle53GFDw32hrtD0jRoftFajbUzL2pJxoS9rfpHhuG6wA RX7NCPwKhZNMH/UeqbXxBQcaXXlNpOWNA/FepmhrV01ilaPO03cDo+cw5YjaDSi6 Ka1UHHGxth3ZJAiybJPqH875HeV+esuRYLXze/JJYO5u82kWOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0xNs5KbW092lSEvyt3tx18uF9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2 MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUwNTU1ZGJhMWYvZGJmMTNmYjYtMzk4Yy0z MjhkLWI5MjEtNDUxNGQ5Nzc1ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODU0NjBjMGYtNTJhYy00NGRjLWEy YmEtMTI1MDU1NWRiYTFmLzg1NDYwYzBmLTUyYWMtNDRkYy1hMmJhLTEyNTA1NTVk YmExZi5jcmwwHwYDVR0jBBgwFoAUAwiTttenhsGJa3cTLyM2l8RvyQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUw NTU1ZGJhMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyzrQESKrV4ppvSNc7DiYQEBp3shP7dkvsQukAyBs5LWVbqCo06jzYB su/v0Yz8MITQNXs/qrF+zV6q3QUI0jH0hxPrETE9IKD5FzWR3i264/bIjBq+Eq4g nwmnkqzqCn0CC+yaksmp8doX5yK+1mwBwYr5gkkcK+e+1ClBu/hBpZpy7kkovT2z 2fasX1CuH0lrQnP3pMkzEgVBiCWKHbuiHGtzEIq+c01KkQDHPu9otGlf3esc3J/M +Vvj3n64MeSwTCVU5fU9E+MDvVLcddC0gtsN7yuKAmlQb7eYvfk62fEQJpSCpwX1 rWYE1Q4+OqHLMqE+LkVeWWclVKBI8vI= -----END CERTIFICATE-----Generated at Wed Oct 29 05:01:12 2025 by rpki-client