$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/85ed9130-391f-3b65-89fa-da75238163af.roa File: 85ed9130-391f-3b65-89fa-da75238163af.roa (raw, json) Hash identifier: eDYBtfPsgvqOcRv1Bc+OXtEq7SChk72gVkf1KPdUjaw= Subject key identifier: 14:EC:6C:AD:EC:AE:01:44:56:27:C9:A1:49:47:1A:A4:91:B6:BE:D8 Certificate issuer: /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Certificate serial: 010D0C9F4328584B9E07CD3248C9479AF84AE300 Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/85ed9130-391f-3b65-89fa-da75238163af.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53428 IP address blocks: 204.12.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cd:32:48:c9:47:9a:f8:4a:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d5fdada0-4751-49b2-be0c-9174ee98d60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:33:f2:17:d4:c4:c4:9a:2e:11:3e:c0:3f: eb:39:9b:f4:00:62:53:89:af:68:f9:b1:c7:6e:b2: 97:4d:c0:51:29:61:25:47:c6:7c:ec:d6:da:95:9e: 2c:94:db:b9:5b:0b:ab:51:4b:ad:49:e8:06:af:72: d1:db:8a:5b:72:11:6d:6a:48:b5:c9:1d:84:f1:9e: f2:41:f5:74:53:44:94:1e:67:53:a0:d2:32:1e:89: 99:77:65:3d:ea:d9:14:bc:72:b7:79:fb:18:26:77: 64:92:89:0b:d3:69:fc:ac:08:fc:dc:c8:b5:5b:5d: b7:3a:77:a7:b6:57:33:ea:69:31:ec:76:97:e8:cf: 8e:1d:de:17:37:ec:2d:a3:1e:a6:44:75:02:8a:a4: 8c:88:e8:77:fd:88:bc:0d:24:39:8f:71:0f:8a:55: 4e:33:2a:02:5e:97:5e:98:37:96:59:0d:d2:07:a3: 6e:1f:07:bb:5b:19:01:08:f2:1e:83:e7:11:c9:f0: 73:12:a8:98:a5:7d:91:f2:ba:94:e0:e6:f7:5c:59: db:3a:95:31:34:64:d4:df:1f:d3:69:05:1d:c9:47: 17:a6:25:0a:02:c0:d2:33:32:c2:de:1c:1c:00:1e: 26:75:49:35:eb:4c:34:b3:6d:1f:91:b5:6d:40:2d: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EC:6C:AD:EC:AE:01:44:56:27:C9:A1:49:47:1A:A4:91:B6:BE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/85ed9130-391f-3b65-89fa-da75238163af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl X509v3 Authority Key Identifier: keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer sbgp-ipAddrBlock: critical IPv4: 204.12.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:92:6a:e0:9b:f6:b2:81:69:10:39:c9:0c:f6:2f:64:fe:3d: 4b:96:bf:70:df:8b:17:b5:21:3f:9c:1a:f0:d8:d1:52:ba:ec: 0d:9d:b3:80:81:54:f4:58:54:72:4e:96:63:67:94:cc:13:a0: 4e:ba:9c:fe:e8:92:fc:d0:c2:82:64:a4:d4:3d:0d:50:05:32: 0f:28:90:59:02:1e:b6:c3:6a:f2:67:2f:67:67:9d:58:4c:f0: 8e:a9:a5:e4:5b:a6:59:ef:f9:b6:0b:30:b6:22:97:82:96:fe: 56:b4:d6:5d:20:7a:af:da:93:e1:ef:5a:ea:c7:cd:e4:ab:3c: be:a2:75:6a:9d:e1:9d:e6:b4:be:c1:c1:76:ba:30:d8:7b:fe: 4d:1c:94:be:cd:96:eb:71:49:3c:47:f3:db:dd:8d:d3:c5:83: b9:a2:7b:7e:f1:dd:ec:56:7d:7d:89:6f:13:6a:a5:00:a2:75: 4f:1f:40:74:f2:01:be:db:6b:34:ba:54:26:fa:8c:4f:78:e5: c0:49:47:30:af:60:9a:b6:9d:cd:4b:2c:36:2f:80:86:0d:e3: 42:31:1d:57:c6:1d:18:af:96:e8:a1:75:a0:77:e8:05:20:3c: 70:e9:bf:0b:a1:8c:6d:2e:90:5f:dd:16:56:9c:8b:9c:de:f3: 11:d3:d1:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB80ySMlHmvhK4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2ZjAxYjgtMTNhZC00Yzc5LWFhNzItNjVjZjBkZWRk ODk5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDVmZGFkYTAtNDc1MS00OWIyLWJlMGMtOTE3NGVlOThkNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvgz8hfUxMSaLhE+wD/rOZv0AGJTia9o+bHH brKXTcBRKWElR8Z87NbalZ4slNu5WwurUUutSegGr3LR24pbchFtaki1yR2E8Z7y QfV0U0SUHmdToNIyHomZd2U96tkUvHK3efsYJndkkokL02n8rAj83Mi1W123Onen tlcz6mkx7HaX6M+OHd4XN+wtox6mRHUCiqSMiOh3/Yi8DSQ5j3EPilVOMyoCXpde mDeWWQ3SB6NuHwe7WxkBCPIeg+cRyfBzEqiYpX2R8rqU4Ob3XFnbOpUxNGTU3x/T aQUdyUcXpiUKAsDSMzLC3hwcAB4mdUk160w0s20fkbVtQC0NRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTsbK3srgFEVifJoUlHGqSRtr7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZm MDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRlZGQ4OTkvODVlZDkxMzAtMzkxZi0z YjY1LTg5ZmEtZGE3NTIzODE2M2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGY2ZjAxYjgtMTNhZC00Yzc5LWFh NzItNjVjZjBkZWRkODk5LzhmNmYwMWI4LTEzYWQtNGM3OS1hYTcyLTY1Y2YwZGVk ZDg5OS5jcmwwHwYDVR0jBBgwFoAU0YPLdcSP3cpqvpY0LsdsUQ43/gMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNm MGRlZGQ4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6SauCb9rKBaRA5yQz2L2T+PUuWv3Dfixe1IT+cGvDY0VK67A2ds4CB VPRYVHJOlmNnlMwToE66nP7okvzQwoJkpNQ9DVAFMg8okFkCHrbDavJnL2dnnVhM 8I6ppeRbplnv+bYLMLYil4KW/la01l0geq/ak+HvWurHzeSrPL6idWqd4Z3mtL7B wXa6MNh7/k0clL7NlutxSTxH89vdjdPFg7mie37x3exWfX2JbxNqpQCidU8fQHTy Ab7bazS6VCb6jE945cBJRzCvYJq2nc1LLDYvgIYN40IxHVfGHRivluihdaB36AUg PHDpvwuhjG0ukF/dFlaci5ze8xHT0dg= -----END CERTIFICATE-----Generated at Tue Oct 28 13:12:08 2025 by rpki-client