$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa File: 1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa (raw, json) Hash identifier: d8eFKz2ASVxWp0sA06pSbM0kazBS/0cwaEn1sSTiuP4= Subject key identifier: 7F:72:71:86:74:CC:0F:D1:FA:EA:A8:BC:42:86:22:B5:6D:82:B9:3E Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AFAF5AAAFAED1EB0C8F00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 143.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:fa:f5:aa:af:ae:d1:eb:0c:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=4c9b1105-a9d4-4e16-b97e-0b98dc20e5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:ca:cb:6b:4e:cc:b9:e2:7d:d8:0f:d5:9b: a8:b9:49:e3:4e:f8:49:e0:dc:25:d7:74:ec:33:c1: 2b:12:3a:8b:e7:2e:04:b2:4f:60:28:1e:85:f1:61: 27:84:67:d4:b0:bb:f2:ff:43:75:ca:21:15:78:99: 4a:9d:08:a4:48:75:0b:d3:43:b0:da:cf:8d:63:33: fd:74:cc:01:9d:c3:9e:03:72:15:41:0d:16:23:89: 18:93:5f:e6:98:f0:7a:cc:0a:1a:21:cf:50:06:b6: 2f:e1:df:a9:c0:dd:9b:01:e7:9c:02:d5:f3:7d:5c: 36:e2:fd:1b:aa:0f:c0:35:87:ef:0f:7c:1f:a2:ed: f1:ec:1a:b5:11:05:2d:63:f7:9a:85:86:74:d7:c5: 72:c8:eb:93:6f:69:d3:7f:ee:8b:78:6f:45:4c:2f: b7:44:68:53:17:c0:69:72:5e:9c:73:32:87:f2:78: 2e:f0:9b:6e:57:ad:a0:d6:3e:40:b0:a9:3f:17:5d: 7d:8b:17:2c:cd:ff:fb:73:14:ae:65:c7:de:10:77: df:b4:ac:21:2a:e7:82:7e:64:f1:29:c3:80:b6:36: 62:d7:af:03:af:d4:da:49:96:2d:b5:56:01:9a:d7: 97:6a:18:d5:d4:d6:bf:a1:24:5b:d6:f3:0a:6f:66: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:72:71:86:74:CC:0F:D1:FA:EA:A8:BC:42:86:22:B5:6D:82:B9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 143.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d5:88:af:c6:18:fa:54:a6:e1:6e:4e:5e:15:6e:48:a7:62: 51:8e:91:fc:e1:a1:67:4b:db:f8:37:37:a1:cd:6c:7a:88:a7: a9:e6:b6:7e:2d:94:f7:20:26:8f:20:34:43:a4:1a:eb:9b:41: 6f:4d:0e:ae:37:2a:79:b3:fc:62:84:18:93:53:6f:df:98:b2: 3c:31:c8:5f:6e:fd:54:44:f0:f3:f7:bf:28:93:2b:a1:0b:e1: 36:14:e3:f5:93:b7:c0:ff:95:ed:f2:e8:1f:2f:96:56:35:56: a8:ce:b2:c1:7c:90:4f:f0:be:63:1b:ae:cd:a0:62:aa:37:78: 1b:a0:0f:f8:7e:98:c7:f4:1a:1f:f9:d3:06:e7:d9:47:8d:23: 19:b2:a7:3b:20:5c:40:b7:5c:dc:9f:38:71:c2:22:e3:a9:d1: dd:af:34:3e:0d:8e:8d:ff:a6:20:a1:6f:4e:4a:f6:06:a5:68: 60:24:9c:89:75:11:69:04:c1:d4:21:1b:0a:30:28:30:2e:6f: 58:7f:42:01:d7:7e:e6:04:ff:d5:ad:6a:6c:42:35:33:a8:88: 2b:21:97:3c:68:67:a2:00:f9:86:7b:4a:58:e1:4e:87:e3:f4: 67:ed:05:be:74:70:3b:77:8d:d9:ec:3d:1f:21:1a:1d:fb:a8: c1:07:9c:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvFOvr1qq+u0esMjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGM5YjExMDUtYTlkNC00ZTE2LWI5N2UtMGI5OGRjMjBlNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPzKy2tOzLnifdgP1ZuouUnjTvhJ4Nwl13Ts M8ErEjqL5y4Esk9gKB6F8WEnhGfUsLvy/0N1yiEVeJlKnQikSHUL00Ow2s+NYzP9 dMwBncOeA3IVQQ0WI4kYk1/mmPB6zAoaIc9QBrYv4d+pwN2bAeecAtXzfVw24v0b qg/ANYfvD3wfou3x7Bq1EQUtY/eahYZ018VyyOuTb2nTf+6LeG9FTC+3RGhTF8Bp cl6cczKH8ngu8JtuV62g1j5AsKk/F119ixcszf/7cxSuZcfeEHfftKwhKueCfmTx KcOAtjZi168Dr9TaSZYttVYBmteXahjV1Na/oSRb1vMKb2ZKSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH9ycYZ0zA/R+uqovEKGIrVtgrk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMWY2YTZlNGItZjQyZC0z NGJkLWI1YjYtNTJiNDI0NWM2ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj8YwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjNWIr8YY+lSm4W5OXhVuSKdiUY6R/OGhZ0vb+Dc3oc1seoinqea2fi2U 9yAmjyA0Q6Qa65tBb00OrjcqebP8YoQYk1Nv35iyPDHIX279VETw8/e/KJMroQvh NhTj9ZO3wP+V7fLoHy+WVjVWqM6ywXyQT/C+YxuuzaBiqjd4G6AP+H6Yx/QaH/nT BufZR40jGbKnOyBcQLdc3J84ccIi46nR3a80Pg2Ojf+mIKFvTkr2BqVoYCSciXUR aQTB1CEbCjAoMC5vWH9CAdd+5gT/1a1qbEI1M6iIKyGXPGhnogD5hntKWOFOh+P0 Z+0FvnRwO3eN2ew9HyEaHfuowQeciQ== -----END CERTIFICATE-----Generated at Fri Nov 7 02:30:27 2025 by rpki-client