$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa File: 4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa (raw, json) Hash identifier: VwiaXluP6JIIUx5s1HLU9oMdwwoGA8F2u1LH5MRO3Os= Subject key identifier: 37:3F:04:0C:3D:E3:F2:4F:7D:9C:77:2F:C7:AE:1D:10:0B:89:4E:5A Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AF429835C9AE848540C80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 137.184.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f4:29:83:5c:9a:e8:48:54:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=af675b70-4b22-4d52-84f7-50dfe8fce401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:fb:e0:cc:f4:e4:ae:75:08:83:48:d1:88: 16:22:63:99:db:ff:fa:a9:96:18:ac:2c:8f:62:f6: c7:5d:0e:2c:dd:25:27:d6:a5:e6:6f:0a:6f:49:4d: 47:67:56:93:ec:57:e1:b4:42:d0:e7:b3:17:b6:65: 45:56:b3:cc:ed:86:1b:a3:85:bb:14:bc:d4:dc:45: ed:6a:16:01:73:f9:f4:eb:cb:55:8a:87:ad:d6:18: b6:88:18:3a:9f:6a:bd:31:ca:3a:68:c7:79:28:cf: 0b:aa:5d:26:46:bd:98:66:bc:ba:a9:65:be:eb:31: 8a:98:67:6b:b6:00:02:b1:be:b3:6c:cc:6e:fd:f4: 00:7e:91:a5:fd:89:81:77:d1:ff:b5:ca:2e:78:7a: 79:0b:fa:af:0d:9d:9a:c2:38:09:ac:e7:95:0e:33: 0b:84:e5:dc:6b:be:e1:98:1a:a0:02:54:f4:d2:61: db:cb:76:5f:be:70:7a:9c:33:98:4a:1e:4d:06:47: e0:36:df:a3:cc:34:b3:6d:0b:c4:b1:5b:42:0f:66: 9e:53:89:13:4d:aa:da:c3:76:9d:5e:ff:0a:9c:68: 8d:dd:38:b3:88:71:f1:38:57:e6:a4:92:9e:aa:a8: 67:75:ed:bb:09:b4:56:c9:cf:1c:5b:fd:74:70:c2: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3F:04:0C:3D:E3:F2:4F:7D:9C:77:2F:C7:AE:1D:10:0B:89:4E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 137.184.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6c:aa:43:44:9d:da:55:08:70:b3:cb:e5:6b:4d:e5:a5:8e: 07:fe:a9:ee:d6:b2:94:d0:15:d1:e3:68:5a:e9:2e:52:24:e9: a4:ac:50:89:a2:86:04:3f:e0:48:b4:81:d7:b4:a4:c4:31:ea: 82:ed:9b:83:a2:8e:b5:86:69:e1:a4:08:aa:97:89:1f:e3:75: 51:9a:26:3f:c6:21:58:71:c9:b0:e4:34:8f:67:88:40:89:63: 1c:98:d9:07:c4:c1:ec:63:d1:8b:1b:f5:36:e5:76:81:0c:d7: ff:67:9c:05:66:97:bd:7c:0a:bc:5a:da:5f:2a:1a:d5:32:e4: f0:00:0b:90:1e:af:03:26:9c:89:0b:49:e6:ca:8e:31:e8:74: 7a:e1:41:8d:24:92:02:e2:21:75:08:3c:51:d8:2b:cd:f4:70: b2:5f:81:81:72:eb:2f:4a:e2:1c:35:c5:a4:32:e8:6f:a1:0e: 7a:c4:3d:f3:41:1a:5b:7d:82:24:52:41:96:25:a0:55:0f:26: 78:4c:ce:06:63:11:40:2b:0a:04:1f:0c:ca:96:9f:32:ef:83: 9c:0f:4b:15:05:9a:bc:bd:a6:0e:d8:91:04:94:91:c7:ac:30: e7:6f:92:cc:c1:c1:bc:21:1c:9a:b3:01:ef:46:50:0e:48:ac: 3b:51:b8:9a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvFOvQpg1ya6EhUDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWY2NzViNzAtNGIyMi00ZDUyLTg0ZjctNTBkZmU4ZmNlNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jL74Mz05K51CINI0YgWImOZ2//6qZYYrCyP YvbHXQ4s3SUn1qXmbwpvSU1HZ1aT7FfhtELQ57MXtmVFVrPM7YYbo4W7FLzU3EXt ahYBc/n068tVioet1hi2iBg6n2q9Mco6aMd5KM8Lql0mRr2YZry6qWW+6zGKmGdr tgACsb6zbMxu/fQAfpGl/YmBd9H/tcoueHp5C/qvDZ2awjgJrOeVDjMLhOXca77h mBqgAlT00mHby3ZfvnB6nDOYSh5NBkfgNt+jzDSzbQvEsVtCD2aeU4kTTaraw3ad Xv8KnGiN3TiziHHxOFfmpJKeqqhnde27CbRWyc8cW/10cMKRpwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDc/BAw94/JPfZx3L8euHRALiU5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNDA3NWVmZDYtZjVhNS0z ZmQ3LTkxMDYtZDNlMTI1MzNmZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAibgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqGyqQ0Sd2lUIcLPL5WtN5aWOB/6p7taylNAV0eNoWukuUiTppKxQiaKG BD/gSLSB17SkxDHqgu2bg6KOtYZp4aQIqpeJH+N1UZomP8YhWHHJsOQ0j2eIQIlj HJjZB8TB7GPRixv1NuV2gQzX/2ecBWaXvXwKvFraXyoa1TLk8AALkB6vAyaciQtJ 5sqOMeh0euFBjSSSAuIhdQg8UdgrzfRwsl+BgXLrL0riHDXFpDLob6EOesQ980Ea W32CJFJBliWgVQ8meEzOBmMRQCsKBB8MypafMu+DnA9LFQWavL2mDtiRBJSRx6ww 52+SzMHBvCEcmrMB70ZQDkisO1G4mg== -----END CERTIFICATE-----Generated at Fri Nov 7 02:29:13 2025 by rpki-client