$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/507db457-ed93-395b-bfad-8aa0d178d5a9.roa File: 507db457-ed93-395b-bfad-8aa0d178d5a9.roa (raw, json) Hash identifier: 7jK02CgiyGmMTTDL2hQQQJtITC64NCHy+I+VZFwiNvM= Subject key identifier: AA:7B:5E:2F:4E:6D:85:A2:81:F2:82:F5:F4:F5:F9:84:C4:23:94:6D Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AF9FB2B55FB94F9A21930 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/507db457-ed93-395b-bfad-8aa0d178d5a9.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 209.97.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f9:fb:2b:55:fb:94:f9:a2:19:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=e89ac5e8-ccd5-475a-94d3-0cd1c5b2202a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:b3:54:93:41:f6:84:3a:15:34:b5:40:f9: 6d:b4:75:96:48:8a:8a:de:8b:71:98:20:9f:d0:55: 4b:da:d0:16:a7:10:aa:71:1c:d4:d5:ad:b2:00:80: 01:9e:05:a6:4c:b2:75:af:f3:0b:9f:28:aa:3d:40: 32:18:a1:6c:55:11:11:7b:9d:98:45:48:61:c8:d6: 44:4f:dc:d8:5c:38:0e:3c:93:c7:f1:68:88:f4:3b: 29:e0:3c:9f:32:ff:f4:90:55:f1:f9:bc:e1:c1:3a: 69:b7:a3:bf:6d:33:ad:db:a6:75:ac:86:99:05:a1: f1:de:e0:a8:40:2c:a5:80:c1:92:e6:bd:01:6a:c8: 0d:fd:47:12:85:4c:d3:cd:88:30:79:a9:e4:6a:14: e6:4e:f6:13:e5:bd:b7:5c:38:26:96:f5:78:64:6d: f9:de:02:2c:0e:8f:b1:e0:ba:0b:68:bc:87:8c:06: a0:b9:c6:8a:43:8b:b9:12:8f:0a:7c:46:ce:1f:3e: 5f:75:a7:47:67:65:b9:30:69:e3:ac:8d:3c:b7:11: ef:a1:6c:fb:4d:c2:d6:54:c5:12:e4:9a:c9:56:16: 7f:15:75:55:7a:f0:28:d8:14:4d:a7:7c:66:df:fa: 14:e4:f8:b7:8f:c6:e2:a5:df:eb:b6:5c:0b:31:3f: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:5E:2F:4E:6D:85:A2:81:F2:82:F5:F4:F5:F9:84:C4:23:94:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/507db457-ed93-395b-bfad-8aa0d178d5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.97.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c6:97:51:d0:c0:17:c7:04:89:a7:9d:1d:a9:c8:15:5c:00: 0b:ee:67:23:e4:9b:13:2e:77:08:eb:82:f8:b2:09:4b:91:83: 53:01:60:cf:2d:b9:37:38:78:0b:89:ea:07:0c:d5:01:e0:e2: cd:f0:e4:9b:45:6e:99:64:b3:0d:9b:5b:b4:89:24:e2:45:15: 58:25:8a:19:6c:0a:e6:77:11:04:f6:f5:5b:a2:49:28:4e:b6: f0:91:86:5b:d3:07:07:20:c2:2b:81:49:b5:b2:7a:d4:15:80: 2b:40:8d:b0:32:a1:a7:1c:10:93:25:b5:f5:ac:62:73:83:b1: e1:81:d2:b6:48:17:e0:46:b4:d0:cd:14:19:9e:fc:db:22:ae: a1:05:ad:af:3c:59:d6:96:c3:58:67:0a:3c:a7:6e:73:7b:cd: 42:31:bb:d4:26:54:45:2f:d0:9c:b0:fc:93:46:c3:d6:86:d9: 09:fa:10:22:50:ed:a6:22:d3:b4:ec:ea:a6:36:8e:1d:49:ab: 35:f3:b8:0b:40:ba:31:5e:73:e6:22:44:34:a1:bd:54:44:4d: 38:6b:b5:6c:9c:b8:5a:42:07:1d:f4:b8:55:83:83:a6:b7:5d: 77:e4:6d:ac:9a:a1:cd:b4:a1:70:de:23:11:50:ba:9f:89:e6: 76:cd:16:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvn7K1X7lPmiGTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTg5YWM1ZTgtY2NkNS00NzVhLTk0ZDMtMGNkMWM1YjIyMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqWzVJNB9oQ6FTS1QPlttHWWSIqK3otxmCCf 0FVL2tAWpxCqcRzU1a2yAIABngWmTLJ1r/MLnyiqPUAyGKFsVRERe52YRUhhyNZE T9zYXDgOPJPH8WiI9Dsp4DyfMv/0kFXx+bzhwTppt6O/bTOt26Z1rIaZBaHx3uCo QCylgMGS5r0BasgN/UcShUzTzYgweankahTmTvYT5b23XDgmlvV4ZG353gIsDo+x 4LoLaLyHjAagucaKQ4u5Eo8KfEbOHz5fdadHZ2W5MGnjrI08txHvoWz7TcLWVMUS 5JrJVhZ/FXVVevAo2BRNp3xm3/oU5Pi3j8bipd/rtlwLMT/EpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp7Xi9ObYWigfKC9fT1+YTEI5RtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNTA3ZGI0NTctZWQ5My0z OTViLWJmYWQtOGFhMGQxNzhkNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0WGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/Gl1HQwBfHBImnnR2pyBVcAAvuZyPkmxMudwjrgviyCUuRg1MBYM8t uTc4eAuJ6gcM1QHg4s3w5JtFbplksw2bW7SJJOJFFVglihlsCuZ3EQT29VuiSShO tvCRhlvTBwcgwiuBSbWyetQVgCtAjbAyoaccEJMltfWsYnODseGB0rZIF+BGtNDN FBme/NsirqEFra88WdaWw1hnCjynbnN7zUIxu9QmVEUv0Jyw/JNGw9aG2Qn6ECJQ 7aYi07Ts6qY2jh1JqzXzuAtAujFec+YiRDShvVRETThrtWycuFpCBx30uFWDg6a3 XXfkbayaoc20oXDeIxFQup+J5nbNFg4= -----END CERTIFICATE-----Generated at Fri Nov 7 02:32:52 2025 by rpki-client