$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5c5f93d9-d6db-3c93-8dc7-b097ec7cd362.roa File: 5c5f93d9-d6db-3c93-8dc7-b097ec7cd362.roa (raw, json) Hash identifier: lhlMc9lFlJywUC+lwmOWwJueg7jgfKbQNe9g7b0Thfg= Subject key identifier: 9D:2D:83:3E:2E:D1:BF:48:06:6A:81:DD:AF:EB:86:D7:26:8C:61:6B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AFB0C6C86E875A8F1F780 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5c5f93d9-d6db-3c93-8dc7-b097ec7cd362.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 143.110.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:fb:0c:6c:86:e8:75:a8:f1:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=d32199ff-51b9-4365-9afe-b5a801763002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:fc:b8:7e:ee:3f:ee:6f:d2:fb:ed:79:c5: dc:c0:5f:e5:6f:e6:9d:03:77:c3:f2:b4:61:d9:3d: fe:23:8e:6f:c9:ee:a4:e3:4c:6a:3c:3e:cd:70:73: 80:fb:c8:34:53:ca:bd:02:ce:5f:8f:b6:25:77:cf: 14:e1:a4:17:51:cf:b5:a7:07:ba:84:51:72:55:12: b4:9e:98:76:46:f5:aa:8c:33:00:9f:fd:df:46:74: 3d:41:d3:1d:eb:08:49:5a:57:29:17:f4:38:75:a0: 7e:13:05:97:34:01:8d:12:8a:bd:ee:5a:b2:11:79: e3:5d:71:1b:36:b7:23:46:ca:a6:8d:37:e4:f3:6b: 2e:ba:17:24:e3:cf:26:45:90:f3:96:bd:e3:5a:ad: f6:7c:01:a4:7d:c9:4d:f3:3a:a5:f4:ac:10:a2:6f: b2:d7:e2:35:8d:93:e1:e4:12:9b:e5:03:83:9e:00: 1d:b8:3b:fa:c2:7a:fc:c7:c1:8e:6a:fd:5c:ee:e2: 57:5e:c4:be:a6:7e:4a:77:51:bf:ee:96:42:c8:79: 97:ce:6d:af:b1:34:4e:9e:11:c5:95:99:90:4d:e1: 22:c9:2e:21:ef:d7:24:53:66:be:7d:8e:0f:7e:ef: 8f:fb:0d:78:0b:1c:98:9b:48:12:77:f0:d6:ae:0b: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2D:83:3E:2E:D1:BF:48:06:6A:81:DD:AF:EB:86:D7:26:8C:61:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5c5f93d9-d6db-3c93-8dc7-b097ec7cd362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 143.110.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f4:06:78:60:a2:50:76:9c:f3:c3:4e:5f:81:6b:2c:85:7e: 41:bd:ed:94:7f:49:1a:bd:e9:a8:b7:6c:02:58:ce:20:dd:b6: 10:da:53:13:74:81:fc:1b:8c:bf:2c:4b:cd:51:17:a9:ca:e5: 57:11:60:db:b4:a0:09:9e:a6:34:d5:32:65:9a:e5:6b:8d:f0: 1d:c9:4e:7c:31:26:e7:d2:e3:61:59:8e:d2:03:53:ce:a0:27: ee:1d:98:df:e9:2e:24:11:91:fb:13:cd:3a:97:81:3c:b7:fa: cb:5f:b4:e0:ad:9f:d3:75:cd:3f:c6:f8:b0:a0:f5:7e:15:1a: 8e:b9:2b:53:00:f0:fe:57:4d:36:2b:84:6f:88:8b:a8:59:c9: 3c:6b:29:fa:f5:86:d7:e6:34:4e:34:22:63:98:ec:19:bd:23: 01:75:29:04:87:c4:86:2a:95:c0:07:3f:34:e3:58:d2:b0:8f: b7:26:09:3b:1f:ec:ef:21:92:cf:8d:9b:89:65:ed:c7:78:79: 89:62:77:0f:f1:d0:1b:3f:46:85:9b:25:b7:e3:89:e5:26:7b: ad:28:94:4c:12:ac:a1:56:23:d0:64:cb:26:08:67:2c:aa:d4: 3a:2f:54:8e:74:5b:27:35:27:0f:3c:9b:89:19:b6:04:e2:fb: f7:13:9e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvsMbIbodajx94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDMyMTk5ZmYtNTFiOS00MzY1LTlhZmUtYjVhODAxNzYzMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDv8uH7uP+5v0vvtecXcwF/lb+adA3fD8rRh 2T3+I45vye6k40xqPD7NcHOA+8g0U8q9As5fj7Yld88U4aQXUc+1pwe6hFFyVRK0 nph2RvWqjDMAn/3fRnQ9QdMd6whJWlcpF/Q4daB+EwWXNAGNEoq97lqyEXnjXXEb NrcjRsqmjTfk82suuhck488mRZDzlr3jWq32fAGkfclN8zql9KwQom+y1+I1jZPh 5BKb5QODngAduDv6wnr8x8GOav1c7uJXXsS+pn5Kd1G/7pZCyHmXzm2vsTROnhHF lZmQTeEiyS4h79ckU2a+fY4Pfu+P+w14CxyYm0gSd/DWrgufTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0tgz4u0b9IBmqB3a/rhtcmjGFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWM1ZjkzZDktZDZkYi0z YzkzLThkYzctYjA5N2VjN2NkMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHj26AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH0BnhgolB2nPPDTl+BayyFfkG97ZR/SRq96ai3bAJYziDdthDaUxN0 gfwbjL8sS81RF6nK5VcRYNu0oAmepjTVMmWa5WuN8B3JTnwxJufS42FZjtIDU86g J+4dmN/pLiQRkfsTzTqXgTy3+stftOCtn9N1zT/G+LCg9X4VGo65K1MA8P5XTTYr hG+Ii6hZyTxrKfr1htfmNE40ImOY7Bm9IwF1KQSHxIYqlcAHPzTjWNKwj7cmCTsf 7O8hks+Nm4ll7cd4eYlidw/x0Bs/RoWbJbfjieUme60olEwSrKFWI9BkyyYIZyyq 1DovVI50Wyc1Jw88m4kZtgTi+/cTno0= -----END CERTIFICATE-----Generated at Fri Nov 7 02:27:12 2025 by rpki-client