$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa File: 5ed2d683-595f-35cf-b854-966c1865c235.roa (raw, json) Hash identifier: /bJ4auNorLq7Ho9SoLkEBpFQcLRqFg0RuqLFRSbwMbY= Subject key identifier: 7D:CE:C1:D5:23:10:B6:BC:74:F2:DB:91:78:86:11:56:AA:8C:A3:ED Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AFA7305ED4A5772E64F80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 174.138.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:fa:73:05:ed:4a:57:72:e6:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=d9298e41-de95-4d6b-867e-ae0b4e1200c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:0a:90:bb:90:0a:98:4d:b5:0c:c0:f5:68: 21:e3:9a:39:29:b9:a9:61:df:3d:60:ed:02:9d:3d: be:c3:69:76:b0:00:25:d2:55:0a:49:8f:33:d4:cb: 53:42:2c:1d:ca:1b:e8:97:1e:24:d9:80:c3:db:3f: e1:5a:0d:07:4b:a0:d6:f6:40:ce:44:df:b9:cc:d0: 58:9a:b1:67:8d:f4:70:6a:78:bb:d5:03:af:1f:63: d8:cc:8a:24:83:9e:50:54:0a:61:33:4d:50:34:b9: f7:95:8e:14:d9:b1:52:52:f4:4e:a3:e1:6c:b1:8d: 3e:2a:9e:e8:2c:cf:f1:25:af:34:b3:6c:42:cb:ba: c2:b2:df:65:f5:5d:87:46:e8:2e:99:2a:f9:4f:28: 75:02:f8:48:da:12:c3:b9:2a:04:ff:52:17:f0:25: 77:48:63:a6:e5:04:d6:49:15:b1:83:3f:8b:3b:f3: b9:aa:f0:db:b7:25:c4:d2:54:9d:b5:36:00:7b:72: f4:57:4a:46:57:5d:ee:d3:57:fc:f1:70:48:77:91: 60:ad:ab:50:11:05:1c:c9:bb:84:55:00:df:ea:f1: 61:17:e3:09:48:f5:86:c0:b8:34:7c:05:e3:df:07: 61:c0:75:4f:5b:e4:98:9c:c7:6b:4c:f2:3f:a2:af: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CE:C1:D5:23:10:B6:BC:74:F2:DB:91:78:86:11:56:AA:8C:A3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 174.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9d:ce:e6:5b:60:2a:7c:98:7b:24:e2:6b:a6:eb:af:5e:a2: 73:3e:42:59:9d:96:7d:3d:16:c2:2c:42:4a:6b:c3:22:b5:74: 5b:19:ed:f4:49:d4:aa:b6:91:91:ba:29:8d:4b:4a:89:75:04: 9a:73:9b:9d:59:46:f9:cd:1c:5c:ca:11:d1:90:80:be:ac:61: 9f:85:b0:e0:ac:6a:bc:97:3b:39:3e:2b:98:38:de:25:07:64: 01:63:5e:9b:24:94:92:9a:2b:af:a0:0d:81:b4:b8:a1:13:4b: d2:da:90:03:e1:a6:f0:25:89:20:9c:f9:6c:0e:8a:07:ae:ce: ff:e9:0d:5e:e1:cb:ce:af:6f:c4:a0:08:a8:e3:92:39:b8:22: d3:67:3f:16:39:c4:e1:ed:46:17:49:09:8d:1e:fd:32:00:16: 89:08:a6:8d:5f:29:e4:35:1d:a7:68:1f:8a:d1:d5:dd:fa:17: 2a:02:b3:dc:68:35:c5:da:d2:28:4b:d8:64:9d:a4:e7:9c:a7: c0:64:5a:2a:6f:6b:f4:76:fe:3a:ca:7b:dd:a4:f8:d3:bf:9c: 2b:58:52:da:e4:93:25:84:9a:2a:b2:23:d5:79:a3:f2:27:1c: 6d:b7:0f:c4:9a:a3:9e:51:5f:ea:ec:2d:66:d9:3e:ad:29:17: fd:27:02:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvpzBe1KV3LmT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDkyOThlNDEtZGU5NS00ZDZiLTg2N2UtYWUwYjRlMTIwMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwMKkLuQCphNtQzA9Wgh45o5KbmpYd89YO0C nT2+w2l2sAAl0lUKSY8z1MtTQiwdyhvolx4k2YDD2z/hWg0HS6DW9kDORN+5zNBY mrFnjfRwani71QOvH2PYzIokg55QVAphM01QNLn3lY4U2bFSUvROo+FssY0+Kp7o LM/xJa80s2xCy7rCst9l9V2HRugumSr5Tyh1AvhI2hLDuSoE/1IX8CV3SGOm5QTW SRWxgz+LO/O5qvDbtyXE0lSdtTYAe3L0V0pGV13u01f88XBId5FgratQEQUcybuE VQDf6vFhF+MJSPWGwLg0fAXj3wdhwHVPW+SYnMdrTPI/oq9p+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3OwdUjELa8dPLbkXiGEVaqjKPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWVkMmQ2ODMtNTk1Zi0z NWNmLWI4NTQtOTY2YzE4NjVjMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrooAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGdzuZbYCp8mHsk4mum669eonM+Qlmdln09FsIsQkprwyK1dFsZ7fRJ 1Kq2kZG6KY1LSol1BJpzm51ZRvnNHFzKEdGQgL6sYZ+FsOCsaryXOzk+K5g43iUH ZAFjXpsklJKaK6+gDYG0uKETS9LakAPhpvAliSCc+WwOigeuzv/pDV7hy86vb8Sg CKjjkjm4ItNnPxY5xOHtRhdJCY0e/TIAFokIpo1fKeQ1HadoH4rR1d36FyoCs9xo NcXa0ihL2GSdpOecp8BkWipva/R2/jrKe92k+NO/nCtYUtrkkyWEmiqyI9V5o/In HG23D8Sao55RX+rsLWbZPq0pF/0nAlE= -----END CERTIFICATE-----Generated at Fri Nov 7 02:32:52 2025 by rpki-client