$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8c2f41a0-a9c7-3621-b542-cea63e997cd2.roa File: 8c2f41a0-a9c7-3621-b542-cea63e997cd2.roa (raw, json) Hash identifier: ozZMqxfi10xuN9i6ToySMHOP1EIsTCr/II/IGcBTCI4= Subject key identifier: B6:0C:33:BD:88:E0:17:0D:C9:66:E9:92:F8:89:3B:3A:87:29:5C:EE Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AF440D0529CF8AF066080 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8c2f41a0-a9c7-3621-b542-cea63e997cd2.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 134.122.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f4:40:d0:52:9c:f8:af:06:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=a82564c2-25ce-4ae4-ae5e-68aecb6058be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:6e:b2:01:80:72:86:9a:15:0c:e8:eb:08: 02:77:49:ce:90:5d:45:09:de:e0:43:8a:af:da:4d: 97:be:7f:1b:f4:f3:43:b3:1f:c1:94:e2:55:6d:aa: 34:19:b0:93:2e:bb:2c:0e:b7:28:f1:49:aa:a1:09: e0:d9:b4:03:26:8a:66:63:d8:56:4f:b0:ba:1f:30: 6a:56:f0:2d:74:bd:6b:d6:0d:b9:62:db:f0:46:bc: 46:8d:44:58:7e:62:5f:d9:44:6a:0e:28:95:46:6e: 0d:da:53:d0:a6:2d:67:ba:56:89:16:19:8c:29:1b: e1:ac:5d:ee:44:2c:af:7b:5a:81:6f:d4:02:9f:b7: 75:cf:dc:41:4b:21:92:bb:55:64:f5:dd:01:30:c2: 63:26:b5:e2:89:bb:f8:7f:9a:78:6b:30:91:53:9f: 3b:e5:b9:1f:39:4d:84:08:92:a5:02:52:86:84:b9: da:a7:bf:29:7c:1c:e1:45:a5:dc:2d:a1:4e:e5:45: 9c:23:e5:de:f5:bd:4f:dd:ba:88:db:aa:8f:f7:6e: b9:73:59:b6:f0:23:b2:fd:85:50:8f:e7:43:15:85: 66:1e:32:82:1e:4e:cc:d8:82:29:c7:02:07:61:9a: 43:c8:3c:03:64:92:3c:77:1c:cd:68:f5:e5:3f:00: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:33:BD:88:E0:17:0D:C9:66:E9:92:F8:89:3B:3A:87:29:5C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8c2f41a0-a9c7-3621-b542-cea63e997cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.122.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2d:4f:0f:23:7f:d4:d5:75:29:be:f4:7e:a5:e4:aa:22:b9: 1d:2e:c7:95:ad:9a:71:15:40:be:1f:ef:32:b8:74:d8:41:0f: 97:61:f7:e6:31:c6:6c:0b:29:24:73:32:6e:9d:76:20:34:3c: 10:ff:d7:d5:24:27:49:17:a4:7e:8e:67:d2:dc:48:39:14:76: 36:83:7b:2e:5e:a1:ec:bd:08:b8:2a:82:4d:5d:0b:de:7e:40: d6:dd:80:78:0e:64:e1:a1:c9:11:e7:d3:6b:cb:f7:b0:c8:9b: 18:62:1d:dd:10:8c:4a:fb:27:ff:ff:a0:4b:64:cf:fc:96:83: fc:28:d4:26:df:18:7a:86:b8:ac:98:4c:88:b1:d8:f3:d9:f6: 9f:33:21:4d:07:e6:df:f5:c4:a0:89:8a:cf:f2:c8:ac:12:94: 8b:36:d0:1c:05:91:8b:86:cc:d4:32:21:22:b7:0c:4b:ea:0c: ab:d0:e0:62:80:fb:e0:eb:f5:e4:f2:23:74:c5:61:cf:ea:97: af:a3:f6:4b:7a:82:83:48:7c:d3:c9:7d:e2:e9:ff:8c:61:e1: ea:e5:76:79:67:66:9d:65:d9:2b:b2:89:19:69:fe:5a:d6:25: ba:77:03:c6:15:a6:78:4a:1e:04:54:e6:60:5c:70:89:00:d1: e9:3c:f6:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvRA0FKc+K8GYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTgyNTY0YzItMjVjZS00YWU0LWFlNWUtNjhhZWNiNjA1OGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosZusgGAcoaaFQzo6wgCd0nOkF1FCd7gQ4qv 2k2Xvn8b9PNDsx/BlOJVbao0GbCTLrssDrco8UmqoQng2bQDJopmY9hWT7C6HzBq VvAtdL1r1g25YtvwRrxGjURYfmJf2URqDiiVRm4N2lPQpi1nulaJFhmMKRvhrF3u RCyve1qBb9QCn7d1z9xBSyGSu1Vk9d0BMMJjJrXiibv4f5p4azCRU5875bkfOU2E CJKlAlKGhLnap78pfBzhRaXcLaFO5UWcI+Xe9b1P3bqI26qP9265c1m28COy/YVQ j+dDFYVmHjKCHk7M2IIpxwIHYZpDyDwDZJI8dxzNaPXlPwDAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYMM72I4BcNyWbpkviJOzqHKVzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvOGMyZjQxYTAtYTljNy0z NjIxLWI1NDItY2VhNjNlOTk3Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhnoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgtTw8jf9TVdSm+9H6l5KoiuR0ux5WtmnEVQL4f7zK4dNhBD5dh9+Yx xmwLKSRzMm6ddiA0PBD/19UkJ0kXpH6OZ9LcSDkUdjaDey5eoey9CLgqgk1dC95+ QNbdgHgOZOGhyRHn02vL97DImxhiHd0QjEr7J///oEtkz/yWg/wo1CbfGHqGuKyY TIix2PPZ9p8zIU0H5t/1xKCJis/yyKwSlIs20BwFkYuGzNQyISK3DEvqDKvQ4GKA ++Dr9eTyI3TFYc/ql6+j9kt6goNIfNPJfeLp/4xh4erldnlnZp1l2SuyiRlp/lrW Jbp3A8YVpnhKHgRU5mBccIkA0ek89ls= -----END CERTIFICATE-----Generated at Fri Nov 7 02:30:27 2025 by rpki-client