$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dc0436c7-83ef-331c-a257-e37b035fa9be.roa File: dc0436c7-83ef-331c-a257-e37b035fa9be.roa (raw, json) Hash identifier: AbdVCs74Al28aa6YGFcI85AbiMIdBLkLISgup2t5D7g= Subject key identifier: DC:25:13:EF:8A:F7:7D:5D:9B:F3:A8:AD:4F:52:FB:9E:CE:40:C2:15 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AF2C9A7D4F1262D2848E0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dc0436c7-83ef-331c-a257-e37b035fa9be.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 67.207.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f2:c9:a7:d4:f1:26:2d:28:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=cc5fe0b5-8d17-4106-bc87-8555c3e30785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:38:71:e9:db:1e:d6:96:86:0c:c6:25:12: 02:c2:ff:15:2f:b9:fd:d0:6e:bb:c4:66:1e:1d:a7: f5:0c:0e:34:4b:89:c4:5f:a5:00:94:38:9d:57:67: 0e:13:d7:21:79:e5:6b:6d:03:36:6e:b4:b1:9e:c7: 13:ff:1f:d8:f1:0e:39:30:a2:05:20:af:82:ad:71: 0d:25:d3:a6:95:d2:a5:45:3c:04:3b:27:1b:dd:c5: 45:5d:6d:9d:cb:37:30:d0:12:c3:0f:62:af:11:22: 99:0b:19:b2:a5:b0:f3:39:82:6c:78:2b:67:20:17: 48:61:1c:54:e1:06:e8:9a:9d:46:4d:43:19:c9:9d: c2:ef:f3:b1:de:33:3b:99:b5:70:68:e6:64:72:ed: ac:ce:33:14:14:f3:c7:72:f5:48:e8:9c:62:4d:57: fa:31:db:8b:ca:5f:ca:3b:87:08:7d:f5:c5:89:19: 0f:44:e8:1f:21:e3:fd:7f:b3:71:3f:42:2c:93:79: 5f:d6:ec:1d:83:63:43:e7:7f:53:bd:b3:f8:ba:84: c0:0b:f3:56:24:c9:be:9e:c3:63:d3:82:f7:b7:82: 58:0b:68:b0:04:e0:ee:9d:01:a8:62:6e:2f:06:14: 0c:45:aa:2e:eb:5f:ff:b1:13:50:b7:4a:2a:d3:e6: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:13:EF:8A:F7:7D:5D:9B:F3:A8:AD:4F:52:FB:9E:CE:40:C2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dc0436c7-83ef-331c-a257-e37b035fa9be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 67.207.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:28:91:91:2b:ed:9d:99:d0:55:74:9a:94:5b:24:61:d6:a2: 27:17:29:f4:93:03:d9:b6:47:ad:7c:e7:11:34:a0:02:1b:fe: 80:3c:00:8f:6d:57:18:11:e8:fa:8a:9f:6d:44:7c:ee:b8:a6: 77:04:e3:6e:bd:7f:c7:24:4e:89:ec:0d:0a:f7:5b:82:87:57: bc:cf:6e:da:ca:75:29:ae:1c:76:fa:35:9f:f8:24:9e:5a:23: 88:f4:8b:77:92:11:67:51:17:00:00:07:4d:ce:66:87:34:b5: 70:4d:52:4c:67:20:67:f0:09:5f:c8:25:2a:39:6f:d9:ae:03: 4c:70:cc:c4:f6:b7:5a:8f:a8:44:27:4a:71:83:36:45:16:24: b7:bc:c5:be:c4:e6:db:0b:1d:d9:58:0f:52:29:45:a0:f5:18: 69:c3:05:00:fd:81:ae:d0:6e:37:3a:55:2d:ca:80:ae:ca:cd: ac:2b:86:58:93:ba:fd:1c:77:78:72:a1:17:4d:80:a7:0c:09: 8a:00:96:ad:b7:9e:8d:95:90:dd:69:67:31:9d:1e:32:78:4f: a9:24:89:3b:e7:50:e4:94:e4:ed:49:d0:04:4f:3f:f4:d6:57: c8:e4:4b:b2:4a:aa:07:1b:91:1a:2c:58:40:47:05:3b:fb:d8: b7:13:4e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvLJp9TxJi0oSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2M1ZmUwYjUtOGQxNy00MTA2LWJjODctODU1NWMzZTMwNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Y4cenbHtaWhgzGJRICwv8VL7n90G67xGYe Haf1DA40S4nEX6UAlDidV2cOE9cheeVrbQM2brSxnscT/x/Y8Q45MKIFIK+CrXEN JdOmldKlRTwEOycb3cVFXW2dyzcw0BLDD2KvESKZCxmypbDzOYJseCtnIBdIYRxU 4Qbomp1GTUMZyZ3C7/Ox3jM7mbVwaOZkcu2szjMUFPPHcvVI6JxiTVf6MduLyl/K O4cIffXFiRkPROgfIeP9f7NxP0Isk3lf1uwdg2ND539TvbP4uoTAC/NWJMm+nsNj 04L3t4JYC2iwBODunQGoYm4vBhQMRaou61//sRNQt0oq0+YK9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwlE++K931dm/OorU9S+57OQMIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZGMwNDM2YzctODNlZi0z MzFjLWEyNTctZTM3YjAzNWZhOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ89AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMokZEr7Z2Z0FV0mpRbJGHWoicXKfSTA9m2R6185xE0oAIb/oA8AI9t VxgR6PqKn21EfO64pncE4269f8ckTonsDQr3W4KHV7zPbtrKdSmuHHb6NZ/4JJ5a I4j0i3eSEWdRFwAAB03OZoc0tXBNUkxnIGfwCV/IJSo5b9muA0xwzMT2t1qPqEQn SnGDNkUWJLe8xb7E5tsLHdlYD1IpRaD1GGnDBQD9ga7Qbjc6VS3KgK7KzawrhliT uv0cd3hyoRdNgKcMCYoAlq23no2VkN1pZzGdHjJ4T6kkiTvnUOSU5O1J0ARPP/TW V8jkS7JKqgcbkRosWEBHBTv72LcTTsA= -----END CERTIFICATE-----Generated at Fri Nov 7 02:29:12 2025 by rpki-client