$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa File: 1fcf229c-b078-3003-9e60-edcf78e752b2.roa (raw, json) Hash identifier: 1W4GXrO3EG3ftTMU7lzKotS/im93G+PS9fX4jRJDq04= Subject key identifier: A4:49:B6:4A:B2:BC:79:0C:B3:AA:C9:6C:C7:D8:D8:F2:5D:06:99:A6 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BABFCFEE39861AAEC909E8C80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 14061 IP address blocks: 64.226.64.0/18 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fe:e3:98:61:aa:ec:90:9e:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=4f1f2aae-a207-4cda-b843-a3ae7cdb78a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:3d:31:af:39:b2:17:86:c3:f3:27:09:d9: d1:d8:8e:b7:0e:06:8d:62:35:0c:a4:f4:25:c8:b9: 01:bb:41:cf:a6:de:8a:6b:01:8a:7e:3f:a1:b8:06: 36:e9:65:5d:ef:ca:7d:44:1e:5d:92:6d:ca:12:8f: 14:1f:0d:0f:bc:0c:94:97:ce:23:a5:86:ca:c5:7d: 72:f1:14:5b:7b:00:c0:3e:38:50:c0:a4:14:c8:7b: 7b:ff:03:d5:75:b5:18:d5:42:7f:f1:04:31:53:01: 5e:0d:31:5e:f5:c3:6c:9d:c6:d2:c1:26:b7:2e:f1: 3c:cf:0f:38:c7:f8:9a:c0:50:9c:c7:ad:33:53:d1: 71:7f:7b:9f:55:2b:7e:f6:a0:d6:c6:65:86:32:86: c9:00:1a:4d:bd:06:e0:aa:db:35:f0:f0:34:9d:e6: 5d:62:f5:b0:dd:88:80:99:0f:43:87:c6:99:28:44: bb:ba:e9:18:32:fc:26:c8:40:4e:e3:92:34:f6:8d: e5:dd:d6:c6:97:15:12:7e:2f:b7:1c:d8:9b:f2:0f: 74:2f:13:59:f7:84:db:a7:26:d6:72:09:9f:9d:c9: dd:da:ff:37:16:5d:03:31:59:11:fe:36:15:4b:0e: 7a:01:a1:e8:f0:f8:d6:d2:d2:d0:46:80:bd:16:d0: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:49:B6:4A:B2:BC:79:0C:B3:AA:C9:6C:C7:D8:D8:F2:5D:06:99:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1fcf229c-b078-3003-9e60-edcf78e752b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 64.226.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5a:16:b9:37:b6:01:be:4e:d4:16:79:e7:06:5a:ff:7c:94: 21:2d:40:5c:84:ba:0c:6d:52:1d:fd:b9:79:e2:98:76:8a:ab: 36:4c:35:09:f1:5c:d3:9f:ef:2b:f5:1c:44:b9:39:f9:ed:af: a1:55:d2:2f:7a:28:1b:74:28:bf:06:b5:c1:40:d9:44:b2:a2: 29:bd:41:35:c8:54:1c:d3:e4:b4:44:22:6b:45:19:25:90:e3: 50:45:97:c6:4b:72:6c:7f:b1:a9:f1:a0:bb:0a:09:d4:da:8b: 00:05:35:36:d8:45:3b:4e:8f:1d:89:d6:ec:73:d4:83:e5:e0: 65:b6:66:6f:78:92:81:34:2b:e7:2c:14:c8:19:d1:93:8e:05: cb:f3:13:88:27:d1:e5:f5:8a:f8:da:6f:44:8d:4d:50:ba:45: d2:fd:8f:41:79:75:e8:a8:d7:28:9f:06:b4:57:c4:bf:b3:19: c9:fb:90:17:47:b3:92:f0:88:12:5e:3f:ff:06:09:74:20:6b: 57:64:de:6c:bd:16:3d:c9:85:eb:7e:8f:fb:7d:9f:b1:2e:19: 91:5d:41:73:5c:f2:86:bc:78:17:33:b0:6a:fa:46:74:a8:dd: e2:f0:82:2f:cb:e6:25:bd:2a:48:0b:d5:9e:95:fe:fc:c0:aa: 80:db:45:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/P7jmGGq7JCejIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NGYxZjJhYWUtYTIwNy00Y2RhLWI4NDMtYTNhZTdjZGI3OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty49Ma85sheGw/MnCdnR2I63DgaNYjUMpPQl yLkBu0HPpt6KawGKfj+huAY26WVd78p9RB5dkm3KEo8UHw0PvAyUl84jpYbKxX1y 8RRbewDAPjhQwKQUyHt7/wPVdbUY1UJ/8QQxUwFeDTFe9cNsncbSwSa3LvE8zw84 x/iawFCcx60zU9Fxf3ufVSt+9qDWxmWGMobJABpNvQbgqts18PA0neZdYvWw3YiA mQ9Dh8aZKES7uukYMvwmyEBO45I09o3l3dbGlxUSfi+3HNib8g90LxNZ94TbpybW cgmfncnd2v83Fl0DMVkR/jYVSw56AaHo8PjW0tLQRoC9FtD6hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRJtkqyvHkMs6rJbMfY2PJdBpmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMWZjZjIyOWMtYjA3OC0z MDAzLTllNjAtZWRjZjc4ZTc1MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQOJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFaFrk3tgG+TtQWeecGWv98lCEtQFyEugxtUh39uXnimHaKqzZMNQnx XNOf7yv1HES5Ofntr6FV0i96KBt0KL8GtcFA2USyoim9QTXIVBzT5LREImtFGSWQ 41BFl8ZLcmx/sanxoLsKCdTaiwAFNTbYRTtOjx2J1uxz1IPl4GW2Zm94koE0K+cs FMgZ0ZOOBcvzE4gn0eX1ivjab0SNTVC6RdL9j0F5deio1yifBrRXxL+zGcn7kBdH s5LwiBJeP/8GCXQga1dk3my9Fj3Jhet+j/t9n7EuGZFdQXNc8oa8eBczsGr6RnSo 3eLwgi/L5iW9KkgL1Z6V/vzAqoDbRaU= -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:02 2025 by rpki-client