$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa File: 25576007-f9bd-3d6e-a7e0-7366659c5843.roa (raw, json) Hash identifier: 4To2lIeTZAXTsxjC8sEOssCcWOPW1MwbpZ8VdFMom+8= Subject key identifier: 17:5A:87:33:42:8B:8A:A0:98:D7:61:26:AF:DA:E5:9D:C7:15:35:81 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BBB759CE995E0BBA98DEB4100 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 14061 IP address blocks: 129.212.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9c:e9:95:e0:bb:a9:8d:eb:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=32941748-ccf3-4732-b885-ae65f031ed89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:b0:41:a9:19:69:10:e3:34:82:bb:d9:c3: 2a:e6:1e:90:7b:0c:26:34:5e:df:bb:a0:ca:11:69: 64:37:b3:11:61:12:ab:cd:4c:e7:2e:d0:fc:ef:83: b4:6d:40:6b:92:42:eb:7b:71:42:96:d8:48:1b:c4: 68:59:98:84:fa:b0:e0:59:66:1b:78:c1:67:b1:43: 17:fc:08:2e:eb:a3:4f:7d:45:14:ce:57:c1:92:16: 73:c7:52:89:ed:77:37:1b:b2:4f:25:bb:d4:92:71: d7:3f:03:52:4e:27:b9:54:fb:b3:8a:99:96:13:35: 27:84:5d:d3:cb:30:1b:8a:03:53:02:e4:de:3e:c6: ab:56:7c:15:e2:d8:a9:b2:70:02:7b:0d:5d:af:fb: ed:9c:65:70:8b:6b:0a:50:3c:a7:1d:8f:b7:98:87: 6b:d0:f8:0d:21:54:dc:f0:9e:08:d3:f2:ee:d8:51: c7:42:00:5e:4b:a8:e4:88:0c:83:a3:14:a2:fe:69: 7a:0f:48:57:39:9b:01:a0:5d:0d:ff:a9:f2:9c:15: 1a:b7:5c:ac:7a:8a:e1:00:93:06:b1:e6:36:79:0f: 16:5a:90:0e:8f:71:09:75:d0:30:35:36:4e:66:2d: 32:54:b6:5d:3b:36:59:d8:6a:06:de:eb:42:4b:f7: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:87:33:42:8B:8A:A0:98:D7:61:26:AF:DA:E5:9D:C7:15:35:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 129.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d8:f4:e0:0d:1e:be:e3:fc:bf:7c:ba:63:13:1c:47:ea:88: a5:c0:af:68:ac:6e:99:28:37:58:ea:e2:43:2a:2d:7c:a7:8a: 2c:b4:17:c8:98:47:f7:66:b7:8e:90:24:a9:24:21:d7:99:52: ec:64:ee:7e:d6:dc:98:59:ff:66:eb:1c:ff:93:9a:ca:3a:2d: d6:ae:a3:b8:55:4d:2f:8f:0c:b4:07:e4:ab:88:11:0b:7b:86: 04:6c:1c:32:3c:86:92:6c:9e:9b:e7:fe:1b:ed:ba:7b:8b:23: 8b:4a:c6:79:3b:72:ca:39:86:7a:11:11:b1:e3:fd:61:77:d2: 82:80:e4:49:8c:aa:d0:1a:6b:28:1c:44:24:23:94:ca:0f:ac: f9:c8:1f:8f:1f:75:93:f8:22:5c:e0:00:1e:be:b5:1c:e4:8d: 59:68:e0:5d:eb:38:69:1d:fe:43:8b:67:1d:38:97:e9:47:a7: 8a:91:0d:33:db:14:e8:e8:84:3e:07:5a:76:05:bb:de:56:ec: b9:c8:3a:8d:ed:06:27:f3:60:10:0e:d2:1f:af:b5:58:05:64: 90:a2:e1:b7:41:38:73:da:33:9b:db:d7:36:7e:bd:97:24:6a: 77:93:1e:9d:6a:de:ba:59:1f:a5:61:20:a9:7f:e7:7c:c6:57: e6:81:fd:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZzpleC7qY3rQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MzI5NDE3NDgtY2NmMy00NzMyLWI4ODUtYWU2NWYwMzFlZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqKwQakZaRDjNIK72cMq5h6QewwmNF7fu6DK EWlkN7MRYRKrzUznLtD874O0bUBrkkLre3FClthIG8RoWZiE+rDgWWYbeMFnsUMX /Agu66NPfUUUzlfBkhZzx1KJ7Xc3G7JPJbvUknHXPwNSTie5VPuzipmWEzUnhF3T yzAbigNTAuTePsarVnwV4tipsnACew1dr/vtnGVwi2sKUDynHY+3mIdr0PgNIVTc 8J4I0/Lu2FHHQgBeS6jkiAyDoxSi/ml6D0hXOZsBoF0N/6nynBUat1yseorhAJMG seY2eQ8WWpAOj3EJddAwNTZOZi0yVLZdOzZZ2GoG3utCS/d+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdahzNCi4qgmNdhJq/a5Z3HFTWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjU1NzYwMDctZjliZC0z ZDZlLWE3ZTAtNzM2NjY1OWM1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgdSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Y9OANHr7j/L98umMTHEfqiKXAr2isbpkoN1jq4kMqLXyniiy0F8iY R/dmt46QJKkkIdeZUuxk7n7W3JhZ/2brHP+Tmso6Ldauo7hVTS+PDLQH5KuIEQt7 hgRsHDI8hpJsnpvn/hvtunuLI4tKxnk7cso5hnoREbHj/WF30oKA5EmMqtAaaygc RCQjlMoPrPnIH48fdZP4IlzgAB6+tRzkjVlo4F3rOGkd/kOLZx04l+lHp4qRDTPb FOjohD4HWnYFu95W7LnIOo3tBifzYBAO0h+vtVgFZJCi4bdBOHPaM5vb1zZ+vZck aneTHp1q3rpZH6VhIKl/53zGV+aB/TA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:44:03 2025 by rpki-client