$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa File: 7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa (raw, json) Hash identifier: YiGN7fq3L70cVPINPQs30pT0f7SRc0wz4+Bu0v8XIyY= Subject key identifier: BE:D1:6B:2C:13:BE:5F:C1:CA:5C:55:EC:4E:47:0B:FD:67:F1:D2:7B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BABFD0276A4A80D93886AF740 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 14061 IP address blocks: 152.42.128.0/17 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:02:76:a4:a8:0d:93:88:6a:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3c100ca7-9432-4718-9e47-ead66fa345fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:c1:0f:8d:58:8a:67:20:06:ce:13:d9:82: a3:9d:87:40:2c:e5:30:1a:be:cf:d8:6e:07:3b:6b: b6:fa:f5:d2:7e:94:6a:b9:f7:eb:2a:17:52:14:b1: 6a:bd:9c:21:71:3b:d6:22:6b:99:14:2b:c0:29:f9: cb:fb:de:58:8b:6a:50:21:3d:66:b6:2e:83:cb:a4: f6:28:ae:f2:53:34:1a:16:e7:e8:fc:9a:e0:a0:de: c6:76:b5:fe:56:0b:55:91:40:61:14:e2:70:d6:c7: da:d7:0e:d2:a4:b1:97:c8:a6:24:eb:09:49:06:4a: a8:a8:cd:a8:c7:87:97:63:d4:7f:96:8c:c5:e4:f2: 1b:76:a1:7a:20:e1:19:63:b4:86:55:21:d4:44:a4: 92:9f:6e:dc:70:76:a0:8a:aa:0b:f9:ab:3d:ef:ea: b6:04:05:da:f7:04:23:77:00:7f:3a:ae:ca:ca:55: f6:66:52:7f:c1:90:a0:7a:c5:6d:67:f5:6e:0f:12: 6e:1e:83:70:a7:b2:2d:60:57:74:a3:fa:e0:df:72: 5a:94:f8:b2:ed:71:af:58:82:28:a7:d3:a4:ea:e3: e7:bf:91:1c:30:88:66:f8:fa:59:52:3d:ff:57:c5: f2:23:07:b2:0c:2f:9d:7e:15:21:35:76:b8:4f:5d: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D1:6B:2C:13:BE:5F:C1:CA:5C:55:EC:4E:47:0B:FD:67:F1:D2:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 152.42.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a8:92:f9:2a:ac:48:22:18:ec:67:fd:c1:96:06:8f:39:d1: 7f:9b:aa:b6:fd:30:0b:38:ea:f8:e6:77:c7:57:19:f9:09:bc: 27:84:a0:f1:4e:d3:16:37:fe:0a:f9:99:87:5e:ea:fc:61:ed: 42:6a:3b:5c:d6:20:8d:a3:67:1a:a1:5f:51:b2:fe:a9:32:ad: 65:af:47:e0:bd:df:41:c3:b0:71:dd:d1:13:d2:fd:07:1c:87: af:ff:2e:18:b4:44:0e:80:ba:1d:93:6d:57:98:13:8b:72:46: b8:a8:13:21:53:39:9b:84:88:3e:7e:e1:af:cf:14:a7:6c:6a: 65:5e:a5:aa:f0:21:47:ec:57:42:51:9d:32:3d:bb:21:ac:55: 1f:2d:cc:f5:b2:a4:6f:58:ca:1a:cb:41:ba:d6:e9:fb:34:a1: c6:7a:37:7c:79:fd:72:b2:0d:60:81:97:f9:dc:12:b9:6a:ca: 26:e4:67:ea:e0:14:cf:e5:02:19:d4:e9:5f:30:9a:e2:2a:ae: f3:c5:77:a2:1b:1f:2e:3c:aa:4a:09:21:38:41:62:ea:e8:9b: 56:0d:75:d2:5b:cd:7d:c6:23:2c:31:a6:9e:5c:2c:ef:64:fc: 55:5d:88:1a:e7:73:5f:b0:ec:12:0b:90:00:aa:6c:5e:c3:07: 91:13:cc:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QJ2pKgNk4hq90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2MxMDBjYTctOTQzMi00NzE4LTllNDctZWFkNjZmYTM0NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0rBD41YimcgBs4T2YKjnYdALOUwGr7P2G4H O2u2+vXSfpRquffrKhdSFLFqvZwhcTvWImuZFCvAKfnL+95Yi2pQIT1mti6Dy6T2 KK7yUzQaFufo/JrgoN7GdrX+VgtVkUBhFOJw1sfa1w7SpLGXyKYk6wlJBkqoqM2o x4eXY9R/lozF5PIbdqF6IOEZY7SGVSHURKSSn27ccHagiqoL+as97+q2BAXa9wQj dwB/Oq7KylX2ZlJ/wZCgesVtZ/VuDxJuHoNwp7ItYFd0o/rg33JalPiy7XGvWIIo p9Ok6uPnv5EcMIhm+PpZUj3/V8XyIweyDC+dfhUhNXa4T10wdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7RaywTvl/BylxV7E5HC/1n8dJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvN2Q2ZTVlZjItZTRjZS0z YzliLTlkYmQtZmQ5NDE4ZTM4NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeokvkqrEgiGOxn/cGWBo850X+bqrb9MAs46vjmd8dXGfkJvCeEoPFO 0xY3/gr5mYde6vxh7UJqO1zWII2jZxqhX1Gy/qkyrWWvR+C930HDsHHd0RPS/Qcc h6//Lhi0RA6Auh2TbVeYE4tyRrioEyFTOZuEiD5+4a/PFKdsamVeparwIUfsV0JR nTI9uyGsVR8tzPWypG9YyhrLQbrW6fs0ocZ6N3x5/XKyDWCBl/ncErlqyibkZ+rg FM/lAhnU6V8wmuIqrvPFd6IbHy48qkoJIThBYurom1YNddJbzX3GIywxpp5cLO9k /FVdiBrnc1+w7BILkACqbF7DB5ETzHs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:54 2025 by rpki-client