$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/956f46e2-13be-3cfc-8bce-c710f570c0ed.roa File: 956f46e2-13be-3cfc-8bce-c710f570c0ed.roa (raw, json) Hash identifier: HJbpE9beTdcLv5FrKtmuikkNTNYOaHtWDat8E7PL6s0= Subject key identifier: 9C:17:DE:2E:4E:A9:1A:B3:3B:4A:B5:2D:F9:5F:73:D7:35:D8:52:8B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BAD628B3F3BDBF86448C1F938 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/956f46e2-13be-3cfc-8bce-c710f570c0ed.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 137.184.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8b:3f:3b:db:f8:64:48:c1:f9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=4b79e2fc-bf99-4027-b962-11a7fd29c00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:72:de:16:82:9e:ce:03:38:41:b7:71:93: 12:a5:91:19:f9:3a:e4:d7:06:c6:47:c1:c6:93:53: db:11:50:8a:ce:5b:03:a6:6b:41:f7:e0:ad:23:45: ee:4c:33:f8:e7:9a:32:3e:2f:25:84:69:10:c5:57: 70:c9:55:26:48:bc:f5:d2:c2:ef:1e:27:08:e5:7a: 25:90:e5:75:09:0e:eb:35:27:9f:87:d3:1f:75:e7: 9d:53:7c:71:89:a8:66:51:43:5b:03:bb:3f:15:3d: 27:93:f9:b2:4a:f4:7f:50:30:3c:dc:79:0b:bc:cf: 32:b3:08:e3:fb:d4:65:f2:29:35:58:18:19:10:2a: c8:f0:11:4f:52:c3:46:fd:b6:dc:d0:81:02:ea:4b: e0:20:68:d4:10:3b:64:4f:17:83:e3:d2:58:b5:6b: d7:dc:73:49:19:04:81:97:f4:b2:74:1e:40:90:a9: af:ee:37:2e:04:3b:fa:e6:c9:52:76:bc:db:13:62: 7f:a6:33:18:02:bd:64:df:54:d0:4c:6a:49:35:fe: a0:08:d5:2e:36:e2:e5:0d:b1:8a:d8:75:a9:cd:7f: f9:da:b3:de:58:57:04:5d:f2:2f:7e:12:ec:80:79: 37:da:c6:09:31:bd:cf:1e:28:a5:e8:d6:55:bd:8a: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:DE:2E:4E:A9:1A:B3:3B:4A:B5:2D:F9:5F:73:D7:35:D8:52:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/956f46e2-13be-3cfc-8bce-c710f570c0ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 137.184.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:01:09:30:b6:b5:1a:ff:bb:a1:13:1c:54:ac:a5:39:c9:fc: de:ef:02:5f:ba:83:1e:2c:e1:30:3c:6f:e9:a3:40:d0:44:80: d7:f8:33:75:e4:17:8b:1e:d1:e2:19:ac:3b:23:b8:2d:da:8d: 52:81:fa:5b:60:c1:04:77:cf:ad:ab:aa:8f:f7:91:89:b2:e2: d2:35:4a:6b:42:25:42:3c:b3:6a:ea:78:c2:bc:56:f2:56:d3: 39:26:53:c2:42:2c:26:04:0c:45:61:ea:9a:7b:c1:72:96:df: c5:0e:ad:fb:08:6a:76:35:a9:b1:81:ef:f4:52:21:40:c5:d7: 17:d8:76:37:ef:61:71:11:1b:50:ea:1c:31:2c:d7:e5:52:55: 65:79:97:a2:85:45:b6:36:7d:4b:6a:ae:a3:d5:d3:6f:7d:27: e8:65:72:79:02:2f:1d:0d:6a:10:e6:fa:68:e9:fa:65:68:7c: 33:a8:68:d6:6b:07:df:8b:da:71:62:48:b2:0d:e1:22:f2:11: 0e:ef:6e:c9:7a:b4:ed:95:27:9a:dd:4b:07:9f:e6:a2:40:8b: 88:e3:b8:29:33:f2:46:6d:2f:5f:05:62:dd:f4:17:65:89:23: 91:64:52:a3:e6:5a:42:90:b3:26:cd:78:71:df:b7:56:e4:b0: 22:05:7a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYos/O9v4ZEjB+TgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NGI3OWUyZmMtYmY5OS00MDI3LWI5NjItMTFhN2ZkMjljMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRpy3haCns4DOEG3cZMSpZEZ+Trk1wbGR8HG k1PbEVCKzlsDpmtB9+CtI0XuTDP455oyPi8lhGkQxVdwyVUmSLz10sLvHicI5Xol kOV1CQ7rNSefh9MfdeedU3xxiahmUUNbA7s/FT0nk/mySvR/UDA83HkLvM8yswjj +9Rl8ik1WBgZECrI8BFPUsNG/bbc0IEC6kvgIGjUEDtkTxeD49JYtWvX3HNJGQSB l/SydB5AkKmv7jcuBDv65slSdrzbE2J/pjMYAr1k31TQTGpJNf6gCNUuNuLlDbGK 2HWpzX/52rPeWFcEXfIvfhLsgHk32sYJMb3PHiil6NZVvYrjlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwX3i5OqRqzO0q1Lflfc9c12FKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvOTU2ZjQ2ZTItMTNiZS0z Y2ZjLThiY2UtYzcxMGY1NzBjMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAibj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcBCTC2tRr/u6ETHFSspTnJ/N7vAl+6gx4s4TA8b+mjQNBEgNf4M3Xk F4se0eIZrDsjuC3ajVKB+ltgwQR3z62rqo/3kYmy4tI1SmtCJUI8s2rqeMK8VvJW 0zkmU8JCLCYEDEVh6pp7wXKW38UOrfsIanY1qbGB7/RSIUDF1xfYdjfvYXERG1Dq HDEs1+VSVWV5l6KFRbY2fUtqrqPV0299J+hlcnkCLx0NahDm+mjp+mVofDOoaNZr B9+L2nFiSLIN4SLyEQ7vbsl6tO2VJ5rdSwef5qJAi4jjuCkz8kZtL18FYt30F2WJ I5FkUqPmWkKQsybNeHHft1bksCIFehU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:55:53 2025 by rpki-client