$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa File: ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json) Hash identifier: DlyLwXem8JhF366RgRLlBo4z5iij4hxMwvM6ZSOCtfY= Subject key identifier: 69:4A:C7:05:E4:3F:F9:5A:75:B5:CC:98:7C:2B:84:51:76:F2:A6:F1 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584A9D30E741A93869BC57DB3E70 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 14977 IP address blocks: 137.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:e7:41:a9:38:69:bc:57:db:3e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=80a6a5e0-84af-4f41-8038-d3072d8b2255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:88:15:84:c5:b3:5e:1c:78:f0:70:35:8f: 25:47:99:29:75:bc:ee:c4:bd:62:20:bb:db:9e:f4: c4:ff:70:1d:cc:51:19:08:5f:26:d8:56:87:72:f5: fc:96:35:58:0f:70:ac:0c:e4:bf:46:75:8d:1d:9a: 4e:2b:a5:3d:f3:89:15:0d:69:ee:92:30:a3:50:8d: ac:cb:81:c9:fb:d9:d1:e2:60:26:e7:2b:12:fc:5f: 48:80:ff:be:8f:63:ee:0f:1c:a2:2b:42:bd:ac:81: d7:61:6c:15:10:03:37:d8:e9:a7:ea:13:99:10:cf: 33:5d:fa:d1:49:29:b5:4e:d6:8b:3a:39:72:2a:7c: a1:60:ad:39:d5:9a:fa:c6:1e:8d:a8:7d:10:f6:10: 3c:19:b7:bb:e7:99:c7:e8:0d:46:6b:eb:bf:fa:31: fb:f1:72:d9:c7:38:df:20:70:ea:4a:c9:68:ee:8c: 82:98:31:5d:8a:a3:0c:a4:58:1f:0b:9e:31:9f:a3: 10:9f:a4:24:6b:a3:5c:b6:17:ed:4c:9f:ed:b9:b8: 11:7e:55:43:6c:c0:09:5d:d2:08:22:7e:d3:e1:d4: 61:8b:be:bd:a1:74:5d:f0:90:f1:13:0d:44:c9:66: 74:2e:0a:52:d0:8c:5a:7a:1a:35:c4:91:a5:03:24: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4A:C7:05:E4:3F:F9:5A:75:B5:CC:98:7C:2B:84:51:76:F2:A6:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2b:ec:07:7c:cb:79:5a:f8:f1:28:7d:72:fa:9a:a2:21:3b: f8:ca:4b:9b:3c:32:a2:21:97:91:07:cc:60:d5:35:7d:d9:82: 29:4b:ca:ad:4b:67:e1:4d:08:7e:c4:33:b4:50:26:cf:5d:77: 40:05:df:64:13:d7:ee:0d:8a:05:0a:46:9f:01:48:bc:35:3c: 12:b8:3f:ee:e4:bf:09:f1:37:04:b9:17:cc:c5:1c:51:82:5b: f5:c4:3b:8b:60:da:5f:81:1c:3b:4b:0a:80:06:3b:0e:58:79: 1e:6c:6f:38:bd:8a:11:8a:74:b8:6c:8a:76:93:72:30:b0:bc: 03:39:64:6d:81:14:da:59:b2:17:ce:60:13:1b:4f:1a:fe:87: fa:fd:95:42:d7:54:b1:6a:4f:07:26:58:01:57:4a:f1:00:50: 26:9c:d8:ed:ea:19:ef:bc:ba:7b:47:1e:bd:9c:45:e0:9c:aa: 18:a0:15:15:f8:76:bc:74:d2:0a:76:39:e9:9f:2d:f4:0e:1a: 78:f0:fb:9f:2a:bd:ac:2d:a1:91:f7:b1:41:5a:14:f7:93:ed: b5:59:87:58:2a:14:7d:65:35:7e:5d:58:17:15:07:f3:22:ab: ad:32:17:17:a1:40:d4:b6:7c:c8:24:60:e2:a7:ad:2f:05:09: 18:58:3b:81 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqdMOdBqThpvFfbPnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ODBhNmE1ZTAtODRhZi00ZjQxLTgwMzgtZDMwNzJkOGIyMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEuIFYTFs14cePBwNY8lR5kpdbzuxL1iILvb nvTE/3AdzFEZCF8m2FaHcvX8ljVYD3CsDOS/RnWNHZpOK6U984kVDWnukjCjUI2s y4HJ+9nR4mAm5ysS/F9IgP++j2PuDxyiK0K9rIHXYWwVEAM32Omn6hOZEM8zXfrR SSm1TtaLOjlyKnyhYK051Zr6xh6NqH0Q9hA8Gbe755nH6A1Ga+u/+jH78XLZxzjf IHDqSslo7oyCmDFdiqMMpFgfC54xn6MQn6Qka6NcthftTJ/tubgRflVDbMAJXdII In7T4dRhi769oXRd8JDxEw1EyWZ0LgpS0Ixaeho1xJGlAyQhiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGlKxwXkP/ladbXMmHwrhFF28qbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvY2U2OGE4OWItYTU0YS0z NDZmLWE5YTItZDhkNmIyYzc5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJSvsB3zLeVr48Sh9cvqaoiE7+MpLmzwyoiGXkQfMYNU1fdmCKUvKrUtn 4U0IfsQztFAmz113QAXfZBPX7g2KBQpGnwFIvDU8Erg/7uS/CfE3BLkXzMUcUYJb 9cQ7i2DaX4EcO0sKgAY7Dlh5HmxvOL2KEYp0uGyKdpNyMLC8AzlkbYEU2lmyF85g ExtPGv6H+v2VQtdUsWpPByZYAVdK8QBQJpzY7eoZ77y6e0cevZxF4JyqGKAVFfh2 vHTSCnY56Z8t9A4aePD7nyq9rC2hkfexQVoU95PttVmHWCoUfWU1fl1YFxUH8yKr rTIXF6FA1LZ8yCRg4qetLwUJGFg7gQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:42:41 2025 by rpki-client