$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa File: 5ed2d683-595f-35cf-b854-966c1865c235.roa (raw, json) Hash identifier: 67iTolIp/rI4zM0OvykYcTrcHnOROc95GABhiDyulHc= Subject key identifier: E0:73:53:B9:32:F6:4E:F6:CC:F1:2C:0A:32:ED:68:DD:90:62:2C:A4 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A54634442AD19B4E7C0D80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 174.138.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:46:34:44:2a:d1:9b:4e:7c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=38ffa81a-9add-4c8a-86d6-85a2a1d68439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ed:22:43:f3:2f:42:93:33:fe:4d:77:6f:13: a8:00:22:1c:b1:ce:64:9c:76:bd:93:27:72:b0:95: f7:82:7d:51:6e:c0:29:48:20:d1:a7:9a:59:8a:b3: eb:2e:e0:74:31:1e:54:a0:02:7e:0e:31:04:96:55: 98:19:f3:8b:bc:69:ad:e7:16:31:4e:95:8b:ee:e1: 8b:61:bc:4c:ab:62:0f:0b:c4:c5:e7:62:20:b8:e7: 5c:42:b7:02:02:55:be:df:67:0c:f3:e9:eb:f6:be: f0:b7:82:98:bb:bf:ef:f9:74:6e:ac:4d:39:cf:46: ed:91:ca:41:9c:03:2c:da:95:ee:83:43:79:3d:25: 4d:28:93:20:d0:c6:37:9e:c7:e6:cf:ec:05:23:27: eb:21:96:2a:02:5c:de:85:83:72:5d:2e:7e:64:09: 23:b0:27:73:23:8c:bd:6f:88:58:f1:b8:a4:86:5c: 67:8e:88:4e:46:5f:f7:27:74:29:4d:1b:7c:fb:93: 42:dd:d3:5d:3e:26:eb:87:09:7a:5a:4a:88:2d:2f: 37:79:42:7e:0d:fa:6e:fb:b3:55:58:fa:82:02:65: ca:61:6e:bb:2d:ae:8d:6c:d1:e7:41:74:96:ad:5d: aa:89:95:b2:cb:d7:46:d3:62:82:2a:90:d9:88:71: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:73:53:B9:32:F6:4E:F6:CC:F1:2C:0A:32:ED:68:DD:90:62:2C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 174.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:63:cd:00:a6:62:c4:c3:94:18:fe:c6:3a:21:99:4d:67:98: d6:a3:3e:dc:90:0e:0e:e4:95:66:18:17:87:64:21:6e:a5:b2: 52:ab:92:04:df:9f:23:81:94:fe:0d:e1:3d:99:30:8b:07:c3: e0:a7:2d:b8:fa:8b:22:76:79:59:ec:f5:a5:67:e7:42:5a:82: 59:32:41:9b:61:15:1e:0d:82:68:07:35:fe:c9:97:99:76:36: 28:7b:cd:b4:79:b1:ed:eb:a5:3e:7d:20:dd:a5:d9:04:f9:98: 71:de:8d:a0:68:e3:f8:a1:08:3d:00:b0:ae:a3:7e:e3:6d:0b: bf:4e:9e:86:80:68:c0:ef:59:9f:80:17:d6:5f:b3:f6:ce:58: f2:5e:e1:26:e9:6f:27:e4:e0:c8:4f:44:87:df:46:60:70:b9: 62:fa:4e:1c:44:53:bb:85:a7:2e:13:21:19:6c:f1:1f:0c:96: 7b:43:bb:1b:fd:a7:e8:e3:c9:15:c4:d6:0b:5d:e2:c3:93:a9: 05:f0:13:55:cc:10:ab:d5:b3:54:9d:9d:75:30:36:d1:cd:d3: 84:cf:82:a0:20:e3:04:a8:b9:db:92:5a:0c:7c:a8:fe:a3:c3: af:3e:fd:a4:a5:db:83:9f:2f:4b:0d:41:e9:02:a1:ec:e3:8b: de:e6:a7:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUY0RCrRm058DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MzhmZmE4MWEtOWFkZC00YzhhLTg2ZDYtODVhMmExZDY4NDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku0iQ/MvQpMz/k13bxOoACIcsc5knHa9kydy sJX3gn1RbsApSCDRp5pZirPrLuB0MR5UoAJ+DjEEllWYGfOLvGmt5xYxTpWL7uGL YbxMq2IPC8TF52IguOdcQrcCAlW+32cM8+nr9r7wt4KYu7/v+XRurE05z0btkcpB nAMs2pXug0N5PSVNKJMg0MY3nsfmz+wFIyfrIZYqAlzehYNyXS5+ZAkjsCdzI4y9 b4hY8bikhlxnjohORl/3J3QpTRt8+5NC3dNdPibrhwl6WkqILS83eUJ+Dfpu+7NV WPqCAmXKYW67La6NbNHnQXSWrV2qiZWyy9dG02KCKpDZiHGnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBzU7ky9k72zPEsCjLtaN2QYiykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWVkMmQ2ODMtNTk1Zi0z NWNmLWI4NTQtOTY2YzE4NjVjMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrooAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGljzQCmYsTDlBj+xjohmU1nmNajPtyQDg7klWYYF4dkIW6lslKrkgTf nyOBlP4N4T2ZMIsHw+CnLbj6iyJ2eVns9aVn50JaglkyQZthFR4NgmgHNf7Jl5l2 Nih7zbR5se3rpT59IN2l2QT5mHHejaBo4/ihCD0AsK6jfuNtC79OnoaAaMDvWZ+A F9Zfs/bOWPJe4Sbpbyfk4MhPRIffRmBwuWL6ThxEU7uFpy4TIRls8R8MlntDuxv9 p+jjyRXE1gtd4sOTqQXwE1XMEKvVs1SdnXUwNtHN04TPgqAg4wSouduSWgx8qP6j w68+/aSl24OfL0sNQekCoezji97mpzQ= -----END CERTIFICATE-----Generated at Tue Jul 1 06:52:09 2025 by rpki-client