$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa File: 5ed2d683-595f-35cf-b854-966c1865c235.roa (raw, json) Hash identifier: z4h/619BTmQr6oS19IjqrdFJvW41dBSoiDr2Sfkc1pw= Subject key identifier: 9F:B2:FF:2B:77:FD:A0:5D:02:6E:DC:53:96:58:09:7C:70:8F:BD:42 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE46111B5E9B1D98800FD5000 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 174.138.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:11:b5:e9:b1:d9:88:00:fd:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=17398fd8-885e-4caf-9ccb-9e31796a60f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:4c:d6:62:01:98:c0:11:c5:0f:b5:06:b4: 7f:7d:6e:13:46:73:24:0e:3c:6c:d7:76:db:3e:18: 44:fb:d5:c6:26:c8:03:96:a4:30:49:9b:90:ed:4f: b1:69:65:a5:0d:91:2b:58:a9:7c:33:bd:39:5b:95: aa:14:74:ba:2c:0b:6f:23:a5:23:ac:fd:e2:13:44: 48:09:80:e2:92:0d:64:5b:8c:8e:48:4f:b4:f1:2d: 04:87:a0:a4:cb:c7:66:6f:f9:d1:56:a5:75:0d:15: e3:fe:7e:15:fd:4e:b7:ba:94:39:b4:37:12:43:4f: ce:41:a1:6a:a4:64:e0:2f:1e:0a:52:15:8f:f8:fd: e8:b8:b0:0e:04:e4:dd:f6:0d:c9:b1:68:a6:09:94: 79:5d:e6:68:10:72:93:ff:4a:0a:56:7d:93:79:b9: 22:90:dc:ae:02:2f:ef:70:a3:c4:5a:3e:9a:ee:5e: 02:3a:1e:1f:10:5b:9e:c1:e3:dd:ff:46:2b:f0:00: 5c:dc:bf:4b:b9:49:62:f8:ba:09:48:0f:64:ba:53: 0d:36:5c:42:32:08:33:db:5e:57:2b:ae:2c:ae:53: ea:dc:0e:17:6c:c5:1b:72:22:90:5d:cf:ce:6e:43: 95:fa:6a:58:2b:42:ef:e9:18:b8:fd:93:11:0e:17: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B2:FF:2B:77:FD:A0:5D:02:6E:DC:53:96:58:09:7C:70:8F:BD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5ed2d683-595f-35cf-b854-966c1865c235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 174.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4b:63:d2:45:55:69:17:c5:00:f7:59:cd:ac:2a:5b:4f:c5: cf:a3:87:5d:f2:d1:0e:f8:65:27:33:ce:c0:ff:b6:f2:c8:dc: ec:15:fa:7c:35:cd:0a:57:4a:e9:a7:09:d9:10:47:c7:77:84: 45:1a:d7:bb:3c:60:ce:30:27:ef:35:b1:f1:bf:d2:5b:ff:e5: af:3d:1c:24:0a:b8:72:5d:68:f3:e4:59:aa:cb:82:b7:37:d8: 24:0b:83:44:45:9d:42:6a:3a:24:7f:b6:81:b6:30:74:42:1a: 71:4b:43:2b:92:f4:09:85:67:40:3a:76:1d:44:92:be:e2:fe: a6:f2:3c:1c:c0:e1:ef:e0:72:a5:1e:34:0b:14:0c:37:ef:a9: a5:2b:74:09:96:e4:18:14:e5:50:63:48:9c:b9:f2:c3:11:b4: 25:f1:cc:77:77:1f:39:4f:1c:d1:c5:22:9e:c8:46:22:da:67: a2:6c:7a:86:b9:c3:8e:c2:bc:46:fc:03:ab:e9:db:8b:7c:ae: 7a:2a:ac:19:eb:bc:a9:d6:2c:3e:81:25:69:b1:2e:23:a7:97: f7:89:e4:97:f8:1f:70:0d:e6:d3:f4:47:5c:3d:04:f2:83:a7: 93:7e:e5:5b:30:1a:fb:ae:26:b7:33:2e:57:dd:01:31:a4:a9: 1a:0a:b3:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRG16bHZiAD9UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MTczOThmZDgtODg1ZS00Y2FmLTljY2ItOWUzMTc5NmE2MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipdM1mIBmMARxQ+1BrR/fW4TRnMkDjxs13bb PhhE+9XGJsgDlqQwSZuQ7U+xaWWlDZErWKl8M705W5WqFHS6LAtvI6UjrP3iE0RI CYDikg1kW4yOSE+08S0Eh6Cky8dmb/nRVqV1DRXj/n4V/U63upQ5tDcSQ0/OQaFq pGTgLx4KUhWP+P3ouLAOBOTd9g3JsWimCZR5XeZoEHKT/0oKVn2TebkikNyuAi/v cKPEWj6a7l4COh4fEFuewePd/0Yr8ABc3L9LuUli+LoJSA9kulMNNlxCMggz215X K64srlPq3A4XbMUbciKQXc/ObkOV+mpYK0Lv6Ri4/ZMRDhdozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+y/yt3/aBdAm7cU5ZYCXxwj71CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNWVkMmQ2ODMtNTk1Zi0z NWNmLWI4NTQtOTY2YzE4NjVjMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrooAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRLY9JFVWkXxQD3Wc2sKltPxc+jh13y0Q74ZSczzsD/tvLI3OwV+nw1 zQpXSumnCdkQR8d3hEUa17s8YM4wJ+81sfG/0lv/5a89HCQKuHJdaPPkWarLgrc3 2CQLg0RFnUJqOiR/toG2MHRCGnFLQyuS9AmFZ0A6dh1Ekr7i/qbyPBzA4e/gcqUe NAsUDDfvqaUrdAmW5BgU5VBjSJy58sMRtCXxzHd3HzlPHNHFIp7IRiLaZ6Jseoa5 w47CvEb8A6vp24t8rnoqrBnrvKnWLD6BJWmxLiOnl/eJ5Jf4H3AN5tP0R1w9BPKD p5N+5VswGvuuJrczLlfdATGkqRoKs9I= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:18 2025 by rpki-client