$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa File: ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json) Hash identifier: Kcg0ttooLg834hDUWGFGp20kUs5LcFl3XdReQzbqt28= Subject key identifier: 9B:AF:8F:34:20:CF:57:AC:53:78:DB:80:2C:54:A3:4B:D1:1C:C9:CB Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584B7DECAC7FC717146ED2DBBA00 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 14977 IP address blocks: 137.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ac:7f:c7:17:14:6e:d2:db:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=dba69765-b1e3-492d-a100-28a6d2f4a195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:0b:25:9f:fa:f5:4a:6b:d9:a2:53:ad:ee: 32:24:8c:31:28:e1:e5:e6:02:ed:b6:53:67:3b:08: 31:eb:b3:08:49:9e:2b:be:cd:b7:02:33:47:9e:ab: 2d:be:c8:ed:a7:28:05:c2:e9:35:ff:09:91:5c:12: 6f:27:a9:33:07:21:64:c6:62:6b:ae:d0:66:38:0d: e6:7e:fb:48:0b:d9:87:e4:b2:f7:c2:04:9e:ea:0d: f8:98:0b:a6:6e:7e:13:cb:fe:1d:5e:a1:fe:f1:ec: c4:f0:f3:e2:73:d9:3a:ed:95:9a:d7:de:91:44:f5: e0:e9:00:b6:4b:c8:2f:84:8e:f1:47:40:36:d1:e1: 67:96:4e:95:d1:e2:96:d6:b1:56:6e:d0:16:5c:e5: ad:6e:49:8e:52:a2:0b:d4:ed:87:67:e8:ed:cb:67: 0d:fa:1e:61:ae:b3:af:48:06:97:0e:48:ec:14:23: c4:60:ad:31:49:00:e5:05:ae:fa:59:42:7e:ef:0b: 55:70:d2:ec:0e:97:41:c1:6b:37:9c:62:d7:76:43: cb:e9:c3:cb:dc:a7:3d:70:14:62:ed:62:85:82:03: 8b:55:da:99:c8:82:6a:6b:85:97:0e:42:cc:e4:4c: 8d:76:7b:dd:1c:a5:cf:67:ec:3d:c0:a0:dd:c1:d3: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AF:8F:34:20:CF:57:AC:53:78:DB:80:2C:54:A3:4B:D1:1C:C9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fe:32:c2:b5:33:14:64:ff:ac:ce:40:14:0c:cf:36:0c:ab: 27:4c:92:fb:62:de:84:90:83:88:a6:f6:10:c7:7e:a2:4f:d9: 92:1a:a4:fa:1b:54:7e:eb:8b:f3:70:30:a2:9c:04:5a:e9:65: 36:11:dc:30:92:18:bf:78:02:9a:e5:cb:86:b5:95:e1:bc:8a: ed:c3:46:c1:f5:46:39:3b:f2:ae:a5:4c:b1:b3:a3:19:7b:33: 58:2f:04:6c:da:48:ff:13:d7:88:be:4a:7a:16:0d:64:76:6e: 6a:54:33:f6:59:ca:11:1e:d6:cf:a7:6f:61:f0:da:2a:3f:fa: 95:53:02:a7:9b:f0:3c:c0:43:d5:c3:73:42:7e:e7:70:2a:84: 9b:47:f2:ff:20:8b:fc:33:78:fb:18:4b:b7:00:ca:a1:61:97: 91:77:f8:c2:51:22:33:10:d7:36:81:7d:b0:fe:e7:44:b2:3c: a2:bd:49:e9:28:01:18:3a:7b:f7:19:df:8b:42:a7:dd:0d:0e: dd:ec:32:fa:18:a6:04:d6:5a:ae:01:ec:f5:bf:0c:3b:77:76: 5c:44:74:2a:23:a9:4e:d1:83:70:a3:46:be:38:e5:ab:19:21: 7c:4b:ca:95:88:0d:f7:3d:75:21:62:11:4e:4a:e0:07:c5:f0: 0c:b0:3f:b9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt97Kx/xxcUbtLbugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGJhNjk3NjUtYjFlMy00OTJkLWExMDAtMjhhNmQyZjRhMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzwLJZ/69Upr2aJTre4yJIwxKOHl5gLttlNn Owgx67MISZ4rvs23AjNHnqstvsjtpygFwuk1/wmRXBJvJ6kzByFkxmJrrtBmOA3m fvtIC9mH5LL3wgSe6g34mAumbn4Ty/4dXqH+8ezE8PPic9k67ZWa196RRPXg6QC2 S8gvhI7xR0A20eFnlk6V0eKW1rFWbtAWXOWtbkmOUqIL1O2HZ+jty2cN+h5hrrOv SAaXDkjsFCPEYK0xSQDlBa76WUJ+7wtVcNLsDpdBwWs3nGLXdkPL6cPL3Kc9cBRi 7WKFggOLVdqZyIJqa4WXDkLM5EyNdnvdHKXPZ+w9wKDdwdOVPwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJuvjzQgz1esU3jbgCxUo0vRHMnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvY2U2OGE4OWItYTU0YS0z NDZmLWE5YTItZDhkNmIyYzc5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXv4ywrUzFGT/rM5AFAzPNgyrJ0yS+2LehJCDiKb2EMd+ok/Zkhqk+htU fuuL83AwopwEWullNhHcMJIYv3gCmuXLhrWV4byK7cNGwfVGOTvyrqVMsbOjGXsz WC8EbNpI/xPXiL5KehYNZHZualQz9lnKER7Wz6dvYfDaKj/6lVMCp5vwPMBD1cNz Qn7ncCqEm0fy/yCL/DN4+xhLtwDKoWGXkXf4wlEiMxDXNoF9sP7nRLI8or1J6SgB GDp79xnfi0Kn3Q0O3ewy+himBNZargHs9b8MO3d2XER0KiOpTtGDcKNGvjjlqxkh fEvKlYgN9z11IWIRTkrgB8XwDLA/uQ== -----END CERTIFICATE-----Generated at Wed Oct 22 00:07:58 2025 by rpki-client