$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa File: 0d208647-11db-3f31-93dc-96e75ed04817.roa (raw, json) Hash identifier: l41+2x5/NBH0/eHGcKR5OONpDPTnwlRbjuNDWGf+0y0= Subject key identifier: CA:C8:01:BA:78:64:D8:B1:F5:98:2F:02:23:0B:D3:A2:C5:EF:FB:DD Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5571E12110F80ACD0BD208B0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 13445 IP address blocks: 144.196.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e1:21:10:f8:0a:cd:0b:d2:08:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=4a65df64-6fa4-42db-9cf2-93c6b09196ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:22:98:21:4f:62:63:57:8b:23:58:97:92:04: 70:06:00:a6:9a:c8:ba:e8:45:5d:e9:4c:c7:07:ae: e0:5f:92:a5:c6:48:9e:e7:ce:cc:33:fd:a9:a5:86: b1:ab:af:15:93:f9:08:ad:f6:b4:74:be:6b:90:5d: 7a:d6:b2:ff:6f:96:3f:07:7f:e2:92:b0:47:b0:6c: 69:ad:0f:e9:cd:2b:9a:1e:ea:d1:4d:90:cb:9d:39: 93:13:65:09:78:f7:c1:b3:32:bf:59:1f:21:19:98: 0c:35:18:86:84:53:1d:4c:16:73:8c:cb:fa:fd:09: 78:59:e1:ab:57:d9:b7:45:f2:2b:a4:01:5f:00:30: fa:0a:bd:ce:3b:6b:fe:01:19:92:f9:67:c3:cf:d8: 09:cd:cf:b0:ae:72:57:f0:9a:ba:1f:35:4a:96:5e: f5:be:08:d1:f8:14:fd:bc:c4:e6:ed:d4:4b:a3:c8: cf:ab:dd:48:b1:1e:2f:27:35:11:6b:4d:b7:75:17: f9:c5:40:1c:b8:0f:ab:70:65:64:35:76:7a:06:5f: 5e:e8:1b:49:a9:89:08:3d:d6:a1:72:1f:22:01:7c: 97:6e:29:07:c5:f1:24:a9:28:2f:71:4c:c9:9d:23: 66:87:a9:45:37:f5:e8:99:b8:e0:4b:44:5a:b7:1b: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C8:01:BA:78:64:D8:B1:F5:98:2F:02:23:0B:D3:A2:C5:EF:FB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:3f:ce:e1:23:79:f0:0f:cf:5d:db:34:2f:d7:95:0e:b4:0f: 31:83:9b:5f:80:e1:a4:f0:be:b5:9e:72:04:c0:78:f2:9e:28: 9b:05:78:d0:33:72:2d:90:5f:8f:45:60:67:1e:10:52:6b:52: 79:a3:24:f9:75:ce:80:df:8b:c9:cd:23:ba:91:af:a9:fc:9f: 5f:d3:ce:a3:36:e0:6a:bd:b6:8d:08:59:de:6a:b9:94:eb:84: 67:53:15:7e:83:dc:46:72:e6:b1:89:8b:6b:7c:0c:c6:65:7a: 19:48:53:a4:1f:36:25:10:e6:9b:47:ef:81:a4:d4:35:4a:59: a5:81:e7:56:c3:47:b1:d6:f0:d7:da:d1:f9:1c:21:9e:4f:41: 65:d8:8d:95:e5:25:af:4e:37:92:bb:d7:2e:c1:ee:5f:56:1f: 10:db:51:ec:51:e8:77:50:d2:c0:fa:50:06:ca:19:34:47:0b: aa:cb:13:5d:ce:20:6b:82:1d:44:99:67:95:db:11:7a:c2:37: 3b:3c:4e:52:e6:3a:6f:a8:b5:29:4a:af:3b:8e:85:1f:5a:e7: 10:eb:9e:de:84:5a:ff:14:2a:48:36:81:06:e3:ac:0e:e5:4c: ec:8d:24:86:23:8c:a9:95:37:22:0a:8b:48:01:6e:ac:a7:00: 40:ad:d3:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceEhEPgKzQvSCLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NGE2NWRmNjQtNmZhNC00MmRiLTljZjItOTNjNmIwOTE5NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCKYIU9iY1eLI1iXkgRwBgCmmsi66EVd6UzH B67gX5Klxkie587MM/2ppYaxq68Vk/kIrfa0dL5rkF161rL/b5Y/B3/ikrBHsGxp rQ/pzSuaHurRTZDLnTmTE2UJePfBszK/WR8hGZgMNRiGhFMdTBZzjMv6/Ql4WeGr V9m3RfIrpAFfADD6Cr3OO2v+ARmS+WfDz9gJzc+wrnJX8Jq6HzVKll71vgjR+BT9 vMTm7dRLo8jPq91IsR4vJzURa023dRf5xUAcuA+rcGVkNXZ6Bl9e6BtJqYkIPdah ch8iAXyXbikHxfEkqSgvcUzJnSNmh6lFN/XombjgS0RatxsDgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrIAbp4ZNix9ZgvAiML06LF7/vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMGQyMDg2NDctMTFkYi0z ZjMxLTkzZGMtOTZlNzVlZDA0ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc/zuEjefAPz13bNC/XlQ60DzGDm1+A4aTwvrWecgTAePKeKJsFeNAz ci2QX49FYGceEFJrUnmjJPl1zoDfi8nNI7qRr6n8n1/TzqM24Gq9to0IWd5quZTr hGdTFX6D3EZy5rGJi2t8DMZlehlIU6QfNiUQ5ptH74Gk1DVKWaWB51bDR7HW8Nfa 0fkcIZ5PQWXYjZXlJa9ON5K71y7B7l9WHxDbUexR6HdQ0sD6UAbKGTRHC6rLE13O IGuCHUSZZ5XbEXrCNzs8TlLmOm+otSlKrzuOhR9a5xDrnt6EWv8UKkg2gQbjrA7l TOyNJIYjjKmVNyIKi0gBbqynAECt0wI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:51 2025 by rpki-client