$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/65fa0acc-d880-3586-950a-8cfb985ddf75.roa File: 65fa0acc-d880-3586-950a-8cfb985ddf75.roa (raw, json) Hash identifier: n9WBgKrxj8KyzOqKRNx/QsLMg3bhFguQ4K9jI6nM8Qs= Subject key identifier: AA:97:16:E6:78:8C:5F:5F:38:AF:56:9B:8C:89:23:29:DB:53:E5:74 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B502589303A26C0EE9FA44A00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/65fa0acc-d880-3586-950a-8cfb985ddf75.roa Signing time: Thu 25 Sep 2025 15:28:00 +0000 ROA not before: Thu 25 Sep 2025 15:28:00 +0000 ROA not after: Wed 24 Dec 2025 16:28:00 +0000 asID: 13445 IP address blocks: 163.129.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:50:25:89:30:3a:26:c0:ee:9f:a4:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 25 15:28:00 2025 GMT Not After : Dec 24 16:28:00 2025 GMT Subject: CN=4584a647-c58f-47bc-ba56-d1486ec8da7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:e9:c0:2e:f7:be:df:94:ef:d4:07:61:27: bc:96:da:ff:e4:aa:f8:95:29:52:ad:f9:d6:e1:44: 5e:34:99:35:84:d4:06:45:dc:74:c8:df:b7:7e:29: 55:43:b4:3c:ba:cc:6f:e4:3d:8b:c9:d3:df:ac:1a: 8d:b5:22:2e:dc:31:42:4f:d9:5a:89:4d:a5:50:e6: ed:ef:b3:be:2f:59:17:fa:a5:b5:e0:91:45:93:2a: 78:e8:bd:c1:8b:d5:44:3d:27:11:47:20:f3:f7:e8: 48:8a:21:4b:1d:ec:27:39:8f:46:17:e3:65:89:f2: 91:3a:c8:f4:3e:28:b9:12:d1:b5:81:22:7f:86:f1: 1d:6a:28:24:cf:67:f4:2a:80:1d:69:55:d7:f9:26: e3:34:5a:9e:7f:5a:2c:a0:29:c5:fc:fe:81:04:88: 48:4a:de:19:50:84:ba:0d:86:0b:f0:c7:a2:ae:20: bc:83:e3:d1:23:e6:cb:b8:cd:12:aa:7e:69:cf:72: c1:5f:c1:f5:33:e4:b2:2b:be:e4:e4:b2:16:fa:59: e3:de:52:1e:91:03:dc:64:d4:8c:a5:ae:05:d2:53: 0f:a7:34:5d:46:c6:ce:ee:61:bf:29:28:83:0b:cf: a4:fe:f2:76:5f:af:f6:f6:9b:8d:cf:5b:10:57:27: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:97:16:E6:78:8C:5F:5F:38:AF:56:9B:8C:89:23:29:DB:53:E5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/65fa0acc-d880-3586-950a-8cfb985ddf75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:88:be:2c:b9:ef:fd:8a:c2:38:fe:ff:90:6c:11:38:0f:4d: 52:7b:92:d9:77:07:df:ca:55:97:91:26:ef:f8:60:73:d5:ef: 21:d6:5a:bb:3f:97:db:de:4e:36:2d:75:8e:a6:1f:0d:7b:24: 50:94:98:4b:d0:65:a3:11:18:ac:4b:b3:dd:17:b8:a9:89:ec: b9:19:96:2b:45:cb:62:94:a2:cb:3b:1d:9e:8f:1c:78:84:66: dc:46:3b:4f:f0:0c:16:fc:40:f5:05:7d:24:e6:86:08:33:5d: 18:ad:fd:75:4c:fa:d4:72:6b:d6:19:dc:c1:3e:fd:8e:30:8a: 2d:00:7f:91:5d:3c:13:b7:65:40:4c:fd:2e:1e:14:de:ac:ba: e1:ce:ac:87:c5:a4:0d:61:24:fd:92:f7:bb:7c:bd:4f:9a:7a: 70:7c:6d:21:7d:b7:1b:86:60:c9:ba:2c:59:54:4e:7d:1d:74: d1:4e:65:e4:9e:6d:63:d1:84:b1:c2:da:11:4b:8b:31:33:c1: 08:11:7e:86:f1:1d:97:ab:b8:c6:bf:8e:6d:40:8c:56:1c:bb: b5:5a:59:b3:50:95:97:7c:a9:50:cc:4f:fa:ab:df:3f:45:b8: b7:af:84:6f:e6:05:93:bc:91:9f:0f:4e:8e:67:7e:04:e2:91: e6:89:7d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtQJYkwOibA7p+kSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkyNTE1MjgwMFoXDTI1MTIyNDE2MjgwMFowLzEtMCsGA1UEAxMk NDU4NGE2NDctYzU4Zi00N2JjLWJhNTYtZDE0ODZlYzhkYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieHpwC73vt+U79QHYSe8ltr/5Kr4lSlSrfnW 4UReNJk1hNQGRdx0yN+3filVQ7Q8usxv5D2LydPfrBqNtSIu3DFCT9laiU2lUObt 77O+L1kX+qW14JFFkyp46L3Bi9VEPScRRyDz9+hIiiFLHewnOY9GF+NlifKROsj0 Pii5EtG1gSJ/hvEdaigkz2f0KoAdaVXX+SbjNFqef1osoCnF/P6BBIhISt4ZUIS6 DYYL8MeiriC8g+PRI+bLuM0Sqn5pz3LBX8H1M+SyK77k5LIW+lnj3lIekQPcZNSM pa4F0lMPpzRdRsbO7mG/KSiDC8+k/vJ2X6/29puNz1sQVydTIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqXFuZ4jF9fOK9Wm4yJIynbU+V0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNjVmYTBhY2MtZDg4MC0z NTg2LTk1MGEtOGNmYjk4NWRkZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo4EkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqIviy57/2Kwjj+/5BsETgPTVJ7ktl3B9/KVZeRJu/4YHPV7yHWWrs/ l9veTjYtdY6mHw17JFCUmEvQZaMRGKxLs90XuKmJ7LkZlitFy2KUoss7HZ6PHHiE ZtxGO0/wDBb8QPUFfSTmhggzXRit/XVM+tRya9YZ3ME+/Y4wii0Af5FdPBO3ZUBM /S4eFN6suuHOrIfFpA1hJP2S97t8vU+aenB8bSF9txuGYMm6LFlUTn0ddNFOZeSe bWPRhLHC2hFLizEzwQgRfobxHZeruMa/jm1AjFYcu7VaWbNQlZd8qVDMT/qr3z9F uLevhG/mBZO8kZ8PTo5nfgTikeaJfQU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:46 2025 by rpki-client