$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b5538f10-b353-3fb6-878d-7e2200f45766.roa File: b5538f10-b353-3fb6-878d-7e2200f45766.roa (raw, json) Hash identifier: iaGhKoS9oy18ng0yvJ5EXXj7Cxz4++FOHw6ZVSp1zhs= Subject key identifier: 59:DB:09:B7:6C:81:00:9E:17:33:2B:31:1D:75:1C:63:FC:1D:1D:BB Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584AFEE6CBCE4E1AD4E4146CB3B0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b5538f10-b353-3fb6-878d-7e2200f45766.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 13445 IP address blocks: 144.196.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cb:ce:4e:1a:d4:e4:14:6c:b3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=fea3133c-6aec-47a7-993e-38c7cc317170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:a4:4c:44:92:ac:72:11:cb:a5:12:ab:a7: 77:53:71:61:cc:8c:db:46:95:d3:d4:f7:fd:36:7f: 90:f1:54:4b:d4:81:25:ff:6b:19:8e:0c:e4:c0:a2: 07:82:a7:1e:f0:cd:88:ca:3a:e1:d8:76:11:19:a8: a0:de:86:64:8d:71:57:cc:70:d1:c2:f3:f0:3e:da: 3a:a3:dc:f7:5a:ac:5e:40:21:69:25:98:d5:6d:c7: f9:bb:3d:76:8b:39:cb:95:4d:d2:18:d6:d0:67:1a: 2c:d5:d4:b5:fd:51:a6:d3:6c:3d:ca:d2:f8:c3:1e: 45:de:d8:8c:3b:47:c4:03:44:13:10:59:1d:cc:08: 67:d3:f7:43:c0:f0:96:07:01:9c:7b:d8:a5:e7:c3: 17:ff:c6:44:af:6e:0a:4d:62:62:60:f2:99:17:b6: 89:17:fc:bd:9e:91:22:e4:8d:a0:b6:08:c2:13:52: 8f:7c:a1:88:e2:5a:a8:79:c5:dd:fb:3c:1f:5a:51: 2e:61:5f:3e:44:a4:81:e8:5b:06:96:df:3c:4f:74: 03:4f:e0:30:f2:c1:c4:d7:df:f8:16:1e:65:83:69: 19:8a:e0:7f:d4:68:08:2d:1e:df:a4:44:31:fe:da: 2b:49:24:6e:40:52:ee:42:f7:9a:2d:f7:bb:1f:71: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DB:09:B7:6C:81:00:9E:17:33:2B:31:1D:75:1C:63:FC:1D:1D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b5538f10-b353-3fb6-878d-7e2200f45766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:f4:5d:db:2c:06:ec:40:02:05:90:49:70:65:c3:c0:e1:a9: f6:0e:32:c7:b5:f3:43:84:67:ef:7c:04:21:94:97:9b:c8:ba: 31:e9:74:e5:12:10:c2:e1:c5:f6:ae:56:45:2b:0e:c8:b6:ac: 7a:da:26:2a:da:11:72:3b:1e:f0:13:22:75:71:1c:62:4f:ed: bb:0f:d9:39:75:29:50:b7:47:04:67:35:e6:a1:a9:00:7a:b7: 3a:d6:c0:de:2f:f2:ad:b3:17:47:c8:a2:3a:67:34:6e:23:ca: 26:8c:43:64:75:7e:67:13:2c:49:fd:8a:17:65:14:cd:d1:61: da:f5:84:21:05:24:5b:7f:5b:4c:8d:be:56:ef:2c:5e:53:f5: 71:19:1a:ed:cd:60:9a:e9:03:36:a6:65:55:af:37:87:ad:1d: 8d:50:bc:ae:68:2c:a9:d9:40:d8:4e:a9:8b:e1:40:3f:05:dc: a0:1d:09:e0:4c:5b:67:b0:9b:01:0c:31:10:bc:26:9f:f4:d9: f9:c3:ae:30:9d:3d:99:c4:32:2b:bf:9f:ff:aa:f8:21:c1:1a: 5c:cc:98:1d:4e:01:46:dc:4c:af:7b:a9:cb:11:3b:82:f4:a0: be:0a:d7:de:c7:88:93:b0:49:d6:bc:29:53:4d:40:0f:bf:bc: 13:f0:02:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5svOThrU5BRss7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmVhMzEzM2MtNmFlYy00N2E3LTk5M2UtMzhjN2NjMzE3MTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnekTESSrHIRy6USq6d3U3FhzIzbRpXT1Pf9 Nn+Q8VRL1IEl/2sZjgzkwKIHgqce8M2Iyjrh2HYRGaig3oZkjXFXzHDRwvPwPto6 o9z3WqxeQCFpJZjVbcf5uz12iznLlU3SGNbQZxos1dS1/VGm02w9ytL4wx5F3tiM O0fEA0QTEFkdzAhn0/dDwPCWBwGce9il58MX/8ZEr24KTWJiYPKZF7aJF/y9npEi 5I2gtgjCE1KPfKGI4lqoecXd+zwfWlEuYV8+RKSB6FsGlt88T3QDT+Aw8sHE19/4 Fh5lg2kZiuB/1GgILR7fpEQx/torSSRuQFLuQveaLfe7H3GDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnbCbdsgQCeFzMrMR11HGP8HR27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjU1MzhmMTAtYjM1My0z ZmI2LTg3OGQtN2UyMjAwZjQ1NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkMR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN/0XdssBuxAAgWQSXBlw8DhqfYOMse180OEZ+98BCGUl5vIujHpdOUS EMLhxfauVkUrDsi2rHraJiraEXI7HvATInVxHGJP7bsP2Tl1KVC3RwRnNeahqQB6 tzrWwN4v8q2zF0fIojpnNG4jyiaMQ2R1fmcTLEn9ihdlFM3RYdr1hCEFJFt/W0yN vlbvLF5T9XEZGu3NYJrpAzamZVWvN4etHY1QvK5oLKnZQNhOqYvhQD8F3KAdCeBM W2ewmwEMMRC8Jp/02fnDrjCdPZnEMiu/n/+q+CHBGlzMmB1OAUbcTK97qcsRO4L0 oL4K197HiJOwSda8KVNNQA+/vBPwApg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:29 2025 by rpki-client