$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa File: bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa (raw, json) Hash identifier: gTyr9sIrBDcEO+0iTw9SSmjP3MI/DFWfbBljmTmm60E= Subject key identifier: B5:0A:58:93:5E:54:A6:D7:DF:AC:D9:B9:B1:54:BE:0B:C5:88:61:47 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B047C13F8CAACEABA0BC97D00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13445 IP address blocks: 163.129.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:13:f8:ca:ac:ea:ba:0b:c9:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=d08b74c0-e6fb-4987-b314-7b22902a3757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:c7:26:fd:f9:42:ac:98:e7:dc:83:c5:74: 9a:7a:65:78:cf:80:98:d9:e1:11:25:bb:ea:65:83: 44:66:9b:65:8e:16:b7:a5:35:9d:c8:e7:98:7c:b0: 7b:68:bc:4d:dd:f9:11:6d:1f:8e:e5:6f:5d:d8:4c: 98:49:4b:52:5a:75:7d:9c:a6:d9:ef:64:4b:2e:a0: 99:a0:bc:41:52:5e:96:93:a2:54:14:d0:b0:d4:c7: c4:5f:1a:2b:4b:5d:f1:2e:3d:05:e2:51:8a:26:f4: 9f:9f:82:ad:4d:7d:b3:b0:9f:de:fb:4a:9d:b3:c4: 19:6c:42:67:57:3b:7d:19:00:87:9e:34:76:17:75: d2:00:e0:43:0c:50:44:39:fe:fb:9c:84:f8:c8:5a: 47:07:45:6d:99:5e:9f:fe:4e:5b:13:1f:69:af:54: c0:40:e9:7f:7e:03:77:2b:95:fe:48:a9:fc:d8:e1: 11:79:67:f2:c8:ef:21:28:7a:0e:4f:e6:be:5a:15: 5e:7e:9e:c3:77:4e:48:0d:24:a3:ff:ad:48:ce:d8: 9f:34:a7:e4:6a:f9:94:de:a7:08:8e:f6:34:47:b0: c3:8b:30:e0:55:b1:5d:17:5c:c9:58:c2:38:9b:23: f2:f4:f4:87:4a:50:50:23:5b:75:a7:ce:c8:eb:a9: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0A:58:93:5E:54:A6:D7:DF:AC:D9:B9:B1:54:BE:0B:C5:88:61:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4a:91:66:2a:2b:45:b6:64:8b:b7:35:57:11:7a:d7:cf:ac: 32:30:bf:b0:97:14:1b:8b:9b:4c:f9:3e:d7:e2:5d:60:4e:1f: f7:13:8c:68:65:2a:76:92:ad:c8:17:14:84:6c:12:a2:73:82: 63:a3:42:b3:ce:ee:38:9c:49:2f:ca:40:2b:b2:59:c7:0e:93: 8d:4d:48:25:a3:80:1e:16:c2:77:6e:0e:e3:44:af:4f:56:d6: 83:8f:d3:02:82:18:36:08:97:dd:7f:11:a1:81:04:42:4f:f0: 2d:d4:c4:ad:90:61:c8:6e:29:23:af:18:e9:8f:2b:bf:55:52: af:ef:16:f9:7a:79:8d:85:2d:8b:d4:d8:68:ad:09:f8:7d:95: 21:0d:3d:b1:48:9f:ef:f5:a5:e5:f4:18:76:c7:8c:79:9e:77: 78:00:68:63:14:3b:6b:9a:73:8e:11:22:03:8c:ef:b4:96:88: 04:24:4e:5b:d7:d5:1b:b9:67:b2:f4:ca:79:79:ab:49:56:a5: f6:29:20:1b:45:57:5b:b6:ca:37:6a:20:92:e4:8f:49:35:7f: a8:04:ec:1f:34:18:28:73:b1:cc:80:1a:b0:3c:e5:eb:24:ac: da:8b:8b:82:8f:48:90:6b:6d:c9:78:1f:5b:28:37:97:8a:c5: 2b:41:78:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBP4yqzqugvJfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDA4Yjc0YzAtZTZmYi00OTg3LWIzMTQtN2IyMjkwMmEzNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgELHJv35QqyY59yDxXSaemV4z4CY2eERJbvq ZYNEZptljha3pTWdyOeYfLB7aLxN3fkRbR+O5W9d2EyYSUtSWnV9nKbZ72RLLqCZ oLxBUl6Wk6JUFNCw1MfEXxorS13xLj0F4lGKJvSfn4KtTX2zsJ/e+0qds8QZbEJn Vzt9GQCHnjR2F3XSAOBDDFBEOf77nIT4yFpHB0VtmV6f/k5bEx9pr1TAQOl/fgN3 K5X+SKn82OEReWfyyO8hKHoOT+a+WhVefp7Dd05IDSSj/61IztifNKfkavmU3qcI jvY0R7DDizDgVbFdF1zJWMI4myPy9PSHSlBQI1t1p87I66m2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUKWJNeVKbX36zZubFUvgvFiGFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYmI1NDRhMDYtMGRhNi0z YzU3LWI5YWItMGQ3Njk0NTQ2ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo4EgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRKkWYqK0W2ZIu3NVcRetfPrDIwv7CXFBuLm0z5PtfiXWBOH/cTjGhl KnaSrcgXFIRsEqJzgmOjQrPO7jicSS/KQCuyWccOk41NSCWjgB4WwnduDuNEr09W 1oOP0wKCGDYIl91/EaGBBEJP8C3UxK2QYchuKSOvGOmPK79VUq/vFvl6eY2FLYvU 2GitCfh9lSENPbFIn+/1peX0GHbHjHmed3gAaGMUO2uac44RIgOM77SWiAQkTlvX 1Ru5Z7L0ynl5q0lWpfYpIBtFV1u2yjdqIJLkj0k1f6gE7B80GChzscyAGrA85esk rNqLi4KPSJBrbcl4H1soN5eKxStBeCY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:55 2025 by rpki-client