$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa File: cad83b52-8daa-3b10-b0c0-60affecd3629.roa (raw, json) Hash identifier: qfoHQmGiENCQ7QFWBrQBA9j56dV3UIUHpOSLkAMogJk= Subject key identifier: 48:90:10:65:D3:FB:56:60:F9:39:1C:15:D9:AF:60:1A:C0:22:F8:97 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5571E15FF5FBA2EDDC370A80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 13445 IP address blocks: 144.196.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e1:5f:f5:fb:a2:ed:dc:37:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=16f774c1-1f03-4f40-8a71-c8dde2712023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:37:bb:51:e5:f0:09:8b:f2:41:51:cf:45: e3:b8:5f:f1:a2:8f:23:29:c1:b0:cb:23:c9:e3:1d: 4f:3c:fb:fe:72:f4:37:89:ce:c9:46:47:c4:aa:77: e1:ae:19:62:38:d9:1c:2d:e3:f3:05:bd:b4:36:fa: ea:02:4d:c8:82:79:18:7c:ec:18:07:8c:8d:30:e1: 42:07:82:f4:6c:50:fc:85:ea:17:10:57:30:9a:33: 59:1f:db:2d:72:70:5a:05:38:ef:36:40:c2:92:ca: 37:65:60:8e:de:13:db:ab:86:fb:43:c2:aa:64:e6: 37:20:dc:9f:de:f7:02:8c:3a:42:bd:24:f6:95:73: b2:03:68:97:b4:d5:ac:6b:d9:84:14:f4:24:92:e0: 1c:4e:1f:27:a6:eb:a2:bb:32:da:1f:ae:88:eb:24: a8:4e:3f:a0:d7:70:93:13:34:1d:0d:5f:39:af:0b: 88:9d:82:a6:3d:2e:52:70:57:a4:44:83:61:ec:4a: d2:05:cc:25:f5:ac:97:79:e5:5e:f4:6b:85:b7:69: bf:77:a0:5d:8d:a3:ce:d1:fe:f8:1e:be:fa:55:28: 40:35:16:17:c0:34:2d:01:43:e1:aa:c4:5c:44:a9: 08:10:66:32:10:97:99:75:30:4b:b1:bb:4a:b5:92: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:90:10:65:D3:FB:56:60:F9:39:1C:15:D9:AF:60:1A:C0:22:F8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cad83b52-8daa-3b10-b0c0-60affecd3629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b0:f5:47:2d:3b:e9:49:33:9f:32:0b:26:6a:89:57:38:9a: 31:77:0a:0a:6c:ba:aa:a0:46:02:9f:cc:b2:45:59:68:fe:99: f1:b6:06:44:cc:37:44:03:fd:0e:d4:3e:c4:ed:a3:d5:6b:cf: f6:2e:25:d3:f4:4a:56:c8:dd:f1:59:7f:ab:31:73:71:5e:d5: cf:cf:6c:d8:da:61:1d:f8:4d:d8:76:7d:ef:4e:5f:1f:b7:58: aa:ef:d4:b0:98:bf:26:bf:fb:f3:73:86:6b:0d:7b:e0:ba:c2: 15:5d:65:73:2d:ad:f0:12:41:a6:d1:24:e7:37:8f:20:e1:6c: a5:a8:16:26:7d:0d:31:15:14:2f:d6:1b:02:64:2f:75:c2:35: 7d:33:ba:a0:14:8f:fe:c3:e2:ea:50:6c:f9:13:25:85:35:08: 50:0d:7d:45:e1:c3:92:92:07:c4:34:a6:8c:38:56:e4:ae:2f: ec:85:d3:9d:e0:03:40:a7:13:5f:6f:b8:d5:22:25:11:99:f5: c9:09:a6:07:c6:76:3d:8d:e5:0e:81:c0:4e:70:e2:e5:bc:a5: 1b:b0:6f:29:e8:0e:f2:db:9e:f9:37:e0:f7:22:9a:c2:7b:10: ea:d3:ad:b2:4b:20:b5:10:35:02:48:d3:f4:b3:d5:6a:16:e0: c7:46:bd:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceFf9fui7dw3CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MTZmNzc0YzEtMWYwMy00ZjQwLThhNzEtYzhkZGUyNzEyMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryA3u1Hl8AmL8kFRz0XjuF/xoo8jKcGwyyPJ 4x1PPPv+cvQ3ic7JRkfEqnfhrhliONkcLePzBb20NvrqAk3IgnkYfOwYB4yNMOFC B4L0bFD8heoXEFcwmjNZH9stcnBaBTjvNkDCkso3ZWCO3hPbq4b7Q8KqZOY3INyf 3vcCjDpCvST2lXOyA2iXtNWsa9mEFPQkkuAcTh8npuuiuzLaH66I6ySoTj+g13CT EzQdDV85rwuInYKmPS5ScFekRINh7ErSBcwl9ayXeeVe9GuFt2m/d6BdjaPO0f74 Hr76VShANRYXwDQtAUPhqsRcRKkIEGYyEJeZdTBLsbtKtZLIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiQEGXT+1Zg+TkcFdmvYBrAIviXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2FkODNiNTItOGRhYS0z YjEwLWIwYzAtNjBhZmZlY2QzNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6w9UctO+lJM58yCyZqiVc4mjF3CgpsuqqgRgKfzLJFWWj+mfG2BkTM N0QD/Q7UPsTto9Vrz/YuJdP0SlbI3fFZf6sxc3Fe1c/PbNjaYR34Tdh2fe9OXx+3 WKrv1LCYvya/+/NzhmsNe+C6whVdZXMtrfASQabRJOc3jyDhbKWoFiZ9DTEVFC/W GwJkL3XCNX0zuqAUj/7D4upQbPkTJYU1CFANfUXhw5KSB8Q0pow4VuSuL+yF053g A0CnE19vuNUiJRGZ9ckJpgfGdj2N5Q6BwE5w4uW8pRuwbynoDvLbnvk34PcimsJ7 EOrTrbJLILUQNQJI0/Sz1WoW4MdGvdc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:44:23 2025 by rpki-client