$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa File: f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa (raw, json) Hash identifier: mip7FRHE/a+4EY9fvYR9PJvkxJ7u2o6+aVcFsZrRJHI= Subject key identifier: 61:8C:36:2C:04:B0:5A:3B:A8:53:54:A2:AA:7B:29:82:3F:10:80:3D Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5571E18448922F6138C7B600 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 13445 IP address blocks: 144.196.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e1:84:48:92:2f:61:38:c7:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=48d638a7-c284-446f-98b9-50d127450480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:6e:7b:66:3b:c3:71:83:b0:b5:b6:08:48: f0:9a:56:28:c5:5c:71:14:62:ae:54:5d:e7:e6:4e: 16:4d:99:35:6f:21:ac:c1:5d:30:35:f9:db:b9:23: b2:29:9a:26:49:5f:7d:b7:bc:97:11:e7:00:36:0c: dd:bb:96:52:fb:c6:81:be:46:b4:13:bc:89:ea:4b: d3:86:a5:32:d7:87:0d:7f:2c:f0:a7:4c:af:3d:fc: 2e:2b:4c:f9:62:3b:2f:3c:0f:16:8a:22:e2:b3:a7: 60:2a:82:3b:5c:30:fb:25:4e:a8:b3:d6:d8:98:c1: c8:67:2c:47:78:d3:69:06:09:56:2a:4a:a6:06:06: 26:a1:1e:73:09:c7:0f:17:fd:15:21:d2:4a:fa:79: c7:0d:1d:19:40:2d:63:f3:17:3a:ce:37:34:8e:5c: 48:3a:71:97:12:4a:ef:da:90:ea:77:33:2e:da:47: 63:82:91:2b:eb:3c:f7:09:5e:16:8a:b2:43:87:bf: 59:97:23:6f:cd:04:09:7e:12:90:bc:10:12:2d:92: bf:9a:31:b4:55:23:aa:c9:47:35:60:58:7e:96:98: fa:f4:78:88:98:bd:58:d0:63:b1:ff:9e:72:57:76: fe:70:8b:27:46:8d:7d:17:0c:fc:53:c9:e3:84:7a: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:36:2C:04:B0:5A:3B:A8:53:54:A2:AA:7B:29:82:3F:10:80:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f42f85dc-2d7c-3187-b7da-59f7ba4956a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:6b:03:88:43:ad:71:84:a8:8b:9d:d1:c7:01:c1:a2:47:72: 8e:21:a0:02:8f:04:79:55:59:05:a9:84:96:1d:19:76:ae:4c: 52:66:37:d3:a1:27:b1:42:21:3b:84:26:ea:18:c5:e6:0c:ad: 71:54:45:9c:6a:c3:46:c5:b4:f0:e4:26:bd:1c:6d:de:69:c2: b6:a3:8e:6c:1c:07:5d:43:79:66:01:af:66:13:b5:93:29:5c: d0:c2:75:a2:3c:2d:05:fc:70:1b:f0:0c:d8:36:92:d6:bd:65: ff:47:5e:5f:f6:81:fc:ec:17:a2:7e:bf:3f:e6:31:c4:e7:e0: e6:97:79:ae:e2:bf:99:2b:3d:36:e6:6d:10:79:be:4b:2a:7b: 35:b7:40:8a:d3:a4:fc:bc:8a:0f:3a:6f:f1:83:db:4d:a8:34: f0:c0:85:a2:f8:75:06:1e:59:b7:ec:fa:3c:fb:cb:51:38:b9: 32:32:da:51:29:3c:ac:ac:89:3f:e1:55:fb:88:39:dd:57:74: ff:5d:fa:5b:8d:ea:33:4a:40:dd:4a:36:38:25:ea:d4:20:9c: f6:64:25:1c:bf:bc:5c:88:a6:f2:a5:4d:9a:13:6b:34:2d:f4: 48:1c:2d:a0:45:20:31:29:84:9e:64:43:6b:d5:12:1e:a7:73: c0:8a:e1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceGESJIvYTjHtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NDhkNjM4YTctYzI4NC00NDZmLTk4YjktNTBkMTI3NDUwNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwxue2Y7w3GDsLW2CEjwmlYoxVxxFGKuVF3n 5k4WTZk1byGswV0wNfnbuSOyKZomSV99t7yXEecANgzdu5ZS+8aBvka0E7yJ6kvT hqUy14cNfyzwp0yvPfwuK0z5YjsvPA8WiiLis6dgKoI7XDD7JU6os9bYmMHIZyxH eNNpBglWKkqmBgYmoR5zCccPF/0VIdJK+nnHDR0ZQC1j8xc6zjc0jlxIOnGXEkrv 2pDqdzMu2kdjgpEr6zz3CV4WirJDh79ZlyNvzQQJfhKQvBASLZK/mjG0VSOqyUc1 YFh+lpj69HiImL1Y0GOx/55yV3b+cIsnRo19Fwz8U8njhHqK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGMNiwEsFo7qFNUoqp7KYI/EIA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjQyZjg1ZGMtMmQ3Yy0z MTg3LWI3ZGEtNTlmN2JhNDk1NmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN1rA4hDrXGEqIud0ccBwaJHco4hoAKPBHlVWQWphJYdGXauTFJmN9Oh J7FCITuEJuoYxeYMrXFURZxqw0bFtPDkJr0cbd5pwrajjmwcB11DeWYBr2YTtZMp XNDCdaI8LQX8cBvwDNg2kta9Zf9HXl/2gfzsF6J+vz/mMcTn4OaXea7iv5krPTbm bRB5vksqezW3QIrTpPy8ig86b/GD202oNPDAhaL4dQYeWbfs+jz7y1E4uTIy2lEp PKysiT/hVfuIOd1XdP9d+luN6jNKQN1KNjgl6tQgnPZkJRy/vFyIpvKlTZoTazQt 9EgcLaBFIDEphJ5kQ2vVEh6nc8CK4Y8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:50 2025 by rpki-client