$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2df693e4-ec67-368d-82a5-64d44857b0d3.roa File: 2df693e4-ec67-368d-82a5-64d44857b0d3.roa (raw, json) Hash identifier: RfbrPM1zOfM6oYwOvbZX5Ibt/en05DAMmNyC0sbDUUM= Subject key identifier: 34:B2:43:7E:B6:72:39:A1:2F:48:93:65:1F:B7:97:2E:BF:D6:3D:46 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584AF5214598C5FE5057541D3100 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2df693e4-ec67-368d-82a5-64d44857b0d3.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 198949 IP address blocks: 163.129.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:45:98:c5:fe:50:57:54:1d:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=68e2a1de-2b6d-4d65-885d-f31816a1ee2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:67:f0:90:b5:e9:e1:7f:1b:31:e4:42:9c: d4:4a:3c:73:76:72:6c:ad:86:64:30:0d:64:61:0e: 60:ce:3f:81:04:a9:6f:6f:96:6c:9c:65:0c:1f:d9: 76:c7:ba:c6:6c:b8:f9:cc:cc:4a:f1:a4:47:9e:3e: c2:a3:1f:1d:4b:e1:a8:24:95:59:2a:fe:ef:24:87: ba:eb:02:65:3c:a0:84:ce:22:00:ab:7b:d0:99:35: 49:9a:89:9c:b7:3c:ac:76:4a:c0:01:83:05:6f:ad: 11:a4:23:53:43:fe:ab:f5:6a:16:28:b6:f7:2a:09: f0:cf:83:62:c0:c3:8b:b7:0a:a7:ad:17:02:2c:5c: e0:73:46:47:35:2b:0a:63:02:5a:1c:0d:6f:30:a5: 55:7f:87:28:f4:2d:41:ed:f8:4b:38:8f:34:69:bb: 78:e1:6f:5d:1c:43:06:c8:84:2b:0c:da:a8:a2:01: 2e:c6:d7:30:67:ab:6f:2f:30:89:1a:3f:e8:c0:cd: d3:81:75:5d:74:a9:c4:aa:21:4b:bf:2b:1d:03:c8: f7:d6:e6:5b:04:73:ab:25:04:ee:97:0f:67:61:43: d5:91:4e:77:53:78:a2:2a:c9:cc:b3:8a:53:5d:a4: 27:a9:ce:9c:5c:d4:ef:5d:d3:ef:72:70:34:36:d1: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B2:43:7E:B6:72:39:A1:2F:48:93:65:1F:B7:97:2E:BF:D6:3D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2df693e4-ec67-368d-82a5-64d44857b0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fc:75:6e:70:34:dc:67:74:d7:7c:4b:a3:49:7c:05:a7:79: 91:93:bd:ad:1f:44:7c:08:12:89:04:b0:2e:fe:4a:b5:e1:0b: 5a:0f:e6:01:8f:0f:e5:2d:9d:df:38:fe:f8:a9:dd:09:47:78: 2e:2f:b8:5f:0c:62:97:d4:af:47:d2:4f:57:08:3b:97:b5:16: 61:e5:73:e9:8b:21:ff:c2:32:b5:e1:7e:bf:61:0b:7d:18:1c: d8:61:33:28:60:53:35:8d:12:9d:3d:da:e6:ac:d7:0e:e9:fe: a3:64:d4:9b:cb:6f:4e:b0:60:97:11:f9:c8:ce:5a:a4:11:aa: 09:55:2d:74:c2:a2:bc:83:9e:74:1e:f6:9a:73:4d:9d:00:c4: c2:f5:41:6b:6b:88:2a:87:e7:92:0b:81:02:f1:14:92:ff:59: 73:68:3a:3e:b1:f9:9c:67:9a:55:1c:c7:23:27:4c:5e:5b:8e: 0e:ce:a4:2e:eb:24:4f:c7:10:d1:66:46:f0:8b:3d:26:e1:68: 45:64:2d:98:9e:7f:6e:4f:52:8f:85:98:5c:82:42:77:dd:39: 3a:99:59:fa:0a:d2:75:7d:ed:00:fb:66:44:bb:32:03:df:7a: 95:3a:df:93:0d:4c:17:31:82:be:9f:1e:cb:84:0b:7d:d5:14: 29:6b:7d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUWYxf5QV1QdMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjhlMmExZGUtMmI2ZC00ZDY1LTg4NWQtZjMxODE2YTFlZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ftn8JC16eF/GzHkQpzUSjxzdnJsrYZkMA1k YQ5gzj+BBKlvb5ZsnGUMH9l2x7rGbLj5zMxK8aRHnj7Cox8dS+GoJJVZKv7vJIe6 6wJlPKCEziIAq3vQmTVJmomctzysdkrAAYMFb60RpCNTQ/6r9WoWKLb3Kgnwz4Ni wMOLtwqnrRcCLFzgc0ZHNSsKYwJaHA1vMKVVf4co9C1B7fhLOI80abt44W9dHEMG yIQrDNqoogEuxtcwZ6tvLzCJGj/owM3TgXVddKnEqiFLvysdA8j31uZbBHOrJQTu lw9nYUPVkU53U3iiKsnMs4pTXaQnqc6cXNTvXdPvcnA0NtHZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSyQ362cjmhL0iTZR+3ly6/1j1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMmRmNjkzZTQtZWM2Ny0z NjhkLTgyYTUtNjRkNDQ4NTdiMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHo4EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb8dW5wNNxndNd8S6NJfAWneZGTva0fRHwIEokEsC7+SrXhC1oP5gGP D+Utnd84/vip3QlHeC4vuF8MYpfUr0fST1cIO5e1FmHlc+mLIf/CMrXhfr9hC30Y HNhhMyhgUzWNEp092uas1w7p/qNk1JvLb06wYJcR+cjOWqQRqglVLXTCoryDnnQe 9ppzTZ0AxML1QWtriCqH55ILgQLxFJL/WXNoOj6x+ZxnmlUcxyMnTF5bjg7OpC7r JE/HENFmRvCLPSbhaEVkLZief25PUo+FmFyCQnfdOTqZWfoK0nV97QD7ZkS7MgPf epU635MNTBcxgr6fHsuEC33VFClrfbk= -----END CERTIFICATE-----Generated at Tue Aug 26 15:20:46 2025 by rpki-client