$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa File: 5cf198cc-9135-342f-8d0b-2253ba576eac.roa (raw, json) Hash identifier: ofEbeE8iAtOpXPVsvfctvGvY6Djx75IxUZctd2B5sW4= Subject key identifier: 46:C0:CB:36:48:76:7B:55:26:CD:83:20:01:0D:4D:38:88:15:80:0E Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584D7CCFDBAE55016C7FFE291780 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 36692 IP address blocks: 163.129.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:db:ae:55:01:6c:7f:fe:29:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=d1d419f8-56ac-44f2-b877-4c3aac7c6ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:07:c1:74:b9:66:d3:56:a8:ad:31:51:7a: c6:76:56:c2:38:20:39:d2:0c:d6:0f:e1:c6:66:23: 72:f8:d8:4b:05:44:18:55:4f:27:b7:18:ad:b6:34: 72:6e:41:03:50:14:8b:35:df:95:fc:ab:66:72:37: 9c:60:8e:d0:a0:69:2d:5c:1d:cb:7e:10:0c:e6:6b: bb:98:d3:d9:6c:50:5b:e3:da:dc:9b:ab:3e:d0:cb: 49:ae:7f:71:4b:3e:03:ad:4b:fc:ff:e9:97:92:36: a1:39:e7:79:79:d2:55:11:8f:c3:cd:93:d2:51:b2: f1:b7:b1:30:2d:cb:8d:97:0a:f2:92:f4:8f:ee:a9: 02:8e:f6:ce:e9:b3:57:26:68:6f:87:4d:ef:17:52: 3f:6a:3a:a2:61:e2:dc:70:25:ae:ca:d1:13:c3:1b: fc:e1:f5:d9:cf:7d:ef:22:a9:b7:3e:36:79:4f:e0: c3:03:2c:cf:3b:62:85:6c:66:58:1e:b3:24:e5:4f: 46:6b:d2:88:0d:eb:5c:48:7a:1f:bc:eb:f5:99:81: 0d:28:6e:77:4b:9b:12:0d:0a:6e:d2:db:65:02:41: 6a:3b:71:63:75:52:b2:09:80:05:bb:89:d7:86:be: f4:87:3f:03:41:4c:2e:1e:a3:a1:10:35:26:2a:16: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C0:CB:36:48:76:7B:55:26:CD:83:20:01:0D:4D:38:88:15:80:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:50:30:59:bf:c4:70:97:e2:a5:0a:f2:25:07:99:52:90:27: 74:43:d5:e8:02:5d:21:84:a2:3c:3d:10:e4:87:99:71:c0:d6: cf:1d:49:b9:71:45:99:c2:e8:81:8f:28:d6:c4:d0:af:9d:0f: a7:a9:da:53:94:1d:db:d2:8a:c5:e7:6e:f3:fd:49:5f:99:c8: 22:32:73:e1:d7:3e:11:98:db:e4:f3:45:b4:7c:dc:1e:93:3a: 1b:e0:97:e4:6c:7c:97:a9:c8:48:f0:ca:de:55:ed:fd:48:f0: 36:cb:dd:91:6a:be:2e:33:34:ac:65:85:47:f6:d9:c0:65:02: b0:ec:6a:9e:e5:be:f5:aa:b2:c4:11:fb:da:fd:e5:0f:fc:be: ad:1f:51:f6:72:e0:c6:4c:fe:ec:43:f7:0d:82:72:55:1a:91: 1a:17:21:ec:fd:ee:6c:34:2a:c0:26:ae:10:28:ff:bf:dc:c8: 50:2f:b2:87:ba:e7:18:63:d6:5a:c7:fa:08:10:22:5a:d4:6f: ed:c2:b2:0b:ba:8e:93:4c:ff:8a:2b:40:f6:82:7d:da:2f:b5: 4e:8d:4b:70:46:f5:a4:58:7d:0e:9f:19:26:18:b4:9b:16:23: 0f:fe:45:49:7a:89:c0:08:a7:e4:49:bf:5d:80:28:23:d8:ee: 01:47:8e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9uuVQFsf/4pF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZDFkNDE5ZjgtNTZhYy00NGYyLWI4NzctNGMzYWFjN2M2ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys8HwXS5ZtNWqK0xUXrGdlbCOCA50gzWD+HG ZiNy+NhLBUQYVU8ntxittjRybkEDUBSLNd+V/KtmcjecYI7QoGktXB3LfhAM5mu7 mNPZbFBb49rcm6s+0MtJrn9xSz4DrUv8/+mXkjahOed5edJVEY/DzZPSUbLxt7Ew LcuNlwrykvSP7qkCjvbO6bNXJmhvh03vF1I/ajqiYeLccCWuytETwxv84fXZz33v Iqm3PjZ5T+DDAyzPO2KFbGZYHrMk5U9Ga9KIDetcSHofvOv1mYENKG53S5sSDQpu 0ttlAkFqO3FjdVKyCYAFu4nXhr70hz8DQUwuHqOhEDUmKhYK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbAyzZIdntVJs2DIAENTTiIFYAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNWNmMTk4Y2MtOTEzNS0z NDJmLThkMGItMjI1M2JhNTc2ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJQMFm/xHCX4qUK8iUHmVKQJ3RD1egCXSGEojw9EOSHmXHA1s8dSblx RZnC6IGPKNbE0K+dD6ep2lOUHdvSisXnbvP9SV+ZyCIyc+HXPhGY2+TzRbR83B6T Ohvgl+RsfJepyEjwyt5V7f1I8DbL3ZFqvi4zNKxlhUf22cBlArDsap7lvvWqssQR +9r95Q/8vq0fUfZy4MZM/uxD9w2CclUakRoXIez97mw0KsAmrhAo/7/cyFAvsoe6 5xhj1lrH+ggQIlrUb+3Csgu6jpNM/4orQPaCfdovtU6NS3BG9aRYfQ6fGSYYtJsW Iw/+RUl6icAIp+RJv12AKCPY7gFHjqE= -----END CERTIFICATE-----Generated at Thu Apr 16 12:07:04 2026 by rpki-client