$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa File: ab844670-ed3c-32c6-85dc-3ed39dee509e.roa (raw, json) Hash identifier: qw3e6NQZXNIoQDqTe7arytII4xdgs3ay4ga8UEXJQXE= Subject key identifier: C5:1F:28:65:44:72:C0:17:1E:4F:9B:AA:31:1E:64:52:74:36:8A:90 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584EA79A3428CC4214E196E33C78 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13445 IP address blocks: 144.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:34:28:cc:42:14:e1:96:e3:3c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ef12e8da-6fd0-4e92-a0f8-08cc4c57ed42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:e6:25:ba:69:e4:c6:5b:a9:31:37:8c:a1: e2:62:73:7e:6d:18:81:ba:46:f0:60:97:07:a2:f7: 97:2d:de:2e:bc:78:9e:20:9c:e3:f1:3f:bd:d4:79: d3:e6:19:4b:ea:66:71:62:d5:03:32:08:62:06:b9: 44:72:fe:f2:67:45:94:bd:d0:0b:69:14:5a:cc:c6: 2f:b4:f6:e0:63:d7:0b:f6:5e:f7:a6:26:0e:8e:fc: ed:1e:5c:03:b1:b3:18:95:a4:52:54:12:dc:9f:fb: a9:1f:d8:a8:14:66:44:1a:31:89:41:e5:c2:29:32: 9c:28:ff:1f:55:1b:dd:c7:27:04:93:56:5a:23:19: 0a:e2:8e:a5:f3:1c:72:94:fe:70:48:16:c1:1b:a3: 6d:94:11:05:6c:53:c1:6d:dc:7a:9e:18:31:7c:40: 24:38:be:12:44:dc:0c:49:61:07:fe:9f:83:7b:c1: cd:cf:43:f4:40:38:28:5b:b8:62:4a:81:fd:88:62: c9:32:01:56:a2:7b:3b:2e:6d:48:48:2c:2c:82:06: b1:09:15:18:47:ba:fb:45:f3:f3:5c:a5:3b:3b:1b: 10:07:0f:b2:9e:0f:fb:88:2b:34:df:74:f5:4c:48: 88:07:26:e3:8e:39:c7:47:06:11:d5:1c:c5:89:af: b4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:28:65:44:72:C0:17:1E:4F:9B:AA:31:1E:64:52:74:36:8A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:99:56:e2:d3:60:84:9d:63:c8:76:88:fd:33:54:ac:bd:73: f7:57:21:2d:5b:de:e7:da:95:6a:49:87:9a:5a:54:80:6d:3e: 26:f1:06:28:f4:6c:63:34:a4:ea:9f:c8:83:51:5e:17:36:ee: 65:12:f6:89:85:c8:a7:f7:8e:39:b9:36:86:cf:76:57:d2:d9: 5a:13:a2:94:f8:41:c9:9d:86:55:17:0a:36:b8:cf:87:6e:07: 47:12:e0:b0:8d:86:72:12:b0:18:12:bb:22:bd:73:6d:44:c5: ab:0b:8b:fd:67:df:04:a4:17:c8:bd:39:53:90:1d:ef:26:64: 74:74:56:89:85:1e:d7:91:7a:e1:ab:b9:d9:c0:c8:9a:82:8a: 8b:2f:2f:0e:47:63:e4:8a:a7:31:5b:b0:c8:0f:08:d5:23:dd: 7a:93:32:77:43:3d:05:2f:13:8d:58:42:8d:23:de:4a:42:a7: 8c:83:e3:a2:8b:ba:00:f5:f7:20:13:68:67:33:dc:7b:84:61: 7f:32:92:2f:ca:70:8b:32:27:a3:6a:73:4a:4c:75:47:fd:c2: 6c:b1:1a:4a:78:13:ce:9b:c1:45:19:c9:3e:42:2f:13:29:2a: 24:11:66:01:06:e4:d6:22:1a:10:ca:d0:bb:d2:b4:7b:7c:d7: 7b:68:ae:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmjQozEIU4ZbjPHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWYxMmU4ZGEtNmZkMC00ZTkyLWEwZjgtMDhjYzRjNTdlZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmvmJbpp5MZbqTE3jKHiYnN+bRiBukbwYJcH oveXLd4uvHieIJzj8T+91HnT5hlL6mZxYtUDMghiBrlEcv7yZ0WUvdALaRRazMYv tPbgY9cL9l73piYOjvztHlwDsbMYlaRSVBLcn/upH9ioFGZEGjGJQeXCKTKcKP8f VRvdxycEk1ZaIxkK4o6l8xxylP5wSBbBG6NtlBEFbFPBbdx6nhgxfEAkOL4SRNwM SWEH/p+De8HNz0P0QDgoW7hiSoH9iGLJMgFWons7Lm1ISCwsggaxCRUYR7r7RfPz XKU7OxsQBw+yng/7iCs033T1TEiIBybjjjnHRwYR1RzFia+0QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUfKGVEcsAXHk+bqjEeZFJ0NoqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYWI4NDQ2NzAtZWQzYy0z MmM2LTg1ZGMtM2VkMzlkZWU1MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiZVuLTYISdY8h2iP0zVKy9c/dXIS1b3ufalWpJh5paVIBtPibxBij0 bGM0pOqfyINRXhc27mUS9omFyKf3jjm5NobPdlfS2VoTopT4QcmdhlUXCja4z4du B0cS4LCNhnISsBgSuyK9c21ExasLi/1n3wSkF8i9OVOQHe8mZHR0VomFHteReuGr udnAyJqCiosvLw5HY+SKpzFbsMgPCNUj3XqTMndDPQUvE41YQo0j3kpCp4yD46KL ugD19yATaGcz3HuEYX8yki/KcIsyJ6Nqc0pMdUf9wmyxGkp4E86bwUUZyT5CLxMp KiQRZgEG5NYiGhDK0LvStHt813torrM= -----END CERTIFICATE-----Generated at Sat Sep 12 14:24:19 2026 by rpki-client