$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ca3f6a5a-2857-3bef-8f93-ad3dcf13b28a.roa File: ca3f6a5a-2857-3bef-8f93-ad3dcf13b28a.roa (raw, json) Hash identifier: KThzsuDJGuQE36PgfJDe0T43go0GhdtAglIICvGWf38= Subject key identifier: 4E:2D:A7:AC:4F:9D:02:67:CE:06:15:4C:96:A2:3E:C3:51:CF:BF:8D Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584E4129DBD8AF1218616CD79A80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ca3f6a5a-2857-3bef-8f93-ad3dcf13b28a.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 13445 IP address blocks: 207.182.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:db:d8:af:12:18:61:6c:d7:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=8709ded0-3281-4f5a-a1b7-8b591a19533c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:30:60:ed:34:23:cf:3b:33:4d:a8:67:8e: 2e:a7:c1:4c:3b:55:85:e0:4b:c1:c9:5c:ac:35:a2: 38:7d:9a:bf:d8:eb:ad:5e:b8:cc:76:fe:d6:ae:6e: eb:fb:7f:4f:4d:5c:12:40:a3:1a:97:6f:85:6c:7b: 7a:b9:0b:c5:7c:bd:0c:2e:85:27:da:d9:27:d9:d8: d0:5f:41:41:5a:c4:3e:30:3f:c1:33:28:0b:38:02: 8a:2a:84:49:75:83:b0:85:8d:9a:60:a9:06:1e:dd: f3:36:c1:77:1c:8f:35:3d:3a:4a:30:ed:19:40:f9: 9f:7e:65:03:81:8e:27:f5:55:ff:89:14:86:7a:f2: 1b:4c:7e:b9:ed:60:72:36:62:19:30:8e:60:77:30: 56:82:a6:51:7a:f5:ef:02:9a:2e:68:20:0d:2b:7b: 12:23:69:58:ab:51:fb:f0:80:ad:06:fc:97:8e:5a: 74:c3:93:53:86:9c:bb:79:9a:84:37:c2:4b:91:be: ca:dc:3d:6d:15:a8:dc:f2:3b:9a:8c:87:86:75:02: 87:f4:1e:20:07:f3:f4:f5:58:22:66:23:8f:4d:ee: 50:e6:2e:8d:a5:c0:84:5a:4e:98:dd:b3:17:95:72: 70:8a:87:2b:d5:a6:c6:b7:aa:c8:27:db:55:e4:a3: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2D:A7:AC:4F:9D:02:67:CE:06:15:4C:96:A2:3E:C3:51:CF:BF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ca3f6a5a-2857-3bef-8f93-ad3dcf13b28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 207.182.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:39:f3:c7:da:32:32:54:48:9f:ec:d5:d8:58:48:14:b1:d1: 63:ea:27:3a:2f:ac:1d:4e:1b:93:3b:5a:51:95:3d:c5:06:22: c5:ce:12:63:06:2b:ad:f7:1a:62:aa:27:e8:28:2e:09:a2:47: 65:c3:bf:d6:05:b6:90:cb:a4:13:4a:ce:4f:a9:9d:a6:bb:0b: 36:5d:2b:87:a9:25:14:e0:06:bf:cd:27:a8:f0:16:a4:29:93: f5:03:8e:5b:7a:8f:f7:cf:7f:11:5e:a3:46:37:c3:41:94:a7: 74:58:33:e1:40:84:8c:df:a1:9d:d4:99:0b:2c:0e:9f:32:a5: 69:53:39:23:5d:dc:12:b0:f1:75:42:2c:54:70:49:81:bb:15: 0c:29:07:de:1a:d5:6f:bd:58:05:e5:7d:6e:a2:23:a8:7f:0b: ac:1b:68:c1:31:42:f2:8b:21:08:4d:62:24:98:dd:72:6a:db: 89:0d:9d:d9:f0:86:ce:16:ef:4c:61:f3:73:d8:46:cc:ef:9a: d6:2b:34:df:90:33:23:57:54:94:4d:c2:4d:8f:95:79:01:f8: fd:d7:7e:66:e6:95:ff:1e:1f:a1:4b:1b:10:86:0c:ad:1d:24: f0:2c:f5:6b:6e:fb:f6:f1:90:c5:55:e3:b4:b7:92:e0:96:c7: 23:bf:e7:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdvYrxIYYWzXmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ODcwOWRlZDAtMzI4MS00ZjVhLWExYjctOGI1OTFhMTk1MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4wwYO00I887M02oZ44up8FMO1WF4EvByVys NaI4fZq/2OutXrjMdv7Wrm7r+39PTVwSQKMal2+FbHt6uQvFfL0MLoUn2tkn2djQ X0FBWsQ+MD/BMygLOAKKKoRJdYOwhY2aYKkGHt3zNsF3HI81PTpKMO0ZQPmffmUD gY4n9VX/iRSGevIbTH657WByNmIZMI5gdzBWgqZRevXvApouaCANK3sSI2lYq1H7 8ICtBvyXjlp0w5NThpy7eZqEN8JLkb7K3D1tFajc8juajIeGdQKH9B4gB/P09Vgi ZiOPTe5Q5i6NpcCEWk6Y3bMXlXJwiocr1abGt6rIJ9tV5KMaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4tp6xPnQJnzgYVTJaiPsNRz7+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2EzZjZhNWEtMjg1Ny0z YmVmLThmOTMtYWQzZGNmMTNiMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz7agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE588faMjJUSJ/s1dhYSBSx0WPqJzovrB1OG5M7WlGVPcUGIsXOEmMG K633GmKqJ+goLgmiR2XDv9YFtpDLpBNKzk+pnaa7CzZdK4epJRTgBr/NJ6jwFqQp k/UDjlt6j/fPfxFeo0Y3w0GUp3RYM+FAhIzfoZ3UmQssDp8ypWlTOSNd3BKw8XVC LFRwSYG7FQwpB94a1W+9WAXlfW6iI6h/C6wbaMExQvKLIQhNYiSY3XJq24kNndnw hs4W70xh83PYRszvmtYrNN+QMyNXVJRNwk2PlXkB+P3Xfmbmlf8eH6FLGxCGDK0d JPAs9Wtu+/bxkMVV47S3kuCWxyO/5/Y= -----END CERTIFICATE-----Generated at Mon Jul 20 01:15:52 2026 by rpki-client