$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa File: cb2ce5ed-adbf-3c27-8560-b115662f08da.roa (raw, json) Hash identifier: P5RrNmX7vhhrFhAAmDSe83gHYyAatFzGhwfwP34zHlk= Subject key identifier: A4:F0:CD:8C:DC:AF:E8:F9:5B:2B:E4:64:6E:4E:1F:0E:2E:7F:C6:B7 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584E4129DBCDD8AF6F85DD66A500 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 13445 IP address blocks: 173.243.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:db:cd:d8:af:6f:85:dd:66:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=d6b861d8-96c2-4078-b8a9-06b3b7c0195c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:bb:e3:97:38:d1:af:80:c9:25:48:c7:d4: 03:66:7d:aa:35:1e:2c:92:96:4e:c4:89:d5:1e:82: 69:36:62:8e:92:f4:a1:c6:60:81:ac:7d:36:68:1b: 33:45:0a:57:fd:d4:5e:59:ad:0b:ba:6c:c5:3d:c1: b9:1e:0b:2e:2a:71:eb:1c:b5:18:a0:6d:69:2b:30: 12:7b:b4:f6:e9:90:bc:31:8c:d9:99:a8:d0:c7:c3: 3e:c8:dd:b9:ad:da:bd:bd:2a:e9:97:07:a6:7c:1e: 6f:40:8e:33:c6:67:09:97:56:96:be:17:a4:01:66: e8:9d:bc:1b:36:9d:ce:1c:16:fe:a1:27:0a:b8:ce: e5:c6:c3:3f:8f:3c:1d:93:35:ab:9b:8d:da:5e:a1: 33:0a:71:68:f8:fe:9c:8f:22:ee:07:c9:1f:ba:aa: 1f:cf:02:a0:11:9a:40:51:66:43:31:44:35:29:3f: 32:85:c8:9f:38:1b:fb:7d:0e:5c:ca:8c:e9:00:77: 1c:d1:a7:02:df:83:0f:1b:d4:64:50:e5:90:d1:e6: f8:6d:be:07:8c:90:13:8d:7d:d2:2e:5f:89:c2:4d: 9a:3e:e7:da:be:53:84:2a:16:da:ce:f2:2d:8c:40: 98:0a:01:0a:32:6b:b8:b8:79:98:cc:c1:27:0c:2c: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:CD:8C:DC:AF:E8:F9:5B:2B:E4:64:6E:4E:1F:0E:2E:7F:C6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 173.243.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ff:6a:5b:d2:12:f0:1e:f6:8f:c2:c0:c2:0e:26:41:32:f2: fd:80:eb:49:0d:8d:ea:6e:1e:d9:ab:a4:2b:28:87:0b:16:56: a6:69:de:12:4a:5a:0c:8f:2a:0f:56:30:33:ec:d6:dd:7f:64: 74:69:e9:a1:32:bb:3e:50:9f:21:db:6e:92:5b:00:20:1b:ff: fe:1e:74:00:2a:f1:60:5f:9e:f9:cd:9e:f0:78:5c:eb:a8:c6: f7:65:81:14:a9:35:53:fb:53:84:e7:73:93:13:60:c4:de:7f: 56:86:d8:49:3f:a4:2e:93:cc:4b:5a:35:c5:84:2b:4e:4a:55: 89:16:bf:e6:22:97:89:e3:72:2d:b5:2f:88:b6:5d:57:dd:94: 8d:d0:cf:28:76:3e:46:78:19:20:cd:7f:58:5e:05:b9:74:2c: 45:15:b2:7a:02:84:b8:50:8e:eb:be:1d:3a:42:42:90:76:7d: 22:ee:a8:79:4e:04:47:90:ec:30:07:87:51:24:a6:ec:56:ff: f4:9c:25:f2:fb:81:87:00:a1:89:51:7b:41:5f:62:5b:79:96: 4e:10:90:88:64:f6:e7:d9:14:23:ba:c5:4a:d5:e2:55:38:97: f0:46:ac:d9:20:79:7e:06:ee:2f:d7:ed:84:83:01:fe:cb:de: 48:cd:b6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdvN2K9vhd1mpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDZiODYxZDgtOTZjMi00MDc4LWI4YTktMDZiM2I3YzAxOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY2745c40a+AySVIx9QDZn2qNR4skpZOxInV HoJpNmKOkvShxmCBrH02aBszRQpX/dReWa0LumzFPcG5HgsuKnHrHLUYoG1pKzAS e7T26ZC8MYzZmajQx8M+yN25rdq9vSrplwemfB5vQI4zxmcJl1aWvhekAWbonbwb Np3OHBb+oScKuM7lxsM/jzwdkzWrm43aXqEzCnFo+P6cjyLuB8kfuqofzwKgEZpA UWZDMUQ1KT8yhcifOBv7fQ5cyozpAHcc0acC34MPG9RkUOWQ0eb4bb4HjJATjX3S Ll+Jwk2aPufavlOEKhbazvItjECYCgEKMmu4uHmYzMEnDCzeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTwzYzcr+j5WyvkZG5OHw4uf8a3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2IyY2U1ZWQtYWRiZi0z YzI3LTg1NjAtYjExNTY2MmYwOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL/alvSEvAe9o/CwMIOJkEy8v2A60kNjepuHtmrpCsohwsWVqZp3hJK WgyPKg9WMDPs1t1/ZHRp6aEyuz5QnyHbbpJbACAb//4edAAq8WBfnvnNnvB4XOuo xvdlgRSpNVP7U4Tnc5MTYMTef1aG2Ek/pC6TzEtaNcWEK05KVYkWv+Yil4njci21 L4i2XVfdlI3Qzyh2PkZ4GSDNf1heBbl0LEUVsnoChLhQjuu+HTpCQpB2fSLuqHlO BEeQ7DAHh1EkpuxW//ScJfL7gYcAoYlRe0FfYlt5lk4QkIhk9ufZFCO6xUrV4lU4 l/BGrNkgeX4G7i/X7YSDAf7L3kjNtgM= -----END CERTIFICATE-----Generated at Mon Jul 6 22:14:35 2026 by rpki-client