$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa File: cb2ce5ed-adbf-3c27-8560-b115662f08da.roa (raw, json) Hash identifier: 4yvj3qmd2TgLYszn71PwF/LnUfidT8R4iTj4gqOkTDw= Subject key identifier: 51:2C:55:D4:36:92:D2:DB:8E:FB:88:99:7A:97:ED:34:E7:C0:32:B7 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584EE38CA759A0DA172E5337CC00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 13445 IP address blocks: 173.243.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a7:59:a0:da:17:2e:53:37:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=1ea54ef2-3610-43e1-993a-7e39f7a9fc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:b2:fb:04:3f:dd:9c:aa:94:bd:d7:60:a6: ad:d2:c2:a2:96:b5:ae:51:b9:83:e0:d9:c1:1e:21: 92:04:4f:18:88:17:ee:80:37:c7:45:d5:43:72:71: 40:9c:7e:ce:4f:aa:05:b4:74:c3:42:ef:5e:18:60: 75:2f:23:52:1d:39:02:2c:40:c8:cd:91:60:96:be: 98:a4:f8:fa:dd:2c:4f:4d:64:7a:87:e1:d6:1a:cb: c7:c8:de:ee:8b:84:03:87:c1:eb:2b:11:23:b5:11: fc:35:3b:01:f2:1e:8a:0d:5b:67:cc:e5:58:aa:b8: f3:b8:e8:32:14:65:09:8e:c4:49:1b:66:ab:d7:d1: fa:d5:f2:09:28:be:f6:a5:9f:ff:7e:08:4d:21:53: c8:5d:f8:27:a1:3b:84:19:b5:70:4d:7c:ef:f3:ef: c0:1e:1c:7c:57:93:04:3d:35:d9:4f:58:a8:4d:e5: ed:91:8a:5a:3e:16:bc:a3:c6:7b:6f:65:4d:45:59: 5b:76:9b:30:59:1b:f4:c0:6a:10:50:28:fb:ff:bb: 51:62:37:18:d1:5f:30:e0:cb:47:99:2e:53:d6:69: 71:ff:99:92:9c:50:0f:a3:b9:3f:ee:a4:49:d0:1d: 27:4e:41:df:6c:9a:91:f2:bb:05:53:b0:3d:5f:b7: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:55:D4:36:92:D2:DB:8E:FB:88:99:7A:97:ED:34:E7:C0:32:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 173.243.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d9:7e:c7:89:54:b1:3b:78:3f:1f:bb:2e:3f:cb:c2:94:b3: 35:e1:bf:6e:de:2c:7e:f1:32:67:dc:6c:51:ce:1d:6c:c2:2e: f0:33:95:d8:b5:c6:57:7c:12:f2:de:7c:d2:ec:39:e8:65:37: b0:8f:57:82:37:31:77:70:16:64:ad:66:72:92:0d:53:97:29: 22:c0:4a:24:7a:4c:67:db:6e:f7:fb:ab:37:9a:d6:ff:8b:34: 00:6e:a6:cb:bc:52:4f:d5:75:ec:73:bf:bf:ba:15:6c:5a:13: 59:d4:39:34:7c:3d:a2:6f:4d:f6:51:7d:d4:d3:55:35:0d:31: 7d:e1:18:15:a7:c9:e2:54:ca:7c:4a:be:4c:96:ff:77:c0:fe: 0d:89:12:58:85:75:e3:a7:27:28:e0:a3:9f:14:89:43:dc:1a: 4c:dd:ed:bc:e8:5f:84:e5:31:7b:40:09:ef:60:4f:22:fc:75: f4:d1:b1:1d:ba:b9:f7:f1:ff:46:fa:e5:a2:38:ba:23:a3:a5: 68:e9:d4:2a:d5:3b:68:3f:22:b4:b6:a7:a1:d0:89:0e:ac:c0: 67:5d:53:b8:15:95:0f:f7:c6:1e:bf:cf:0d:30:02:fa:e2:9f: 33:1e:65:c6:ac:17:e1:46:56:91:a1:56:54:27:70:9f:b5:18: 73:01:a1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKdZoNoXLlM3zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MWVhNTRlZjItMzYxMC00M2UxLTk5M2EtN2UzOWY3YTlmYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA6y+wQ/3ZyqlL3XYKat0sKilrWuUbmD4NnB HiGSBE8YiBfugDfHRdVDcnFAnH7OT6oFtHTDQu9eGGB1LyNSHTkCLEDIzZFglr6Y pPj63SxPTWR6h+HWGsvHyN7ui4QDh8HrKxEjtRH8NTsB8h6KDVtnzOVYqrjzuOgy FGUJjsRJG2ar19H61fIJKL72pZ//fghNIVPIXfgnoTuEGbVwTXzv8+/AHhx8V5ME PTXZT1ioTeXtkYpaPha8o8Z7b2VNRVlbdpswWRv0wGoQUCj7/7tRYjcY0V8w4MtH mS5T1mlx/5mSnFAPo7k/7qRJ0B0nTkHfbJqR8rsFU7A9X7ftUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEsVdQ2ktLbjvuImXqX7TTnwDK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2IyY2U1ZWQtYWRiZi0z YzI3LTg1NjAtYjExNTY2MmYwOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvZfseJVLE7eD8fuy4/y8KUszXhv27eLH7xMmfcbFHOHWzCLvAzldi1 xld8EvLefNLsOehlN7CPV4I3MXdwFmStZnKSDVOXKSLASiR6TGfbbvf7qzea1v+L NABupsu8Uk/Vdexzv7+6FWxaE1nUOTR8PaJvTfZRfdTTVTUNMX3hGBWnyeJUynxK vkyW/3fA/g2JEliFdeOnJyjgo58UiUPcGkzd7bzoX4TlMXtACe9gTyL8dfTRsR26 uffx/0b65aI4uiOjpWjp1CrVO2g/IrS2p6HQiQ6swGddU7gVlQ/3xh6/zw0wAvri nzMeZcasF+FGVpGhVlQncJ+1GHMBoUQ= -----END CERTIFICATE-----Generated at Fri Aug 21 02:26:13 2026 by rpki-client