$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa File: ffa2ee7a-93af-3463-84fd-957901863756.roa (raw, json) Hash identifier: m0fYpIrfcUUrh1ptfatGM9tYXty21VyQaw32fiDsbgM= Subject key identifier: 12:B9:97:96:8C:E7:3E:D8:D3:A5:88:CD:6C:C5:D0:87:94:AA:8F:27 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584D60E508941D97049ABC525380 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 13445 IP address blocks: 209.197.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:08:94:1d:97:04:9a:bc:52:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=1bb6477b-aa67-4778-9e1d-f45b29da443a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:a8:09:0d:12:b6:7d:a4:e8:0a:47:b5:d7: 5c:57:aa:f0:62:bc:00:df:64:01:b7:19:66:c7:ce: 4e:f9:60:0d:2b:df:e5:83:04:ac:d2:7d:5e:2a:b8: 40:9e:6d:45:f0:12:5d:83:5c:25:a9:e5:ac:76:95: 02:a2:b9:23:10:16:0b:ba:b6:47:51:51:fc:20:21: 82:54:97:86:82:68:ec:46:4f:ec:1b:99:f8:58:10: c9:b0:5a:01:45:0b:f8:47:92:d2:cd:74:ca:34:5a: db:bc:39:11:98:a2:85:71:5d:da:e0:8b:30:a8:a0: 15:fc:9e:d9:58:9c:d6:05:9d:97:72:b0:f5:75:95: c8:20:4b:7c:27:51:ea:95:44:76:9b:7c:44:14:a8: f0:a9:61:ce:4a:bc:1c:d4:10:70:9e:66:70:c4:f4: 2e:b3:7c:41:f9:7e:ee:57:4c:02:4f:c2:d2:fa:28: c0:1c:d7:a8:2f:4a:69:b5:8d:70:8f:cf:fd:cb:2e: f1:e5:7a:b2:df:fb:bc:db:88:18:86:9d:cc:21:df: 58:6c:12:27:e0:06:85:1f:55:aa:95:7c:da:d3:34: ef:ab:c1:e5:1b:ed:c5:d5:90:e4:2b:38:17:dd:b0: e7:10:2b:97:cf:62:bf:45:13:65:05:22:7f:cc:32: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:97:96:8C:E7:3E:D8:D3:A5:88:CD:6C:C5:D0:87:94:AA:8F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 209.197.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cf:36:f8:9f:49:f4:d5:e8:5a:6b:21:e9:37:8f:45:7a:bc: 36:6c:0f:76:95:f5:67:b7:35:c0:44:13:8b:e0:f1:9d:86:c0: 01:21:65:85:12:38:c6:5c:9d:a8:23:ef:ba:00:94:38:2e:18: 33:c6:2c:1e:93:1c:e1:12:20:56:d2:03:f3:57:5a:1c:96:bf: 69:7f:04:e4:6a:65:a5:c3:cf:ff:54:a2:6d:41:31:89:06:a1: 3b:20:8c:d7:2e:ee:a6:37:2e:53:84:ff:d5:c1:70:1f:d9:07: e9:0d:7e:2d:6f:9e:af:a2:03:45:cb:38:5f:0c:b0:1f:69:4d: a2:4e:d3:bd:61:15:38:66:2f:a7:c3:11:37:1e:1d:32:9a:d9: 38:12:f4:50:ee:05:5d:94:60:c0:38:a8:2e:83:b8:c4:dd:cc: 6a:f1:4b:f2:6c:d5:43:12:16:53:91:ab:43:20:9b:01:ed:5c: ec:28:84:b7:37:ed:1d:9a:89:8d:49:17:13:4d:3e:ea:5b:92: bf:18:4b:e5:52:f2:a7:6e:97:b0:72:88:bb:04:b5:9b:bb:2a: e0:8a:66:1d:33:3c:2d:18:c5:f5:04:a2:c7:a9:1a:41:c9:78: ee:19:15:24:e3:4d:29:20:ac:db:ce:84:6f:49:44:64:56:33: 7a:a5:db:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QiUHZcEmrxSU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MWJiNjQ3N2ItYWE2Ny00Nzc4LTllMWQtZjQ1YjI5ZGE0NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOaoCQ0Stn2k6ApHtddcV6rwYrwA32QBtxlm x85O+WANK9/lgwSs0n1eKrhAnm1F8BJdg1wlqeWsdpUCorkjEBYLurZHUVH8ICGC VJeGgmjsRk/sG5n4WBDJsFoBRQv4R5LSzXTKNFrbvDkRmKKFcV3a4IswqKAV/J7Z WJzWBZ2XcrD1dZXIIEt8J1HqlUR2m3xEFKjwqWHOSrwc1BBwnmZwxPQus3xB+X7u V0wCT8LS+ijAHNeoL0pptY1wj8/9yy7x5Xqy3/u824gYhp3MId9YbBIn4AaFH1Wq lXza0zTvq8HlG+3F1ZDkKzgX3bDnECuXz2K/RRNlBSJ/zDI8UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK5l5aM5z7Y06WIzWzF0IeUqo8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmZhMmVlN2EtOTNhZi0z NDYzLTg0ZmQtOTU3OTAxODYzNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0cXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALPNvifSfTV6FprIek3j0V6vDZsD3aV9We3NcBEE4vg8Z2GwAEhZYUS OMZcnagj77oAlDguGDPGLB6THOESIFbSA/NXWhyWv2l/BORqZaXDz/9Uom1BMYkG oTsgjNcu7qY3LlOE/9XBcB/ZB+kNfi1vnq+iA0XLOF8MsB9pTaJO071hFThmL6fD ETceHTKa2TgS9FDuBV2UYMA4qC6DuMTdzGrxS/Js1UMSFlORq0MgmwHtXOwohLc3 7R2aiY1JFxNNPupbkr8YS+VS8qdul7ByiLsEtZu7KuCKZh0zPC0YxfUEosepGkHJ eO4ZFSTjTSkgrNvOhG9JRGRWM3ql29c= -----END CERTIFICATE-----Generated at Thu Apr 16 12:10:52 2026 by rpki-client