$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa File: 12f25d35-c636-31fa-a0b4-d96b47fb707f.roa (raw, json) Hash identifier: KUtyzKYuLfWSU3IdsrlNMoop8Cq8tQ0JBVml0Glgpww= Subject key identifier: 3E:DF:49:F7:52:B0:C5:5D:62:5B:ED:45:7E:17:C2:9B:04:9B:39:6A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BA0D260662DD868D11B3AD000 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 13445 IP address blocks: 170.133.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:60:66:2d:d8:68:d1:1b:3a:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a68f78b8-73e1-4526-9944-7c6b00c3d247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:f3:57:6d:6f:c1:35:83:48:df:45:0d:71: 33:83:7d:93:12:db:6e:81:aa:45:c1:0d:51:1c:42: a8:b8:2e:21:b9:14:ed:6f:4d:a9:46:a6:8f:f0:22: 2f:30:18:90:28:a4:d9:f8:58:45:a5:e0:27:37:7c: 44:51:83:fe:05:8b:98:f2:75:3b:dd:df:a7:fc:25: af:68:c4:1f:b7:b3:38:23:6e:13:bb:80:0b:53:12: 65:ff:81:b5:eb:85:e3:76:26:5b:6b:40:06:e8:9b: c2:b1:b3:da:10:1d:7b:62:1d:e0:c4:68:05:89:33: e6:49:57:e5:d9:a0:64:45:e3:69:c3:14:5d:c2:68: e0:4e:13:04:c8:d0:f0:87:d2:9e:60:23:29:29:a2: 1c:59:42:f8:65:ac:61:b5:3a:18:83:c2:3d:d1:fe: 22:43:4e:83:8e:ce:3d:66:a4:c4:b9:b6:c4:d2:b5: 09:79:c0:70:ef:40:4b:40:8d:90:16:37:ac:cd:47: 9f:0f:6e:12:10:08:26:1f:cd:f0:3d:80:07:79:09: ba:7b:77:a2:04:40:c3:fb:81:0f:56:2c:10:04:95: 7a:b5:6d:6a:94:0b:54:04:da:de:5e:11:2a:c2:f5: b0:2c:86:89:96:46:85:95:38:85:f4:fc:5c:2b:c5: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DF:49:F7:52:B0:C5:5D:62:5B:ED:45:7E:17:C2:9B:04:9B:39:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d4:a5:79:54:de:37:92:92:2c:5a:e0:3e:95:48:c0:a6:06: 52:ef:ae:3f:d1:4b:0d:72:52:22:c4:bf:52:5a:d8:b5:e0:5a: 85:94:91:0c:40:93:2c:cd:2c:14:7e:f3:db:ac:2f:e6:f0:87: d4:38:6b:14:4b:b1:56:c1:75:ac:7d:c1:3f:69:76:9b:c2:05: f0:c7:d6:56:73:e3:c1:01:76:20:ac:8d:fd:5d:01:4c:b3:c5: 07:ad:11:d2:43:25:55:53:f4:0f:fa:cf:cc:d3:6c:3f:66:16: 55:9f:3e:1d:30:79:66:7f:ea:ee:fe:5f:68:27:1c:d2:83:e2: c4:f4:d1:d9:84:f4:84:49:3b:c6:ec:d7:db:3f:b5:0b:6a:58: a3:06:14:4c:2c:66:4c:fb:91:35:51:1c:d8:f8:2b:d9:6b:c6: 7c:b5:02:7d:74:d6:7e:7b:20:6d:eb:f9:25:64:36:b4:2d:60: 27:71:c0:be:63:65:cb:24:1f:a0:4a:00:7d:5e:4b:54:21:bc: d6:0b:9f:a6:ad:41:86:f8:1c:87:ec:39:4d:b3:dc:61:7c:be: 97:ca:65:e1:33:1c:44:58:d1:cf:07:ba:6f:44:a0:13:df:fc: bd:79:8f:4f:ad:e0:4a:39:04:19:74:54:7c:b2:a7:ad:d2:07: d3:0e:1f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mBmLdho0Rs60AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTY4Zjc4YjgtNzNlMS00NTI2LTk5NDQtN2M2YjAwYzNkMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qbzV21vwTWDSN9FDXEzg32TEttugapFwQ1R HEKouC4huRTtb02pRqaP8CIvMBiQKKTZ+FhFpeAnN3xEUYP+BYuY8nU73d+n/CWv aMQft7M4I24Tu4ALUxJl/4G164XjdiZba0AG6JvCsbPaEB17Yh3gxGgFiTPmSVfl 2aBkReNpwxRdwmjgThMEyNDwh9KeYCMpKaIcWUL4ZaxhtToYg8I90f4iQ06Djs49 ZqTEubbE0rUJecBw70BLQI2QFjeszUefD24SEAgmH83wPYAHeQm6e3eiBEDD+4EP ViwQBJV6tW1qlAtUBNreXhEqwvWwLIaJlkaFlTiF9PxcK8WQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7fSfdSsMVdYlvtRX4XwpsEmzlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMTJmMjVkMzUtYzYzNi0z MWZhLWEwYjQtZDk2YjQ3ZmI3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITUpXlU3jeSkixa4D6VSMCmBlLvrj/RSw1yUiLEv1Ja2LXgWoWUkQxA kyzNLBR+89usL+bwh9Q4axRLsVbBdax9wT9pdpvCBfDH1lZz48EBdiCsjf1dAUyz xQetEdJDJVVT9A/6z8zTbD9mFlWfPh0weWZ/6u7+X2gnHNKD4sT00dmE9IRJO8bs 19s/tQtqWKMGFEwsZkz7kTVRHNj4K9lrxny1An101n57IG3r+SVkNrQtYCdxwL5j ZcskH6BKAH1eS1QhvNYLn6atQYb4HIfsOU2z3GF8vpfKZeEzHERY0c8Hum9EoBPf /L15j0+t4Eo5BBl0VHyyp63SB9MOH4s= -----END CERTIFICATE-----Generated at Wed Nov 5 07:57:00 2025 by rpki-client