$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa File: 518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa (raw, json) Hash identifier: WbgbdyILWQCR0An45yWOBtizr7Kx8eDX8NBw6Z4R1pw= Subject key identifier: 60:30:13:31:D5:D7:B3:C2:CA:81:77:CB:BC:1B:0B:29:E4:A6:20:68 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5DD1E7854643A8A41748D6D0 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 13445 IP address blocks: 144.196.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e7:85:46:43:a8:a4:17:48:d6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=3dcc67db-8030-48de-96f4-4184f6c2d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:37:52:43:c9:ca:01:c4:2c:42:9c:9c:7a: b8:e9:6d:12:79:e6:94:ed:f3:23:08:35:2f:6f:05: 4b:87:c0:23:d3:a7:a9:86:f9:b6:c0:f4:ba:68:17: 26:82:df:8e:2a:fa:e4:15:a7:af:6d:2a:cc:77:9d: ad:1e:be:8d:d6:4a:c5:bb:d2:9b:70:78:cd:4c:54: e2:f6:a1:ca:52:4e:8e:e2:d7:b3:72:12:60:fe:c4: 5b:29:16:00:b9:f2:e6:98:16:39:56:01:66:eb:48: c2:27:c5:82:d2:ae:16:19:ea:5c:48:57:cb:7b:25: 8e:2d:0b:de:ca:e0:ad:41:23:4f:84:09:d7:6e:07: 62:52:40:be:ec:da:9a:d6:a7:38:af:4b:0c:e5:01: df:2c:ba:5b:72:78:f4:ed:aa:39:30:a7:df:9d:17: 56:82:7a:99:2b:e4:17:50:20:f9:81:8e:13:b4:e7: 23:db:71:58:c2:f5:fd:31:d5:b3:52:9d:07:2c:b2: 77:e9:51:4c:be:a6:79:1d:d2:22:ff:92:dd:a8:64: ae:48:ec:fe:b1:b1:3e:ed:e7:20:ed:1c:ed:aa:dc: 22:92:25:10:06:f1:e9:4c:52:e3:22:9e:9f:ba:ce: 62:d9:62:40:8b:b8:df:b2:af:6c:77:4f:ef:18:16: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:30:13:31:D5:D7:B3:C2:CA:81:77:CB:BC:1B:0B:29:E4:A6:20:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a6:e8:57:74:87:00:1b:e4:60:06:74:b4:2a:5e:51:e6:c2: b6:57:c4:ab:6f:e7:ce:c2:12:27:e9:bf:e1:40:af:88:4d:fa: b2:45:51:e8:e2:fb:66:6d:8b:57:61:66:1c:e8:2d:bc:59:91: 21:90:ef:61:d2:88:b4:f2:3e:33:08:41:3f:f5:2b:60:db:cd: 15:65:21:ac:ac:4a:e4:84:aa:f9:bc:f8:ca:20:e8:14:36:7f: 81:fc:d4:a6:4f:cc:2d:72:90:01:11:db:fb:40:ac:12:a2:42: 6e:7d:8c:38:cb:7d:36:b4:be:86:80:2e:7d:4a:53:b3:f7:57: 11:9e:1a:e1:ce:21:86:24:57:ed:ba:98:84:ec:a3:fc:91:b7: 90:08:77:8d:8e:60:4b:fe:de:d3:97:48:15:a6:cb:a5:72:94: 1f:31:0e:41:52:c1:c1:f7:19:82:64:dc:55:a9:db:c6:cd:d2: 21:6e:b8:b8:11:6c:5a:ec:86:a0:c5:f0:63:ba:ae:20:ce:a4: 13:6d:af:ce:f1:7d:1b:8f:fc:f1:62:92:5b:44:26:d6:6b:25: a9:71:c8:40:a6:6d:74:d4:3e:12:ca:bb:30:a2:65:3c:69:0c: cf:09:7f:cd:1c:d3:39:27:ad:94:38:b0:63:e1:5a:31:7c:c2: 0c:41:90:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eeFRkOopBdI1tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk M2RjYzY3ZGItODAzMC00OGRlLTk2ZjQtNDE4NGY2YzJkMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbI3UkPJygHELEKcnHq46W0SeeaU7fMjCDUv bwVLh8Aj06ephvm2wPS6aBcmgt+OKvrkFaevbSrMd52tHr6N1krFu9KbcHjNTFTi 9qHKUk6O4tezchJg/sRbKRYAufLmmBY5VgFm60jCJ8WC0q4WGepcSFfLeyWOLQve yuCtQSNPhAnXbgdiUkC+7Nqa1qc4r0sM5QHfLLpbcnj07ao5MKffnRdWgnqZK+QX UCD5gY4TtOcj23FYwvX9MdWzUp0HLLJ36VFMvqZ5HdIi/5LdqGSuSOz+sbE+7ecg 7RztqtwikiUQBvHpTFLjIp6fus5i2WJAi7jfsq9sd0/vGBZoqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAwEzHV17PCyoF3y7wbCynkpiBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTE4ZDFiMWItNmNlMC0z YWRjLWEwYjQtMWE1MjhkODIwYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHem6Fd0hwAb5GAGdLQqXlHmwrZXxKtv587CEifpv+FAr4hN+rJFUeji +2Zti1dhZhzoLbxZkSGQ72HSiLTyPjMIQT/1K2DbzRVlIaysSuSEqvm8+Mog6BQ2 f4H81KZPzC1ykAER2/tArBKiQm59jDjLfTa0voaALn1KU7P3VxGeGuHOIYYkV+26 mITso/yRt5AId42OYEv+3tOXSBWmy6VylB8xDkFSwcH3GYJk3FWp28bN0iFuuLgR bFrshqDF8GO6riDOpBNtr87xfRuP/PFikltEJtZrJalxyECmbXTUPhLKuzCiZTxp DM8Jf80c0zknrZQ4sGPhWjF8wgxBkJI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:54 2025 by rpki-client