$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa File: 574e841f-42ab-3391-8e83-8d72c3a905d3.roa (raw, json) Hash identifier: VkCzlPnARcF/54ImjuYrrX4hoykyfqRWFWLuUWEg1qQ= Subject key identifier: B4:D0:AD:9D:73:07:16:7A:59:01:6E:01:F4:BE:AF:93:61:26:80:A7 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BBB75982A28E62D6F27504280 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 163.129.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:98:2a:28:e6:2d:6f:27:50:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=34652758-5fa2-4a31-a896-53a4a19f0c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:48:20:bf:1a:0c:dd:b2:66:83:90:b1:64: 5f:b3:95:ef:9f:f3:d6:de:51:92:07:7f:1f:6e:d1: 08:15:bf:0d:0d:f7:ad:6b:94:73:6b:08:26:de:35: 34:2a:c8:05:c7:72:2e:15:d2:56:4c:b3:26:f7:94: ac:88:a8:5e:73:fd:94:77:f9:db:6a:a0:a5:35:57: 4b:7f:d1:8f:21:53:87:ba:08:78:e2:fa:1a:bd:61: 25:4a:d2:31:e0:68:2d:4e:ae:60:74:6a:2f:79:6f: 1a:cf:bb:2b:d0:95:bb:10:88:d5:12:57:86:72:21: f6:10:ad:4e:4d:35:81:c4:01:ba:d5:d0:48:1b:a7: 9f:81:40:f2:ad:02:97:64:e4:74:17:f9:c6:fd:22: 41:ae:e3:f2:c9:4d:7a:88:23:50:57:ea:d8:d6:bf: 63:c2:b4:f9:b1:3a:77:9f:bb:2d:8f:70:52:1a:49: e9:c6:1c:cd:80:15:a0:7b:78:eb:65:7c:32:f4:76: e6:91:81:8f:9e:db:18:96:a0:3a:1c:71:e5:d0:de: 58:82:02:86:8f:7d:b5:37:37:5f:d5:7d:c8:ab:df: aa:e3:73:ca:8f:85:d0:f9:b5:c2:a0:ca:83:d2:e8: cb:a7:c4:d3:e9:59:4d:92:f5:c6:07:bb:cd:1e:e7: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D0:AD:9D:73:07:16:7A:59:01:6E:01:F4:BE:AF:93:61:26:80:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:66:f2:0f:a4:02:5b:1c:84:0a:01:91:61:94:a0:b8:8a:59: 6b:8b:94:7b:3b:e8:d7:5c:e7:6a:56:c3:21:9f:a8:97:65:00: bf:41:57:f7:02:5b:6c:65:16:94:ef:f0:aa:7b:e5:30:6a:50: d4:60:d1:a3:71:48:34:09:91:4b:1d:0c:29:6e:fa:f2:b0:db: 1d:d7:b0:98:52:a6:91:f4:e4:16:37:22:c8:55:67:bb:9e:8f: 38:07:0c:ae:42:80:4d:a7:0e:cc:ee:15:48:a2:b1:98:68:93: 7b:99:98:01:70:00:f0:ea:6c:1f:ce:b8:79:b0:43:4d:84:fa: b6:00:62:66:52:c7:f3:0b:32:b9:be:58:4a:9e:da:08:fe:92: 6a:c9:b5:0a:d1:85:fd:e3:27:89:e8:cd:4d:00:52:8f:4d:e0: 6f:c3:b5:d1:4c:83:96:d1:40:4d:5e:15:6d:e0:a3:c8:a6:26: 26:75:33:f2:a6:b8:a7:fa:8a:f7:a6:8e:67:78:62:f8:a8:07: 35:27:3b:65:e9:43:de:7d:ea:92:86:78:c1:c3:3f:ce:a9:b8: df:b6:b7:14:53:c3:7a:e2:cd:72:b5:65:8b:69:d3:c7:4b:63: 5a:79:6b:a3:ef:21:9a:a7:23:f2:c0:29:70:7a:7d:c3:33:cc: b2:fb:22:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZgqKOYtbydQQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MzQ2NTI3NTgtNWZhMi00YTMxLWE4OTYtNTNhNGExOWYwYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oFIIL8aDN2yZoOQsWRfs5Xvn/PW3lGSB38f btEIFb8NDfeta5Rzawgm3jU0KsgFx3IuFdJWTLMm95SsiKhec/2Ud/nbaqClNVdL f9GPIVOHugh44voavWElStIx4GgtTq5gdGoveW8az7sr0JW7EIjVEleGciH2EK1O TTWBxAG61dBIG6efgUDyrQKXZOR0F/nG/SJBruPyyU16iCNQV+rY1r9jwrT5sTp3 n7stj3BSGknpxhzNgBWge3jrZXwy9HbmkYGPntsYlqA6HHHl0N5YggKGj321Nzdf 1X3Iq9+q43PKj4XQ+bXCoMqD0ujLp8TT6VlNkvXGB7vNHue2swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTQrZ1zBxZ6WQFuAfS+r5NhJoCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTc0ZTg0MWYtNDJhYi0z MzkxLThlODMtOGQ3MmMzYTkwNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEo4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFm8g+kAlschAoBkWGUoLiKWWuLlHs76Ndc52pWwyGfqJdlAL9BV/cC W2xlFpTv8Kp75TBqUNRg0aNxSDQJkUsdDClu+vKw2x3XsJhSppH05BY3IshVZ7ue jzgHDK5CgE2nDszuFUiisZhok3uZmAFwAPDqbB/OuHmwQ02E+rYAYmZSx/MLMrm+ WEqe2gj+kmrJtQrRhf3jJ4nozU0AUo9N4G/DtdFMg5bRQE1eFW3go8imJiZ1M/Km uKf6ivemjmd4YvioBzUnO2XpQ9596pKGeMHDP86puN+2txRTw3rizXK1ZYtp08dL Y1p5a6PvIZqnI/LAKXB6fcMzzLL7Irw= -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:37 2025 by rpki-client