$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/65fa0acc-d880-3586-950a-8cfb985ddf75.roa File: 65fa0acc-d880-3586-950a-8cfb985ddf75.roa (raw, json) Hash identifier: FBTNdPF2eXqlBYrOtiTMkNQQw711evPrcjPbmNlR7wI= Subject key identifier: 5C:CC:26:87:43:4B:3E:98:D2:2E:AE:02:6C:89:2C:90:B9:73:E1:5C Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584EA794F0472D46F4D6A594F280 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/65fa0acc-d880-3586-950a-8cfb985ddf75.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13445 IP address blocks: 163.129.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:f0:47:2d:46:f4:d6:a5:94:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4792d27e-5465-48a2-a942-cf15af8d5720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:ca:ae:bb:2f:c8:b7:3f:77:af:b1:9d:e7: c5:5f:14:f5:32:15:0b:07:3a:0e:8c:d3:1c:a7:80: c4:72:28:a0:e8:0a:a9:e1:d0:55:4f:e4:31:2d:48: 0f:19:6b:47:fc:bb:2b:89:73:e0:bf:14:84:0c:b5: 29:3e:7b:e0:11:7c:35:5c:4f:e7:ef:a3:cb:3d:80: 57:32:38:c7:78:06:e5:ae:79:a9:1a:7a:cf:2f:59: 7e:e0:52:85:5b:28:f4:87:c1:90:a0:d5:93:db:8d: 7b:0c:df:c7:53:4f:5d:05:e1:cd:d4:17:32:ab:d4: 7b:b9:86:38:aa:0d:18:b7:df:11:71:8e:fe:a6:02: af:30:78:9c:c6:fe:0e:32:d8:01:35:62:87:bd:72: 76:92:a7:85:25:c6:c3:df:c7:a0:ee:73:c5:7a:be: ef:fa:4e:95:f0:fa:ca:19:ec:62:d8:f2:60:cb:71: 7c:c2:bc:5e:ed:af:67:2e:ac:00:99:f3:63:e4:d2: f5:db:ff:a3:5f:94:d1:a1:63:ed:65:81:1d:67:41: 29:62:91:3d:e8:27:e6:6c:1b:fe:1a:33:50:51:90: 31:46:85:e7:99:f2:25:77:cb:88:65:68:4f:b8:d5: 21:4e:1c:e4:79:d8:c2:24:f3:3d:f7:ec:dc:41:c7: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:26:87:43:4B:3E:98:D2:2E:AE:02:6C:89:2C:90:B9:73:E1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/65fa0acc-d880-3586-950a-8cfb985ddf75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 163.129.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5e:07:fa:80:b9:22:06:89:c1:a6:05:8b:89:16:91:78:1a: 4c:44:fb:06:4e:cb:aa:bd:77:ce:73:c7:52:6a:82:df:11:45: 07:74:1f:bb:39:cf:45:ba:8b:b3:81:64:2e:0a:6d:ec:d6:ce: 63:38:b3:b1:7c:19:ef:b6:d9:a6:b8:db:c6:29:31:1f:97:cd: 3b:7c:ae:42:3f:dd:8f:d3:c8:6b:9b:86:07:f3:c6:3d:19:d5: 54:a9:d2:15:a2:a2:1d:67:7e:c8:82:98:84:4b:40:a0:bd:25: 43:ab:c1:8d:58:9d:43:35:80:e2:d7:59:3c:4b:57:33:4f:68: 75:60:3a:3a:c4:31:a0:2f:80:58:4c:8a:ff:9b:28:f8:6c:62: 02:fe:02:4c:cd:dc:0a:d0:93:1f:07:39:1a:fd:20:6f:b3:b4: 3b:4b:c8:1c:fe:22:67:40:f6:0c:18:19:0d:0b:08:30:c5:44: ba:9a:63:ab:69:b5:d6:4a:cc:14:35:77:e5:f5:18:25:75:04: c7:2b:58:d0:ed:33:cd:e2:79:c3:37:86:16:74:6e:d1:c7:98: 1d:51:15:aa:47:d5:9b:55:11:2f:5c:ea:7b:9a:5a:0c:85:d9: b5:db:d1:e6:af:7c:cd:4e:e6:3f:39:78:ca:ed:6f:04:ec:31: bc:2e:31:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlPBHLUb01qWU8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDc5MmQyN2UtNTQ2NS00OGEyLWE5NDItY2YxNWFmOGQ1NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOnKrrsvyLc/d6+xnefFXxT1MhULBzoOjNMc p4DEciig6Aqp4dBVT+QxLUgPGWtH/LsriXPgvxSEDLUpPnvgEXw1XE/n76PLPYBX MjjHeAblrnmpGnrPL1l+4FKFWyj0h8GQoNWT2417DN/HU09dBeHN1Bcyq9R7uYY4 qg0Yt98RcY7+pgKvMHicxv4OMtgBNWKHvXJ2kqeFJcbD38eg7nPFer7v+k6V8PrK Gexi2PJgy3F8wrxe7a9nLqwAmfNj5NL12/+jX5TRoWPtZYEdZ0EpYpE96CfmbBv+ GjNQUZAxRoXnmfIld8uIZWhPuNUhThzkedjCJPM99+zcQcfS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzMJodDSz6Y0i6uAmyJLJC5c+FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNjVmYTBhY2MtZDg4MC0z NTg2LTk1MGEtOGNmYjk4NWRkZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo4EkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5eB/qAuSIGicGmBYuJFpF4GkxE+wZOy6q9d85zx1Jqgt8RRQd0H7s5 z0W6i7OBZC4KbezWzmM4s7F8Ge+22aa428YpMR+XzTt8rkI/3Y/TyGubhgfzxj0Z 1VSp0hWioh1nfsiCmIRLQKC9JUOrwY1YnUM1gOLXWTxLVzNPaHVgOjrEMaAvgFhM iv+bKPhsYgL+AkzN3ArQkx8HORr9IG+ztDtLyBz+ImdA9gwYGQ0LCDDFRLqaY6tp tdZKzBQ1d+X1GCV1BMcrWNDtM83iecM3hhZ0btHHmB1RFapH1ZtVES9c6nuaWgyF 2bXb0eavfM1O5j85eMrtbwTsMbwuMRw= -----END CERTIFICATE-----Generated at Wed Jul 29 09:19:57 2026 by rpki-client