$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a0f2da57-8878-3284-b441-405e28e822c3.roa File: a0f2da57-8878-3284-b441-405e28e822c3.roa (raw, json) Hash identifier: LzD+2Kk9eQb40T9mwi1PlE9ddo15aqH2Yg2kPkb5kbY= Subject key identifier: 60:90:54:4C:14:71:D2:C8:E9:43:3C:66:B4:06:C2:2B:9F:8B:15:87 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584F27F2554A917F3F98614A5B80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a0f2da57-8878-3284-b441-405e28e822c3.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 13445 IP address blocks: 144.196.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:55:4a:91:7f:3f:98:61:4a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=2c9242da-a88e-426d-a9f1-aa568676c309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:04:a9:52:e3:8d:d8:60:09:bc:07:b4:da: cf:ef:f2:76:e9:12:af:a1:50:5f:f2:3e:ef:4b:07: 73:e5:79:6d:f3:f6:ef:01:fa:1a:f1:30:d5:dc:93: 06:e8:0c:86:a5:28:ed:bf:33:e6:a8:7c:6d:d0:c9: 73:9d:94:48:81:c1:bf:6f:5e:a2:6c:7b:c7:0f:65: b8:bf:02:0b:c6:db:be:74:d0:aa:aa:14:20:b1:91: df:a5:b1:fb:86:1e:88:b7:7d:c3:d0:87:f2:e7:d6: 32:9a:a9:8d:ff:1a:ec:cc:b5:00:9c:ee:b4:56:d4: 43:af:da:93:d3:09:d9:70:dc:09:09:bf:8b:fc:b8: 30:74:f8:c4:00:bb:d5:41:a7:4f:17:e7:3a:6c:38: 86:ce:cd:60:98:ee:16:aa:56:11:25:5a:9c:89:c7: 4f:bd:ce:ce:35:9e:a1:68:07:ca:6c:ce:0c:03:d0: 0a:6d:f8:2c:0a:8b:82:73:05:75:8f:e5:d7:b6:b6: 62:b0:f1:91:57:83:c9:33:92:35:9f:ab:dd:dc:3b: 63:b1:95:70:dd:c3:0a:ca:df:09:4a:d9:20:80:87: 04:a3:bd:a1:75:35:e4:c0:5c:c4:dc:4d:19:8c:c0: 0b:24:1f:79:a5:66:4b:78:cb:e0:d8:4b:14:e9:bc: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:90:54:4C:14:71:D2:C8:E9:43:3C:66:B4:06:C2:2B:9F:8B:15:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a0f2da57-8878-3284-b441-405e28e822c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:e8:c5:76:0d:6c:93:cc:a3:f0:66:f5:7c:aa:82:c2:7a:04: 8a:87:16:f9:be:d7:cd:df:4f:08:74:e1:f8:0d:b0:7e:f8:5d: ab:a8:bb:ae:69:9a:fb:ad:c0:91:f7:40:9a:b3:22:2a:99:50: b2:53:ea:01:ce:10:54:00:ae:ff:0d:ea:4f:5d:f1:bd:80:8a: d7:54:69:57:53:37:68:f9:4e:19:2e:1e:65:96:07:13:26:6e: 50:74:66:56:39:14:dc:8d:0d:08:f7:38:dd:b6:46:2e:e6:56: b6:7a:c3:95:46:ff:12:48:b6:ad:b3:ae:45:6d:14:a4:e8:84: a6:ae:a8:42:f9:a3:59:dc:9c:54:91:57:7e:67:c0:57:6a:b2: 65:aa:8f:99:5f:81:05:af:74:a5:98:6e:86:5b:3d:db:34:a3: a6:e4:54:05:40:1b:57:8d:c8:4f:e0:83:53:a4:4a:72:80:3e: 89:b9:dc:6a:ae:66:11:7d:36:19:bb:2e:60:5e:af:98:eb:da: 3d:61:b9:15:ac:d2:3a:2d:f8:60:cc:2d:df:e7:69:93:d8:f0: 95:c2:9f:bd:95:30:64:c6:d7:a7:1e:fa:05:3b:1c:54:77:4d: 20:e4:3c:41:53:f9:4f:13:31:28:56:9a:f8:cc:dd:13:59:73: a5:04:23:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lVKkX8/mGFKW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk MmM5MjQyZGEtYTg4ZS00MjZkLWE5ZjEtYWE1Njg2NzZjMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mkEqVLjjdhgCbwHtNrP7/J26RKvoVBf8j7v Swdz5Xlt8/bvAfoa8TDV3JMG6AyGpSjtvzPmqHxt0MlznZRIgcG/b16ibHvHD2W4 vwILxtu+dNCqqhQgsZHfpbH7hh6It33D0Ify59YymqmN/xrszLUAnO60VtRDr9qT 0wnZcNwJCb+L/LgwdPjEALvVQadPF+c6bDiGzs1gmO4WqlYRJVqcicdPvc7ONZ6h aAfKbM4MA9AKbfgsCouCcwV1j+XXtrZisPGRV4PJM5I1n6vd3DtjsZVw3cMKyt8J StkggIcEo72hdTXkwFzE3E0ZjMALJB95pWZLeMvg2EsU6bygZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCQVEwUcdLI6UM8ZrQGwiufixWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYTBmMmRhNTctODg3OC0z Mjg0LWI0NDEtNDA1ZTI4ZTgyMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkMSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzoxXYNbJPMo/Bm9XyqgsJ6BIqHFvm+183fTwh04fgNsH74Xauou65p mvutwJH3QJqzIiqZULJT6gHOEFQArv8N6k9d8b2AitdUaVdTN2j5ThkuHmWWBxMm blB0ZlY5FNyNDQj3ON22Ri7mVrZ6w5VG/xJItq2zrkVtFKTohKauqEL5o1ncnFSR V35nwFdqsmWqj5lfgQWvdKWYboZbPds0o6bkVAVAG1eNyE/gg1OkSnKAPom53Gqu ZhF9Nhm7LmBer5jr2j1huRWs0jot+GDMLd/naZPY8JXCn72VMGTG16ce+gU7HFR3 TSDkPEFT+U8TMShWmvjM3RNZc6UEI7w= -----END CERTIFICATE-----Generated at Tue Sep 22 00:23:28 2026 by rpki-client