$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa File: b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa (raw, json) Hash identifier: EiGtnaEIXuJJ6EzuojNxxV5C2j3uJ+YrVZioe1PEFPY= Subject key identifier: A9:4B:89:0B:DD:62:FC:F2:60:52:5E:84:8C:37:0C:B0:43:27:DF:F2 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5DD1E2856680EDDA2B63C200 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 13445 IP address blocks: 144.196.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e2:85:66:80:ed:da:2b:63:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=9cd483bc-a979-417f-8b5e-6164e7b8d53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:c2:3e:83:e2:b6:ec:6d:d3:7d:6e:85:5a: 9a:fd:4b:c7:b7:33:99:20:8c:64:7e:5e:4f:c3:f6: 83:23:5b:39:e0:40:72:a9:c9:b1:b2:de:c4:43:54: f6:6c:44:ef:66:37:65:4d:0a:af:36:58:33:82:c4: 1e:75:0f:90:ff:1c:57:50:0f:7a:9a:a8:49:6a:2e: 12:c8:56:ff:e1:5a:46:eb:41:08:a9:20:8c:af:b2: d7:26:77:fd:76:7a:84:c6:49:07:4c:35:70:1e:6d: 28:19:0b:62:e2:f4:b2:f2:7c:da:60:64:d4:3a:b3: 32:56:dc:23:23:3f:29:07:7f:45:e7:a4:7c:a4:36: 18:97:3e:33:bc:ec:7d:0b:da:44:94:b2:e1:5e:5b: 16:4d:2d:66:94:09:4b:0f:e2:59:3b:a2:f4:8c:a9: cf:6b:df:f6:00:cf:4f:9f:e1:59:78:ef:67:19:ee: 57:c2:0d:16:80:90:11:c9:93:b2:ab:3d:0a:d5:41: 9e:d0:63:e7:5e:b3:78:0a:42:24:b6:38:26:57:ea: 69:a2:9a:69:32:a6:97:da:42:e1:c1:0d:17:74:87: b8:16:36:9d:f7:d5:2a:b3:10:c7:24:1b:67:60:1f: b9:4f:b8:a9:f4:63:7d:df:f6:ca:42:52:31:dc:6f: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4B:89:0B:DD:62:FC:F2:60:52:5E:84:8C:37:0C:B0:43:27:DF:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:63:89:d8:96:b2:55:ff:40:7b:f2:75:50:76:29:ec:77:a7: 5c:e2:f1:a0:e6:c0:92:e4:bb:14:ed:15:20:e4:04:08:26:f1: f0:59:27:48:83:c0:66:93:7a:3b:c5:25:5f:61:ee:33:38:5f: ba:d7:70:17:41:63:64:09:cd:6a:84:b7:f0:31:b6:d3:cd:2e: 95:7e:45:37:13:3e:a1:46:53:20:b7:f9:2e:ce:96:dd:0c:0a: 82:31:d3:81:50:31:a1:20:6f:87:ed:94:e5:d4:9c:38:9d:c5: aa:72:64:e2:79:68:0a:d5:ef:18:c1:ad:74:a9:7f:bc:4b:12: 1a:1f:a5:6c:2b:f6:01:ab:0c:7f:bb:3a:1b:0f:f8:8c:1d:96: c1:0b:2c:3b:2b:0a:ab:41:41:13:83:99:34:78:80:88:b2:08: 0b:17:02:40:2c:d9:e8:6a:62:70:b2:1e:e2:2c:db:6b:39:c0: 11:24:b9:5d:6b:a6:bd:09:c6:b7:4e:97:c2:66:6e:f2:83:c1: a9:69:69:cf:63:f1:9f:08:02:57:4b:68:fe:9d:79:52:09:dd: 8c:64:08:9d:52:d3:96:a2:1d:da:77:72:85:98:c9:b0:da:d4: 4c:8d:3f:2a:7a:1c:13:e6:b4:93:43:18:16:af:11:67:83:4b: 5a:bb:e5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eKFZoDt2itjwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OWNkNDgzYmMtYTk3OS00MTdmLThiNWUtNjE2NGU3YjhkNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA103CPoPituxt031uhVqa/UvHtzOZIIxkfl5P w/aDI1s54EByqcmxst7EQ1T2bETvZjdlTQqvNlgzgsQedQ+Q/xxXUA96mqhJai4S yFb/4VpG60EIqSCMr7LXJnf9dnqExkkHTDVwHm0oGQti4vSy8nzaYGTUOrMyVtwj Iz8pB39F56R8pDYYlz4zvOx9C9pElLLhXlsWTS1mlAlLD+JZO6L0jKnPa9/2AM9P n+FZeO9nGe5Xwg0WgJARyZOyqz0K1UGe0GPnXrN4CkIktjgmV+ppopppMqaX2kLh wQ0XdIe4Fjad99UqsxDHJBtnYB+5T7ip9GN93/bKQlIx3G8//QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlLiQvdYvzyYFJehIw3DLBDJ9/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjJjODdkMjQtM2ZiNi0z YjZhLTgzNzEtZmI3NWRjNWI2M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVjidiWslX/QHvydVB2Kex3p1zi8aDmwJLkuxTtFSDkBAgm8fBZJ0iD wGaTejvFJV9h7jM4X7rXcBdBY2QJzWqEt/AxttPNLpV+RTcTPqFGUyC3+S7Olt0M CoIx04FQMaEgb4ftlOXUnDidxapyZOJ5aArV7xjBrXSpf7xLEhofpWwr9gGrDH+7 OhsP+IwdlsELLDsrCqtBQRODmTR4gIiyCAsXAkAs2ehqYnCyHuIs22s5wBEkuV1r pr0JxrdOl8JmbvKDwalpac9j8Z8IAldLaP6deVIJ3YxkCJ1S05aiHdp3coWYybDa 1EyNPyp6HBPmtJNDGBavEWeDS1q75Vk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:40 2025 by rpki-client