$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa File: cb2ce5ed-adbf-3c27-8560-b115662f08da.roa (raw, json) Hash identifier: dAKhvkTc61gvQvqkd2Ct7aqR4UH/W6zbZlh4ruAL93I= Subject key identifier: 30:3E:81:DB:FF:A8:10:AC:23:C4:C1:6D:B6:BA:5D:1A:D7:E7:A4:A2 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BA0D2607807EF222883C02130 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 13445 IP address blocks: 173.243.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:60:78:07:ef:22:28:83:c0:21:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=87dbaecf-00f2-46b3-bf6e-fb5fdaf27763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:60:74:1a:26:64:e6:4a:d4:46:86:a5:96: d0:dc:9e:b4:5a:4d:3f:f2:1c:a9:a5:be:8e:90:cd: 41:5f:d5:50:98:0e:8e:38:64:77:de:ac:e7:07:6a: 95:5d:f9:33:26:43:02:78:bb:e8:1a:77:f2:0f:6b: 65:0b:16:7b:7e:05:86:53:fe:13:14:cd:ae:1d:07: a2:81:cd:cc:b0:66:bc:f4:69:bd:16:fc:9f:7d:76: f3:56:d1:81:b8:2a:f9:d8:f2:19:5b:6e:2f:9d:2a: 0a:d7:dd:4e:69:bd:72:2a:29:2b:36:66:82:66:2e: 13:3e:40:36:a5:c1:42:38:27:a9:c2:49:ba:7f:f9: e9:5d:8d:a0:6a:d3:e3:73:ac:d0:78:9b:bb:13:8a: 0a:ba:4a:05:38:de:04:ea:f5:7c:cd:da:97:fb:0b: a3:8f:f1:16:dd:7b:b9:d8:d9:06:66:e4:8f:ed:e3: fd:67:a0:c6:43:cf:c6:b2:76:dc:d6:67:3c:36:f9: 44:02:50:80:d8:75:38:e0:ca:9c:35:fe:84:a0:85: 9b:eb:02:7a:3b:78:56:d4:0a:da:d4:79:31:d1:d3: 74:50:60:00:28:aa:4b:61:a6:95:ac:ba:48:87:f7: e0:7e:4d:88:d7:d3:40:06:f1:b1:7a:e2:67:18:1c: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3E:81:DB:FF:A8:10:AC:23:C4:C1:6D:B6:BA:5D:1A:D7:E7:A4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/cb2ce5ed-adbf-3c27-8560-b115662f08da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 173.243.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f3:8b:f8:94:95:24:6b:27:05:e1:ef:3a:40:fb:9f:38:b8: d6:ed:68:6b:b3:ac:9e:97:e5:df:9b:47:ca:b5:57:fe:ab:5e: 50:47:27:5d:bf:61:af:1d:92:c1:26:e7:13:54:c1:51:5b:3e: a6:12:42:93:98:9f:67:78:25:ce:22:3d:65:75:ca:ee:0d:bc: d5:26:98:df:42:9d:36:7b:38:d3:d9:a7:75:f1:c6:93:db:88: 21:2e:04:40:de:5b:2f:98:be:ab:dd:55:10:d8:2c:db:87:d8: 24:69:69:e3:03:5e:4a:8e:4c:d6:36:2f:10:ae:78:64:e5:0f: ba:1a:34:43:82:98:5f:b0:10:d8:7d:0f:48:d6:36:60:a1:13: ed:d5:03:99:89:90:29:b0:ab:6d:22:55:bf:3c:92:2a:11:3f: ba:dd:3b:b7:a7:e7:e4:6f:e1:44:5a:1f:2e:8e:98:1c:25:f1: a2:54:6a:38:48:1a:8e:1c:6a:50:db:9a:ec:ae:58:5d:a6:b2: 97:68:21:a6:ae:7c:3b:44:c0:ae:da:b1:24:52:4d:6b:64:19: 40:b1:a8:4d:6d:6d:80:58:ed:39:7e:f0:e4:a3:c6:dc:c7:6e: 7e:89:bf:21:fc:a8:7e:13:77:2a:48:fa:78:11:f8:c8:78:7e: 57:b1:65:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mB4B+8iKIPAITAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODdkYmFlY2YtMDBmMi00NmIzLWJmNmUtZmI1ZmRhZjI3NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO1gdBomZOZK1EaGpZbQ3J60Wk0/8hyppb6O kM1BX9VQmA6OOGR33qznB2qVXfkzJkMCeLvoGnfyD2tlCxZ7fgWGU/4TFM2uHQei gc3MsGa89Gm9FvyffXbzVtGBuCr52PIZW24vnSoK191Oab1yKikrNmaCZi4TPkA2 pcFCOCepwkm6f/npXY2gatPjc6zQeJu7E4oKukoFON4E6vV8zdqX+wujj/EW3Xu5 2NkGZuSP7eP9Z6DGQ8/Gsnbc1mc8NvlEAlCA2HU44MqcNf6EoIWb6wJ6O3hW1Ara 1Hkx0dN0UGAAKKpLYaaVrLpIh/fgfk2I19NABvGxeuJnGBy/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA+gdv/qBCsI8TBbba6XRrX56SiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2IyY2U1ZWQtYWRiZi0z YzI3LTg1NjAtYjExNTY2MmYwOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDzi/iUlSRrJwXh7zpA+584uNbtaGuzrJ6X5d+bR8q1V/6rXlBHJ12/ Ya8dksEm5xNUwVFbPqYSQpOYn2d4Jc4iPWV1yu4NvNUmmN9CnTZ7ONPZp3XxxpPb iCEuBEDeWy+YvqvdVRDYLNuH2CRpaeMDXkqOTNY2LxCueGTlD7oaNEOCmF+wENh9 D0jWNmChE+3VA5mJkCmwq20iVb88kioRP7rdO7en5+Rv4URaHy6OmBwl8aJUajhI Go4calDbmuyuWF2mspdoIaaufDtEwK7asSRSTWtkGUCxqE1tbYBY7Tl+8OSjxtzH bn6JvyH8qH4TdypI+ngR+Mh4flexZVg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:53 2025 by rpki-client