$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa File: f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa (raw, json) Hash identifier: KunvGr9S3UrUG8j83y/IggMuoX7mhLMwBpzJp4+CYis= Subject key identifier: 51:90:CF:B6:C2:FF:DA:CB:A2:D6:B2:0E:A8:21:0B:30:C7:18:0B:CE Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B5DD1E74B503484B1F8FCA000 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 13445 IP address blocks: 144.196.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e7:4b:50:34:84:b1:f8:fc:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ba33b661-19d2-4ba8-84d2-11e9d3cc3217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:df:37:9a:1a:33:90:20:75:71:36:36:16: 10:f2:a2:44:b5:88:8b:d2:fe:c9:4e:cf:17:5d:cb: 81:7a:dd:7c:61:92:9d:d2:47:b8:b3:ea:69:50:4a: 6f:58:20:59:b1:9a:7a:f5:74:37:83:0d:70:b8:bb: b7:3f:31:1c:c0:22:fc:0b:0c:4a:29:35:99:cb:75: 54:cb:90:9b:70:37:83:22:9d:2c:47:2e:7d:ee:56: 35:5d:67:8a:fb:a4:9c:50:c5:20:12:9e:69:ad:1b: 0a:12:15:19:a5:fd:d4:7d:98:a6:d6:13:5c:ce:59: 96:63:dc:d5:da:5b:64:a5:ff:2b:17:12:ff:b6:f0: fe:b4:f0:f2:0c:f0:35:80:bb:7e:48:4b:e8:d5:40: ae:93:9d:ae:9f:ee:c7:db:8c:93:4d:f6:08:f1:93: 1f:ea:e0:8e:cb:0e:f5:84:52:6b:cc:66:0e:54:fd: c4:71:2e:b8:62:7d:3d:45:4e:4a:e4:a5:7a:92:b5: c2:a9:ca:a2:69:4c:0f:d7:c5:be:95:7c:9c:3f:2d: 57:d4:ba:de:d3:ed:8a:fc:10:48:3a:7f:61:44:52: 6b:d2:43:bf:3b:a8:66:f1:95:9d:46:45:ec:dc:91: 16:a6:94:8a:87:37:65:f3:be:27:46:1b:9a:cf:02: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:90:CF:B6:C2:FF:DA:CB:A2:D6:B2:0E:A8:21:0B:30:C7:18:0B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f90598ad-7df4-39e9-b405-d70eb68c6f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:51:cb:d1:81:26:00:08:91:b3:6b:74:4a:f4:0d:fc:25:49: 42:c0:f7:fd:a5:0c:78:06:07:30:1f:90:26:8c:2c:db:05:1f: 02:a6:ae:9a:ba:89:dd:70:a3:61:c9:0d:e9:f9:a1:a6:94:2d: c4:77:0f:6d:85:5a:f1:1f:72:d7:43:10:d6:1b:16:c3:12:38: 15:c4:48:2a:88:84:f5:89:25:e2:69:93:e1:07:d8:5d:b0:32: 44:4a:48:f0:d8:86:ea:1c:ef:a1:e4:46:16:b4:9b:40:ad:d0: 41:d4:9f:8f:36:31:bd:64:59:c5:6f:a4:a8:38:96:3b:2e:ec: 5d:b0:2a:92:98:10:0e:0b:22:6f:34:70:2b:a6:40:98:e3:ca: 63:83:20:d4:8c:e3:af:cd:71:9a:01:d1:ff:a3:a7:c7:d1:e8: 61:db:bf:fc:85:c8:a9:f8:b6:51:42:64:2a:79:cf:b5:9d:0e: a6:ef:0d:a7:73:a8:33:a4:d6:68:50:f5:b9:d6:89:d4:5c:1e: 12:fc:27:2a:98:75:af:75:9f:3e:68:4c:a0:6a:62:68:83:cf: f9:0d:d2:da:ed:f5:f3:6d:b9:db:d5:bd:63:a8:db:93:da:1e: d8:d3:eb:58:41:13:e4:e0:b0:50:bd:73:fd:32:dd:c4:83:b3: b7:91:64:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0edLUDSEsfj8oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YmEzM2I2NjEtMTlkMi00YmE4LTg0ZDItMTFlOWQzY2MzMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+vfN5oaM5AgdXE2NhYQ8qJEtYiL0v7JTs8X XcuBet18YZKd0ke4s+ppUEpvWCBZsZp69XQ3gw1wuLu3PzEcwCL8CwxKKTWZy3VU y5CbcDeDIp0sRy597lY1XWeK+6ScUMUgEp5prRsKEhUZpf3UfZim1hNczlmWY9zV 2ltkpf8rFxL/tvD+tPDyDPA1gLt+SEvo1UCuk52un+7H24yTTfYI8ZMf6uCOyw71 hFJrzGYOVP3EcS64Yn09RU5K5KV6krXCqcqiaUwP18W+lXycPy1X1Lre0+2K/BBI On9hRFJr0kO/O6hm8ZWdRkXs3JEWppSKhzdl874nRhuazwLZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGQz7bC/9rLotayDqghCzDHGAvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjkwNTk4YWQtN2RmNC0z OWU5LWI0MDUtZDcwZWI2OGM2ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNRy9GBJgAIkbNrdEr0DfwlSULA9/2lDHgGBzAfkCaMLNsFHwKmrpq6 id1wo2HJDen5oaaULcR3D22FWvEfctdDENYbFsMSOBXESCqIhPWJJeJpk+EH2F2w MkRKSPDYhuoc76HkRha0m0Ct0EHUn482Mb1kWcVvpKg4ljsu7F2wKpKYEA4LIm80 cCumQJjjymODINSM46/NcZoB0f+jp8fR6GHbv/yFyKn4tlFCZCp5z7WdDqbvDadz qDOk1mhQ9bnWidRcHhL8JyqYda91nz5oTKBqYmiDz/kN0trt9fNtudvVvWOo25Pa HtjT61hBE+TgsFC9c/0y3cSDs7eRZOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:18:10 2025 by rpki-client